last executing test programs: 56.624895304s ago: executing program 0 (id=1925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000500000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c001480"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 56.55855668s ago: executing program 0 (id=1926): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/150, 0x96}], 0x1, 0x3ff, 0x2) 56.557984304s ago: executing program 0 (id=1927): bpf$TOKEN_CREATE(0x24, &(0x7f0000000780), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x4, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2016}}}, 0x7) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000080)=[0x1e, 0x9, 0x2, 0x4, 0x4, 0xffffdffa, 0x2d7b, 0x40000003, 0x5d, 0x5, 0xfffffffa, 0x8, 0x6, 0x880e, 0x5], 0x2, 0x4000007}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb90402200800fd00d0cf7c13000000a10a000700014002020c600004b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95647daffffffffff1f215ce3bb9ad809d5e1cace81ed0bff07000000000000007276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a682", 0xd5}], 0x1}, 0x40080) syz_clone3(&(0x7f0000000600)={0x41000, &(0x7f0000000380)=0xffffffffffffffff, &(0x7f00000003c0)=0x0, &(0x7f0000000400), {0xc}, &(0x7f00000004c0)=""/92, 0x5c, &(0x7f0000000580)=""/3, &(0x7f00000005c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58) sched_setscheduler(r3, 0x0, &(0x7f0000000680)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={0xffffffffffffffff}, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000280)=ANY=[@ANYRES16=r2], &(0x7f0000000080)='GPL\x00', 0x5, 0xc9, &(0x7f0000000940)=""/201, 0x0, 0xf, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x6}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r8, @ANYBLOB="2f0000000000000000000041f78d2557f61ee800e11306f6449437c50b9b22e0edf27f6d0b8ed67318e2ff147bc338051a19afd78e812c9179b8a16ddcf6b565fd22972cc6dd", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000900)={r6, r6, 0x16, 0x0, @val=@tcx={@void, @value=r7, @void, @void, r9}}, 0x1c) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0x0, 0x110a}, 0xc) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0xff, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32=r10, @ANYRES32=r5, @ANYBLOB="2d0000317f5e4e916d82edb3", @ANYRES32=r11, @ANYRES64=r9], 0x20) ioctl$COMEDI_CMD(r0, 0x80406409, &(0x7f0000000340)={0x0, 0x80, 0x0, 0x8f, 0x80, 0x5, 0x4, 0x0, 0x40, 0xffffffff, 0x10, 0x1, &(0x7f0000000140)=[0x7, 0xc3, 0x7, 0x5, 0x4, 0x1, 0x6, 0x3], 0x8, &(0x7f0000000280)="04bf6eed41ddc1d3a2cdc0700c6bae0064c1395734865b262fc3760214138e00d9ac2005651d390cf45f6851c46220ab180f54cc2fc7a1b03edc069f4b69643e268993046d4b6db15e38bb994ae8c5ce87fd23fdac1b63137b0755d50e1fcdfd63b329a3c18acc32180afab43862a17542756728afc755654aa7dfa0f1b261bae34dfda115d50fcd972c440091a86ac8a4e90c8742e5c8", 0x97}) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 54.986437322s ago: executing program 0 (id=1936): sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x13, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000000) 54.858193772s ago: executing program 0 (id=1938): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100025bd7000ffdbdf25210000000c00060003000000030000000c002d80050004000100000008000300", @ANYBLOB="7f46b5968459c9bd01ed22b444b159f56fde707f622c354f419ca0bcaaf3de27df48eb37ef585c14e900ac3b7735a201f4c0687848383aa1b985a59033bf536cc9cfb00bd3745b19be95a5eb7ca20f7bd9454161c4270b8783aac82697e9ac938e357b532ab7e8c1cacbac201a51f04b845d534c1fd6d2b4a4ea6b2dd2", @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) 54.857702007s ago: executing program 0 (id=1939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000066c0)=""/102374, 0xfffffffffffffc46) r4 = mq_open(&(0x7f0000000080)='/dev/nullb0\x00', 0x800, 0xa, &(0x7f00000000c0)={0x0, 0x65c, 0x4, 0x1}) mq_notify(r4, &(0x7f0000000300)={0x0, 0x28, 0x0, @thr={&(0x7f0000000100)="20720b5ea27ee1fbd1b057fff58a3e67c97b36e05f6f", &(0x7f0000000200)="7a78221c6be8810b8db7fd62d23fd22b39407d5d63f325415797497f63bf57109f8f1422e111f6c4872fadda5e510b4ec601b1fbbc758183285630599aef06a25f010b5194f2fa2efac6db837dd8d08abd62f9f82567c59be378fad0d1c2a220dc7506fd5f12960e50b56aa87afa717777c87661c238ff175e7e01d949c6d48fdd8f9b4b847d363d6be219bb0c43b01561653962cda01eae9ea6b6a2579163aa5ccce295def0a6a911582c4cbe3589f33386c50b24de92c0bc35bd56b0737348eb0532cec2c59f4dca7b44a5feea9889c6b2184d88decceaa0db8f32373e5ff4d2daaf0c7ad1edd060a87ef3694256c3e5d5872e"}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x2, 0x5003) process_vm_writev(r1, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/107, 0x6b}], 0x1, &(0x7f0000001bc0)=[{0x0}, {&(0x7f0000000a00)=""/40, 0x28}], 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x40}}, 0x0) 44.23837963s ago: executing program 2 (id=1990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="053f1c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 43.858440885s ago: executing program 2 (id=1991): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/150, 0x96}], 0x1, 0x3ff, 0x2) 43.239152225s ago: executing program 3 (id=1995): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, 0x0, &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000000c0), 0x4) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, 0x0, 0x20000011) unshare(0x26020480) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x103c00, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) fchdir(0xffffffffffffffff) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) 42.393019462s ago: executing program 2 (id=1999): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) bind(r1, 0x0, 0x0) socket$inet(0x2, 0x1, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000011c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fcdbdf25190000006c0001800800030002000000080003000500000014000200626f6e645f736c6176655f31000000001400020076657468305f766c616e0000000000000800030001000000140002007767300000000000000000000000000014000200726f73653000000000000000000000004800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f62726964676500080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800010072df07aa5ee6ba804c4e3a5a710f223692171a6ea6a0ffb4b7e3d0c8bce79cae9d6d2686802f008a4c90ce71b70687bbaaebf1f09777195d61e66baa71f7b0c4e860226a7871d2a25f451f307b9106029795e1afa8ace6e0c31355bf0fcf9e5cdd1ab0264cfd2a637bbe4ea60ee06a63571604beda73f697720de8f6965d7167519810c746ad3da4f4ce383f695a9ae9a7917d0f02ab67", @ANYRES32=0x0, @ANYBLOB="280001801400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400020065727370616e300000000000000000000800030002000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f6d61637674617000000060000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020065727370616e300000000000000000001400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e3000000000000000000008000300020000002000018014000200626f6e645f736c6176655f300000000008000300000000002000018008000300010000001400020076657468305f746f5f7465616d000000600001800800030003000000140002006d6163736563300000000000000000000800030002000000080003000100000014000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e30000000000000000000"], 0x23c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) open(&(0x7f0000000280)='.\x00', 0x0, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) recvfrom$inet6(r7, &(0x7f0000000400)=""/112, 0x70, 0x40000000, &(0x7f0000000480)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, 0x1c) writev(r8, &(0x7f0000000340)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000040)=0x200) write$dsp(r9, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'macvlan1\x00', 0x4420}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@deltaction={0x48, 0x31, 0x4, 0x70bd27, 0x25dfdbf9, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x48}}, 0x20040054) 41.783353247s ago: executing program 3 (id=2000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="053f1c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 41.296228368s ago: executing program 3 (id=2002): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000180000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)={0x7d4, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x7a4, 0x8, 0x0, 0x1, [{0x498, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x468, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x6}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2bc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x274, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x7d4}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="ac67926f5a705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,\x00']) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x39011, 0x0) 40.20934168s ago: executing program 3 (id=2004): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0/../file0/../file0\x00') ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) bind$x25(r3, &(0x7f0000000100), 0x12) listen(r3, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) 39.75622296s ago: executing program 32 (id=1939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000066c0)=""/102374, 0xfffffffffffffc46) r4 = mq_open(&(0x7f0000000080)='/dev/nullb0\x00', 0x800, 0xa, &(0x7f00000000c0)={0x0, 0x65c, 0x4, 0x1}) mq_notify(r4, &(0x7f0000000300)={0x0, 0x28, 0x0, @thr={&(0x7f0000000100)="20720b5ea27ee1fbd1b057fff58a3e67c97b36e05f6f", &(0x7f0000000200)="7a78221c6be8810b8db7fd62d23fd22b39407d5d63f325415797497f63bf57109f8f1422e111f6c4872fadda5e510b4ec601b1fbbc758183285630599aef06a25f010b5194f2fa2efac6db837dd8d08abd62f9f82567c59be378fad0d1c2a220dc7506fd5f12960e50b56aa87afa717777c87661c238ff175e7e01d949c6d48fdd8f9b4b847d363d6be219bb0c43b01561653962cda01eae9ea6b6a2579163aa5ccce295def0a6a911582c4cbe3589f33386c50b24de92c0bc35bd56b0737348eb0532cec2c59f4dca7b44a5feea9889c6b2184d88decceaa0db8f32373e5ff4d2daaf0c7ad1edd060a87ef3694256c3e5d5872e"}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x2, 0x5003) process_vm_writev(r1, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/107, 0x6b}], 0x1, &(0x7f0000001bc0)=[{0x0}, {&(0x7f0000000a00)=""/40, 0x28}], 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x40}}, 0x0) 39.713670937s ago: executing program 3 (id=2007): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x4b6a, &(0x7f00000006c0)={0x2208, 0x5, 0x1, 0x0, 0x15, "0400"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) move_pages(r2, 0x0, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440), 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 39.527016679s ago: executing program 1 (id=2008): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x3, 0x3, 0x2, 0xb, 0x10}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet(0x2, 0x80000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x3f00) write(r1, &(0x7f0000000800)='0', 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000f8ffffff00000000000000008500000036000000850000001100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x88}, 0xfffffffffffffd8f) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f0000000440), 0x200480, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x191, 0x480, 0x556, 0x3f, 0x32, 0x2, 0x0, 0x1, {0x400000}, {0x0, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1ffffff, 0x1}, 0x1, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe08, 0x0, 0xe8e, 0x0, 0x0, 0x1, 0x0, 0x3, 0xade8a9ab0357957f}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3, @ANYBLOB="1c0e2d558ffedff9c554cefc88cb910aec98e5abec64a6af41ed501954971adfd79d71a9f39723eea4734ec3bd3eb47d017f66451d370289bcd43a891aa17101d19a8f1767ad586e66e3178e0d49fba90ba53f"], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x11040000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x34, 0x4, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) 39.237517746s ago: executing program 3 (id=2009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r4, 0x0, 0x5, 0x0, &(0x7f0000003f80)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="18000004ff03000000000000fb02000018110000c761722f34d1ec4dca5ededd94f8958b7118a74a376c3683fa9184da82621e86794ff874d26109618fafe95e5c6c41182755f0e8f9d5e73f9e5fd1aa1cd5d4643fae", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000018000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000041718000000000085100000070000009cb2f0fffcffffffb7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b70200000000000085000000006d9c58b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x800) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r8, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfff, r7, &(0x7f0000000340), 0x2}]) write(r5, &(0x7f0000000100)='32', 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x23, 0x790, 0x80000000002, 0x180, 0x2000000400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x8000000, 0x385310}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 39.152746742s ago: executing program 33 (id=2009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r4, 0x0, 0x5, 0x0, &(0x7f0000003f80)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="18000004ff03000000000000fb02000018110000c761722f34d1ec4dca5ededd94f8958b7118a74a376c3683fa9184da82621e86794ff874d26109618fafe95e5c6c41182755f0e8f9d5e73f9e5fd1aa1cd5d4643fae", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000018000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000041718000000000085100000070000009cb2f0fffcffffffb7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b70200000000000085000000006d9c58b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x800) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r8, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfff, r7, &(0x7f0000000340), 0x2}]) write(r5, &(0x7f0000000100)='32', 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x23, 0x790, 0x80000000002, 0x180, 0x2000000400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x8000000, 0x385310}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 39.126333457s ago: executing program 1 (id=2011): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x7}], 0x1, 0x43, &(0x7f00000010c0)={0x0, 0x989680}) 39.047517417s ago: executing program 1 (id=2012): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000180000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)={0x7d4, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x7a4, 0x8, 0x0, 0x1, [{0x498, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x468, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x6}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2bc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x274, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x7d4}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="ac67926f5a705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,\x00']) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x39011, 0x0) 39.004062561s ago: executing program 2 (id=2013): socket$igmp(0x2, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffffda}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) r1 = getpid() pipe2$watch_queue(&(0x7f0000000280), 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x844}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000300), 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000400)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x20000, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000200)={0xfffff000, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000003c0)='erofs\x00', 0x1000d, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1c}}, 0x40) 37.980046989s ago: executing program 2 (id=2014): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x30}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r1, 0x5, 0x4, [0x6, 0x8, 0xd, 0xfffe]}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0x5, @loopback, 0x5}}, 0x44eb000, 0x3, 0x2, 0x4, 0x34400000}, &(0x7f0000000180)=0x98) r3 = openat2$dir(0xffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x40040, 0x1e8}, 0x18) r4 = openat2$dir(0xffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x14400, 0x1, 0x5}, 0x18) renameat2(r3, &(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00', 0x5) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000340), 0x400281, 0x0) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000380), 0x4) syz_emit_vhci(&(0x7f00000003c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x83}, "4a10af85093eda25a9ca1fced4b99393d794f4cabf4c7c7bfbdea61022728b146e8b7186f13d095667af01d156d6d60c428b675b4e932140ccaf53b9f2a23fa0932e693e96225b462a1ac97bb8518ab1edde32f6ae5837116cb33da6001c112120118761daf1db7a1e84840dd6a4ab438a329eb8f4ecb8d7176418f9980b848166a93f"}, 0x87) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000480)={'wg2\x00', 0x8}) fcntl$setflags(r5, 0x2, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000004c0)=[@in6={0xa, 0x4e23, 0x9, @empty, 0x2b8f}, @in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x2c) connect$phonet_pipe(r5, &(0x7f0000000500)={0x23, 0x7, 0xf0, 0xc}, 0x10) r6 = signalfd(r2, &(0x7f0000000540)={[0xe07, 0x2]}, 0x8) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000580)=""/119, &(0x7f0000000600)=0x77) unshare(0x10000200) r7 = openat$zero(0xffffff9c, &(0x7f0000000640), 0x400000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000680)=[@in={0x2, 0x4e21, @local}], 0x10) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f00000006c0)=""/69, &(0x7f0000000740)=0x45) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r3, 0x24, &(0x7f0000000780)={0x665, 0x1}, 0x0) connect$inet(r7, &(0x7f0000000800)={0x2, 0x4e21, @local}, 0x10) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x2, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r8, 0x4068aea3, &(0x7f0000000940)) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f00000009c0)={r1, 0x3}, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000002b40)=0x0) sendmmsg$sock(r5, &(0x7f0000002e00)=[{{&(0x7f0000000a00)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x4, 0x1, 0x3, {0xa, 0x4e22, 0xc, @local, 0xa7}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a80)="925453097939918ce7874c20ab0d7b10df987a7f8d3feba867ca0de99927f60e014d93873e64a4e4145e9b0c79021ca45a869d954edd75e258b802ca6a07aa52904039c9b82b4f111837276bfeb6d3c1241c9110a18e3d149cea84c1886d588d94c9e2e2d244e491c6fa0a22a336911824", 0x71}, {&(0x7f0000000b00)="b658e8d329d95e236ec129331bd2c90fa1936659dd76e2bd20e6e245db623ed261a8ba1a88b022dec3d0b4c277f447ea2e152f12b4c083c4465f747e0aa6b81c7405729597", 0x45}, {&(0x7f0000000b80)="5bfbd68d053d57211bb6f89e90a74dbb6d93d928bfdb46d39a2fa90005880e1fd0752fc80170847edd6561779f02673291cb7b3b52690f0fce800431de2613a55f5709261d242f158342a7dbb7e23dd73bfc1f6e8bd72dd517a8e69d773c5a1fed0d902cff33c67b87cd8cb882b8", 0x6e}], 0x3, &(0x7f0000000c40)=[@mark={{0x10, 0x1, 0x24, 0x8}}, @mark={{0x10, 0x1, 0x24, 0x7d6d}}, @timestamping={{0x10, 0x1, 0x25, 0x531}}, @mark={{0x10, 0x1, 0x24, 0x9}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c80)="86dfd35816a9cac12002d222c34d6ce8210387356c66cb2531d5ab34593ec18aa885e354f87651b7275e661a77870b38cdc45e4149b2d2590c451e88b0da0b220a21148406a94f032694426e4fefc6c13c2b1d5871f57c817ae553cdbd9558aa555a33ceb21d434f5438e0cd0d52a65db2e7477950ce79e0d3fd6099e0cee73b5db6b4d63e57580c56d75ff2810983e9f38315078c01af83c1ab", 0x9a}], 0x1, &(0x7f0000000d80)=[@timestamping={{0x10, 0x1, 0x25, 0x9}}, @mark={{0x10, 0x1, 0x24, 0x8}}], 0x20}}, {{&(0x7f0000000dc0)=@caif=@rfm={0x25, 0x6, "4fc49b8a4fc45fc31e94abf717d463ae"}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000e40)="e222d67ae0641f51283baeadf95ccc6170198d5a3c0662b2cc62dadb6d4666a5b63baabf1fa825dc943ef69bf8d7dcdd68c70bb0048173e967c09e8f885baf2c2da2973166dc9ff5cf0b1834276290e25b4e078a1e426f5ae7f8009c01b5faa5b7cd99a0", 0x64}, {&(0x7f0000000ec0)="65b798aad277db37daf59b3cbd0227f18a27dd274afbd79790483b64fd20521ae2b5759a614d4ebed59e153ecc69da4da59a826048ae681284ba9516cfd78e4503b137ea2316b1856128e11a32ebf0b0893875d7b0e5be062662b4fdd7bebc4e8f106f78887de6e0ebbe65334e42b0a2f0662fcfe654daeea9699d4a5bec8afe43d617bd173bc4ac8ecb7b6b078c4d1406970ad2f208e1108fc159f776f80207f2ee6269ecc9dadb365c81b37dc89cd1b22b50fa89f3cdf7fb0b711e15695cd6d8e194634b60eb24cb072ddbac26523af157cf905faa08a55ce299a532c3a9e0caf38eddc3be9ddff2d4095a7a6f3e179b15", 0xf2}, {&(0x7f0000000fc0)="61fd7a38c8f9c544e53d2f7ceb13f833627c3cc7316f50529752c1d4cbf7b10188083a5c806212b58afa759354240e27a8e1dbca153475ac25325cb4689549f378f61980f5a1e7608fb74635c79d0a96b5143438b58f414b291550cfab361b3f1c8c033c89864835aa72fbe957fcd318fa98906032a8d2868799c771993283fd8f2735e41153a8a29d3177632c914c275749566f244ff0171982e2a899304a8cca5808fbe2045b3915dff471b97e514b43d65af163bfb99057c6ea4250a4163f2a2133e78c34e0a5ffd21fbba6ae650216f47c7abdb63bca50dc7e2b1e04883ec9d9878c834e36647ace75c5baa31f", 0xef}, {&(0x7f00000010c0)="5769bca5b839ddbbc1b52ea10096833d02c115aa843bdf8e8f3fd7c3eb914c2d5eea515654024b48f0fbdec5ef657ac921f302dc2f", 0x35}], 0x4, &(0x7f0000001140)=[@txtime={{0x14, 0x1, 0x3d, 0x4}}, @txtime={{0x14, 0x1, 0x3d, 0x3}}, @mark={{0x10, 0x1, 0x24, 0x9344}}, @txtime={{0x14, 0x1, 0x3d, 0x8}}, @timestamping={{0x10, 0x1, 0x25, 0x5}}, @mark={{0x10, 0x1, 0x24, 0x95}}], 0x6c}}, {{&(0x7f00000011c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x7, @remote, 0x2}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001240)="d8a27b7de63394d14c4efcd4f9501f117cead711e68ddafb906acd10053b1ec8a65e8594e08454613d4fba30ddfd364629c6682de7902f36094afdbda56097784ca655fbb1c82c94260b0cf14dc0822356a1c286eb7595b9dc049de618071228554e205443dc1cc30275675307ef56c3b18ed50ccf8c9527360bc419c3b31cb03ce4aeaf18978dca715e745e43c8284cd7b141ba8fd24cde5e4329695b706cbd5f2120d19042104f519e952820dd8956c234ae8625a3213eb27ec1c73cc9bed5c017c8d66c31b77134614be212c827d51a9f603c6a58702b6dd040a16e94421143d37bfd4126fb9c888876ec5b56a1c64d2b", 0xf2}, {&(0x7f0000001340)="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", 0xff}, {&(0x7f0000001440)="7566aa7b79c88bc79c837c81030893c330f580f8d4736d02b1cb28b08344fb6c2948c0d3caea73eccb904d601864dca07d14a1db9cf0a2e754aedbf14e65e9fc6f3ec9b1a8d3cf42f06359ff9585d38fdec5543a640afa6f8f7eb647763e708b98bcf87345c70b6ac0c28e92fe22c1061309b82fea6e6406e00a2cdfec7df2332d57d14479fd54d1c68a2fcc", 0x8c}, {&(0x7f0000001500)="efa635d73a4e478ea952310ad3e71ebb58e223fc4ea28870f5911acc21d8c780c3fdc3f89693c11647c4c9e17d585dffafb16770c2d5ee32bf900bb931901bf3db834f902c3308cd1af392fa44caf5bf6d2f273823ab318aa63f813f31e58d0538399823956628b5e2dbb8a5656f0a4c3448ff82361602647ff5ae7a055f9dd380dd14fbd29c5751e189d03202a7a72ad176afb648359e3143c3c993ff1cb5fc6da18a93a2e6921249076bf189ca70d5070d4e5443493032b32a272ad83275618684f8b5b50dff75968f1c54a0feafdd642a33753b955085c8", 0xd9}, {&(0x7f0000001600)="078e4ce5603c63183580560ad790f51972a42e4acdcf79d8aba5cb1f14cfa32bca8edda18142f2fa55e4c0839dafbdb76097d4024adce7c21bf1737a706277e1c9fca3c7e5277dcd2cb41a708f08a532bb4e0e8d3c7f58b416db8824369b92cfd19690faecb3e5db32f8df0e5e6ac80274b61e84d9f88ec1da84963139bc999288cfebce986bc02460fc2875fe1d66a83d851465be24dede24298a97dd01d2258dce64deaf0724bd6956ad3d2019", 0xae}], 0x5, &(0x7f0000001700)=[@timestamping={{0x10, 0x1, 0x25, 0x80000001}}, @txtime={{0x14, 0x1, 0x3d, 0x6}}, @txtime={{0x14, 0x1, 0x3d, 0x3379}}, @txtime={{0x14, 0x1, 0x3d, 0x2}}, @timestamping={{0x10, 0x1, 0x25, 0x5}}], 0x5c}}, {{&(0x7f0000001780)=@ethernet={0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="df580f46b4639082663a9d593751bf225250d9e0fbca89a864ba384678099bf305101c110ff416f633b39aa328ab446c8b37d0379b675dcdc0a862464f1d9c14ab53a2cccf3ec1f8bc0464c83f9c3cee13a9ef4f63456a65dd4276b857a3ea73c246eb002c8e05b7b8dc2b821b1b6386616b3b0c5976679ada666af4e7c4c9ccc73369af5b4ae796b3a8d21e03487a1ec777f767f5e793de4886d2b22eb37dcdf241fdcc148a8e533cc79bfb0147277f0d4e7686098c660d3a2840dc7e034a3752810ebd327478779d7e6140ded35c5e59eaaad47a325c13b121c610519202ad622bd263cf56aa1107ae88da6a", 0xed}], 0x2}}, {{&(0x7f0000002940)=@l2={0x1f, 0x9, @any, 0x2, 0x2}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000029c0)="5d43036561e2899909b3e6657902dbc5759e20e8ab9233e8a48cbe6870bb9f7222e7206e1ef3a566d880bafa692e13fb254dd868f344c4564f4488ae18dd9c1c00ece107b38d89892d025c0a56da745665f895a108fb9d10eb9e33a9bb449c5b6314dea360052261aeca9ea5ee1457b292098dc4b53e09b75d85469397895650ef2654", 0x83}], 0x1, &(0x7f0000002ac0)=[@mark={{0x10, 0x1, 0x24, 0x8}}, @mark={{0x10, 0x1, 0x24, 0x3}}, @txtime={{0x14, 0x1, 0x3d, 0x7}}, @mark={{0x10, 0x1, 0x24, 0x7}}, @mark={{0x10, 0x1, 0x24, 0x10}}, @txtime={{0x14, 0x1, 0x3d, 0x9}}, @mark={{0x10, 0x1, 0x24, 0x4}}], 0x78}}, {{&(0x7f0000002b80)=@nfc={0x27, r9, 0x0, 0x3}, 0x80, &(0x7f0000002c00)}}, {{&(0x7f0000002c40)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002cc0)="00449004c64bbe", 0x7}, {&(0x7f0000002d00)="dd40ba", 0x3}, {&(0x7f0000002d40)="0993e67290a7f5b2e59f662c881e0f43a1f30f7b86bf98d5f31042dd515a64574eee5525ec2f61faaa4f479a5d12563ec7bc75cf6eb9aabec9162a4647097aaea6f648", 0x43}], 0x3}}], 0x8, 0x20008000) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x541c, &(0x7f0000002f00)) 37.942734968s ago: executing program 1 (id=2015): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12a021e799ec29b9000000040000000400000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb}, {}, {0xfff2, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x24004840) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r7 = io_uring_setup(0x28c1, &(0x7f0000000000)={0x0, 0xf78, 0x4000, 0x0, 0x277}) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r9, 0x12, 0x0, 0x4) ioctl$FE_GET_PROPERTY(r8, 0x80086f53, &(0x7f0000000000)={0x4, &(0x7f0000000200)=[{0x16, '\x00', @data=0x906, 0xe19}, {0x21, '\x00', @data=0x1, 0x51}, {0x8, '\x00', @buffer={"bd976aa0f0efe2d34e2fe9d20402e17e90582757a19378d55f3f45f4707aa2e4", 0x20}, 0x5}, {0x16, '\x00', @buffer={"e131ed21519fd97e492fe766512d6eab76e701312ff783d057bbfafa4f5288ac", 0x20}, 0xff}]}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r11}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r12 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000080), 0x40200, 0x0) syz_clone3(&(0x7f00000000c0)={0x10a0a2000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r12}}, 0xfffffffffffffe42) 37.848170426s ago: executing program 2 (id=2016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x300, r8, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 37.408026055s ago: executing program 1 (id=2017): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x4b6a, &(0x7f00000006c0)={0x2208, 0x5, 0x1, 0x0, 0x15, "0400"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) move_pages(r2, 0x0, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440), 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 36.186450602s ago: executing program 1 (id=2018): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x27, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000180)=0x1f, 0x4) write(r2, &(0x7f0000000140)='namespace0.0', 0xc) close(r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='46618451-8636-4076-a006-25816b8ff40c', 0x24) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) symlinkat(&(0x7f0000000280)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./sys/bus/nd/devices/pfn0.0/mode\x00') sendmsg$nl_generic(r6, &(0x7f0000002d40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002d00)={&(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x1078}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080c0) write(r6, &(0x7f0000000340)='namespace0.0', 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000500)=0xffff0080) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r10 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0x0) keyctl$invalidate(0x15, r10) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000000)=0x3) write(r7, &(0x7f00000003c0)='pfn0.0', 0x6) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) 22.27002196s ago: executing program 34 (id=2016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x300, r8, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 20.728980881s ago: executing program 35 (id=2018): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x27, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000180)=0x1f, 0x4) write(r2, &(0x7f0000000140)='namespace0.0', 0xc) close(r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='46618451-8636-4076-a006-25816b8ff40c', 0x24) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) symlinkat(&(0x7f0000000280)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./sys/bus/nd/devices/pfn0.0/mode\x00') sendmsg$nl_generic(r6, &(0x7f0000002d40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002d00)={&(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x1078}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080c0) write(r6, &(0x7f0000000340)='namespace0.0', 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000500)=0xffff0080) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r10 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0x0) keyctl$invalidate(0x15, r10) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000000)=0x3) write(r7, &(0x7f00000003c0)='pfn0.0', 0x6) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) 3.652988436s ago: executing program 5 (id=2010): socket$igmp(0x2, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000001) r1 = getpid() pipe2$watch_queue(&(0x7f0000000280), 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x844}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000300), 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000400)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x20000, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000200)={0xfffff000, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000003c0)='erofs\x00', 0x1000d, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1c}}, 0x40) 3.300454891s ago: executing program 5 (id=2021): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000180000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)={0x7d4, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x7a4, 0x8, 0x0, 0x1, [{0x498, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x468, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x6}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2bc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x274, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x7d4}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="ac67926f5a705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,\x00']) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x39011, 0x0) 3.119967768s ago: executing program 4 (id=2006): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) read(r0, &(0x7f0000000080)=""/37, 0x25) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0xce21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) ioctl$XFS_IOC_GETBMAP(0xffffffffffffffff, 0xc0205826, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x6}) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x20, 0x4, 0x4, 0x0, 0x0, 0x80, 0x0, 0x2, 0xfe, 0x3, 0xff, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000003c0)={0x2c, r2, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x2c}}, 0x810) 2.258238931s ago: executing program 5 (id=2022): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005400)=@delchain={0x24, 0x65, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xffe0, 0xe}, {0x8, 0xfff1}, {0x2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4048840) (fail_nth: 3) 2.138111885s ago: executing program 4 (id=2023): socket(0x1e, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = syz_ublk_setup_io_uring(0xd30, &(0x7f0000000100)={0x0, 0x11aa, 0x400, 0x2, 0x313}, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000003c0)={&(0x7f0000002000)={[{&(0x7f0000000340)="f2816b4da9bc64351dbd293ca3bbe9804a894729259fd6f6c97458f103cd9dd1f6123032a690d2add5e3bdb51c34e67d2da6bf30ea63865a", 0x38}]}, 0x1}, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000000fe800000000700000000000000000000fe8000000000000000000000000000aa000000000000000000"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c010000160001000000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa4e240000000000000000a0003b00", @ANYRESOCT, @ANYRESHEX, @ANYRES16], 0x11c}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket(0x28, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe48, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2, 0x4}, 0xfffe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8820}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000007240)=[{&(0x7f0000006f80)=""/7, 0x7}], 0x1, 0x4, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) ftruncate(r5, 0x101fff) copy_file_range(r5, 0x0, r4, 0x0, 0xe003e45c, 0x700000000000000) openat$uinput(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) 2.137852416s ago: executing program 5 (id=2024): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x4b6a, &(0x7f00000006c0)={0x2208, 0x5, 0x1, 0x0, 0x15, "0400"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) move_pages(r2, 0x0, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440), 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 852.503129ms ago: executing program 5 (id=2025): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./proc\x00', 0xdd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) dup2(r0, r0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x9, 0xd75, 0x1, {0x1, @vbi={0x8, 0x8000, 0x3, 0x41416770, [0x82, 0x7], [0xc153], 0x1}}, 0xd3}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r2 = epoll_create(0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000280)={0x1}) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000463000/0x2000)=nil, 0x2000, 0x17) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r4], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x24000000) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) close(0x3) 610.175328ms ago: executing program 6 (id=2019): socket$igmp(0x2, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffffda}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) r1 = getpid() pipe2$watch_queue(&(0x7f0000000280), 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x844}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000300), 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000400)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x20000, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000200)={0xfffff000, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000003c0)='erofs\x00', 0x1000d, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1c}}, 0x40) 583.335733ms ago: executing program 7 (id=2020): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='attr\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a0012"], 0x30}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1c8, 0x178, 0x178, 0x1c8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xc8, 0x128, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x1, 0x6], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x7, 0x7, 0x0, 0x4, 0x1], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x1, 0x4}, 0x8, 0x1cc32a6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x5, 0xe, 0x0, &(0x7f0000000080)="0000000000040000000002015370", 0x0, 0xff, 0x0, 0xfffffd0a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) getdents64(r7, &(0x7f0000000100)=""/134, 0x86) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='attr/current\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[], 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000080)=0x13) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000180)=0x3) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 477.778898ms ago: executing program 4 (id=2026): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000340)='affs\x00', 0x104000, &(0x7f00000001c0)='grpquota') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/132, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lremovexattr(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9040, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x2}}, 0x50) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, r4, {0x7, 0x2d, 0x9, 0x2, 0xe54, 0x2, 0x0, 0x400, 0x0, 0x0, 0x80, 0x7}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(&(0x7f00000000c0)='streaming/class/hs/h\x00', &(0x7f0000001b00)='./my_configfs\x00') mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r5, &(0x7f0000000400)="000041a0a64c3accfbde6ca8f69f98972604b91fc64d4ab3c15bac7b2301d5c02e63692e8f672dcc45f7a90f06a3b648c32db31b04ccf80893b701ff1674357e92729a4db16ad10544ecf2ae1e1dd8cf1a896f17f3bf3387fadfbdd8d163cbfde4f00dd495d797afe51ff91354c060465becade6bc136457611d030fb6b006bb961122762ff41731c0c545d6a7dea763c99af9585f14f13df4712a4acc76cb37f0c9b5fd052036012a0f5f0c2ec44f7babae31aff76eee0808034538df1e14e9137996df730294d13900"/211, 0xfffffffffffffef4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r6) 0s ago: executing program 6 (id=2027): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0x46951}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl(r4, 0x8b1a, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket(0x10, 0x803, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) writev(r6, &(0x7f00000016c0)=[{&(0x7f00000001c0)="b33e", 0x2}], 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) kernel console output (not intermixed with test programs): to 1000 [ 311.715577][ T5518] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 311.880392][ T5518] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 311.888573][ T5518] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 311.898690][ T5518] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 311.905796][ T5518] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 311.921871][ T5518] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 311.947656][ T5518] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 311.959757][ T5518] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 311.974945][ T5518] usb 7-1: Product: syz [ 311.989174][ T5518] usb 7-1: Manufacturer: syz [ 312.016440][ T5518] cdc_wdm 7-1:1.0: skipping garbage [ 312.165448][ T5518] cdc_wdm 7-1:1.0: skipping garbage [ 312.171541][ T5518] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 312.178499][ T5518] cdc_wdm 7-1:1.0: Unknown control protocol [ 312.192260][T15977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1709'. [ 312.371572][T15987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1710'. [ 312.392702][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 312.394638][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 312.396540][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 312.398500][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 312.400424][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 312.402353][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 312.404387][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 312.406668][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 312.412690][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 312.415252][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 312.417892][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 312.420427][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 312.422768][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 312.425423][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 312.428094][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 312.430742][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 312.433381][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 312.435641][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 312.438380][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 312.440931][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 312.475993][ T5518] usb 7-1: USB disconnect, device number 40 [ 312.476074][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 312.660660][T15930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.708895][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.779261][T15993] lo speed is unknown, defaulting to 1000 [ 312.803094][T15993] wlan0 speed is unknown, defaulting to 1000 [ 313.110451][T16028] netlink: 'syz.1.1713': attribute type 1 has an invalid length. [ 313.194037][T16028] bond4: entered promiscuous mode [ 313.198001][T16028] 8021q: adding VLAN 0 to HW filter on device bond4 [ 313.231303][T16028] 8021q: adding VLAN 0 to HW filter on device bond4 [ 313.237606][T16028] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 313.240898][T16028] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 313.251518][T16028] bond4: (slave ip6gre1): making interface the new active one [ 313.257796][T16028] ip6gre1: entered promiscuous mode [ 313.260551][T16028] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 313.266428][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.366734][T16074] syzkaller0: entered promiscuous mode [ 313.374819][T16074] syzkaller0: entered allmulticast mode [ 313.387770][T16084] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 313.393428][T16085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1716'. [ 313.457386][T16080] lo speed is unknown, defaulting to 1000 [ 313.481498][T16080] wlan0 speed is unknown, defaulting to 1000 [ 313.761939][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.789906][T16103] fuse: Bad value for 'user_id' [ 313.794107][T16103] fuse: Bad value for 'user_id' [ 314.146770][T16106] FAULT_INJECTION: forcing a failure. [ 314.146770][T16106] name failslab, interval 1, probability 0, space 0, times 0 [ 314.151802][T16106] CPU: 2 UID: 0 PID: 16106 Comm: syz.1.1719 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.151826][T16106] Tainted: [L]=SOFTLOCKUP [ 314.151831][T16106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 314.151840][T16106] Call Trace: [ 314.151845][T16106] [ 314.151851][T16106] dump_stack_lvl+0x100/0x190 [ 314.151930][T16106] should_fail_ex.cold+0x5/0xa [ 314.151957][T16106] should_failslab+0xc2/0x120 [ 314.151984][T16106] __kmalloc_noprof+0xfc/0x820 [ 314.152002][T16106] ? rcu_is_watching+0x12/0xc0 [ 314.152026][T16106] ? tomoyo_realpath_from_path+0xb6/0x690 [ 314.152068][T16106] tomoyo_realpath_from_path+0xb6/0x690 [ 314.152093][T16106] tomoyo_path_number_perm+0x23c/0x580 [ 314.152110][T16106] ? tomoyo_path_number_perm+0x22e/0x580 [ 314.152129][T16106] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 314.152147][T16106] ? get_pid_task+0x106/0x250 [ 314.152182][T16106] ? find_held_lock+0x2b/0x80 [ 314.152200][T16106] ? __fget_files+0x215/0x3d0 [ 314.152213][T16106] ? hook_file_ioctl_common+0x140/0x440 [ 314.152240][T16106] ? __fget_files+0x215/0x3d0 [ 314.152255][T16106] ? __fget_files+0x21f/0x3d0 [ 314.152271][T16106] security_file_ioctl_compat+0xd3/0x230 [ 314.152291][T16106] __ia32_compat_sys_ioctl+0xc2/0x360 [ 314.152315][T16106] __do_fast_syscall_32+0xe7/0x970 [ 314.152367][T16106] ? lockdep_hardirqs_on+0x78/0x100 [ 314.152388][T16106] do_fast_syscall_32+0x32/0x70 [ 314.152408][T16106] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.152427][T16106] RIP: 0023:0xf70cefec [ 314.152444][T16106] Code: Unable to access opcode bytes at 0xf70cefc2. [ 314.152466][T16106] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 314.152480][T16106] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008b04 [ 314.152490][T16106] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.152498][T16106] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.152506][T16106] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 314.152514][T16106] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.152532][T16106] [ 314.152538][T16106] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.811723][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.838340][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.069790][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.308229][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.344612][T16156] nbd: must specify an index to disconnect [ 316.709860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.711591][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.715893][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.718857][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.867506][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.106422][ T24] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 317.217841][T16196] tmpfs: Unknown parameter 'usrquotas/pci/devices/0000:00:02.0/driver/unbind' [ 317.320280][ T24] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 317.336404][ T24] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 317.366238][ T24] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 317.374058][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.401287][T16181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.403319][T16203] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 317.413461][ T24] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 317.440645][T16203] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 317.442940][T16203] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 317.448822][T16203] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 317.451584][T16203] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 317.483110][T16203] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 30921 usecs [ 317.568334][T16203] pci 0000:00:01.0: Adding to iommu group 1 [ 317.575100][T16203] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 317.577345][T16203] pci 0000:00:01.0: vgaarb: bridge control possible [ 317.579457][T16203] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 317.621351][T16203] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 317.632188][T16203] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 317.641452][T16203] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 317.676988][T16203] [drm] Found bochs VGA, ID 0xb0c5. [ 317.682439][T16203] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 317.786992][T16203] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 317.908364][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.096620][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.096675][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.134992][T16244] erofs (device sr0): cannot find valid erofs superblock [ 318.143644][T16203] Console: switching to colour frame buffer device 160x50 [ 318.180245][T16203] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 318.435921][ T24] usb 8-1: USB disconnect, device number 41 [ 318.938167][T16292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1746'. [ 318.957132][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.973403][T16290] lo speed is unknown, defaulting to 1000 [ 318.982442][T16290] wlan0 speed is unknown, defaulting to 1000 [ 319.348950][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.652374][T16326] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 319.664060][T16326] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 319.985797][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.097439][T16328] overlay: Unknown parameter 'fscontext' [ 320.171883][T16349] erofs (device sr0): cannot find valid erofs superblock [ 320.285678][ T5737] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 320.445568][ T5737] usb 8-1: Using ep0 maxpacket: 8 [ 320.448616][ T5737] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.452680][ T5737] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 320.462684][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 320.462809][ T5737] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 320.472118][ T5737] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 320.480184][ T5737] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.487225][ T5737] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.496749][ T5737] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.509041][ T5737] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22 [ 320.577722][T16368] FAULT_INJECTION: forcing a failure. [ 320.577722][T16368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.581706][T16368] CPU: 0 UID: 0 PID: 16368 Comm: syz.0.1757 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.581725][T16368] Tainted: [L]=SOFTLOCKUP [ 320.581729][T16368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.581737][T16368] Call Trace: [ 320.581742][T16368] [ 320.581747][T16368] dump_stack_lvl+0x100/0x190 [ 320.581847][T16368] should_fail_ex.cold+0x5/0xa [ 320.581868][T16368] _copy_from_iter+0x1f4/0x1690 [ 320.581935][T16368] ? __asan_memset+0x23/0x50 [ 320.581957][T16368] ? __pfx__copy_from_iter+0x10/0x10 [ 320.581975][T16368] ? __pfx___alloc_skb+0x10/0x10 [ 320.582026][T16368] netlink_sendmsg+0x808/0xda0 [ 320.582042][T16368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.582057][T16368] ? apparmor_socket_sendmsg+0x15b/0x270 [ 320.582083][T16368] ____sys_sendmsg+0xa4d/0xbe0 [ 320.582094][T16368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.582108][T16368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.582125][T16368] ___sys_sendmsg+0x190/0x1e0 [ 320.582139][T16368] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.582158][T16368] ? find_held_lock+0x2b/0x80 [ 320.582190][T16368] __sys_sendmsg+0x160/0x210 [ 320.582207][T16368] ? __pfx___sys_sendmsg+0x10/0x10 [ 320.582227][T16368] ? __pfx_ksys_write+0x10/0x10 [ 320.582241][T16368] __do_fast_syscall_32+0xe7/0x970 [ 320.582274][T16368] ? lockdep_hardirqs_on+0x78/0x100 [ 320.582291][T16368] do_fast_syscall_32+0x32/0x70 [ 320.582308][T16368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.582323][T16368] RIP: 0023:0xf709efec [ 320.582337][T16368] Code: Unable to access opcode bytes at 0xf709efc2. [ 320.582356][T16368] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 320.582367][T16368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 320.582374][T16368] RDX: 00000000040040c4 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.582381][T16368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.582388][T16368] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 320.582394][T16368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.582408][T16368] [ 320.681966][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1758'. [ 320.685639][T16375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1758'. [ 320.713352][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1758'. [ 320.715933][ T5814] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.721473][ T5814] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.724072][T16375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1758'. [ 320.724464][ T5814] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.731119][ T5814] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.752801][T16375] input: syz0 as /devices/virtual/input/input14 [ 320.884744][T16385] FAULT_INJECTION: forcing a failure. [ 320.884744][T16385] name failslab, interval 1, probability 0, space 0, times 0 [ 320.890160][T16385] CPU: 2 UID: 0 PID: 16385 Comm: syz.1.1759 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.890190][T16385] Tainted: [L]=SOFTLOCKUP [ 320.890196][T16385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.890208][T16385] Call Trace: [ 320.890215][T16385] [ 320.890223][T16385] dump_stack_lvl+0x100/0x190 [ 320.890248][T16385] should_fail_ex.cold+0x5/0xa [ 320.890265][T16385] should_failslab+0xc2/0x120 [ 320.890286][T16385] kmem_cache_alloc_noprof+0x91/0x6a0 [ 320.890306][T16385] ? fuse_request_alloc+0x22/0x200 [ 320.890346][T16385] fuse_request_alloc+0x22/0x200 [ 320.890362][T16385] fuse_get_req+0x20a/0x400 [ 320.890378][T16385] ? __pfx_fuse_get_req+0x10/0x10 [ 320.890394][T16385] ? from_kgid+0x8f/0xd0 [ 320.890416][T16385] ? __pfx_from_kgid+0x10/0x10 [ 320.890436][T16385] ? try_to_unlazy+0x2f1/0x910 [ 320.890493][T16385] fuse_chan_send+0x257/0x9a0 [ 320.890519][T16385] __fuse_simple_request+0x18e/0x1e0 [ 320.890545][T16385] fuse_access+0x24a/0x3d0 [ 320.890568][T16385] ? __pfx_fuse_access+0x10/0x10 [ 320.890590][T16385] ? filename_lookup+0x3bb/0x590 [ 320.890615][T16385] ? __lock_acquire+0x49f/0x1a40 [ 320.890661][T16385] ? make_vfsgid+0xf1/0x140 [ 320.890688][T16385] fuse_permission+0x4b8/0x630 [ 320.890707][T16385] ? __pfx_fuse_permission+0x10/0x10 [ 320.890730][T16385] inode_permission+0x3f1/0x620 [ 320.890756][T16385] do_faccessat+0x20a/0xc10 [ 320.890777][T16385] ? __pfx_do_faccessat+0x10/0x10 [ 320.890796][T16385] ? ksys_write+0x1ac/0x250 [ 320.890816][T16385] __ia32_sys_faccessat2+0x95/0x100 [ 320.890837][T16385] ? lockdep_hardirqs_on+0x78/0x100 [ 320.890862][T16385] __do_fast_syscall_32+0xe7/0x970 [ 320.890887][T16385] ? lockdep_hardirqs_on+0x78/0x100 [ 320.890913][T16385] do_fast_syscall_32+0x32/0x70 [ 320.890938][T16385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.890962][T16385] RIP: 0023:0xf70cefec [ 320.890983][T16385] Code: Unable to access opcode bytes at 0xf70cefc2. [ 320.890991][T16385] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 00000000000001b7 [ 320.891008][T16385] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 320.891019][T16385] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 320.891030][T16385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.891040][T16385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.891051][T16385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.891075][T16385] [ 321.038646][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.185883][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.199034][T16407] lo speed is unknown, defaulting to 1000 [ 321.202837][T16407] wlan0 speed is unknown, defaulting to 1000 [ 321.723001][T16442] erofs (device sr0): cannot find valid erofs superblock [ 322.006007][ T5737] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 322.067253][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.069500][T16459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.165949][ T5737] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 322.170062][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.172951][ T5737] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.177877][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 322.180940][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.183832][ T5737] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.187679][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 322.191269][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.194145][ T5737] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.197674][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 322.200750][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.203966][ T5737] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.208083][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 322.211143][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.214001][ T5737] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.218082][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 322.221074][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.223900][ T5737] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.227604][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 322.230531][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.233399][ T5737] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.237137][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 322.240074][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.242874][ T5737] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.246353][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 322.250387][ T5737] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 322.253291][ T5737] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 322.256016][ T5737] usb 7-1: Product: syz [ 322.257476][ T5737] usb 7-1: Manufacturer: syz [ 322.259091][ T5737] usb 7-1: SerialNumber: syz [ 322.262628][ T5737] usb 7-1: config 0 descriptor?? [ 322.273635][ T5737] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 322.386360][ T8983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.485969][T16451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.492594][T16451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.764212][T16477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.776066][T16477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.780367][T16477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.800487][T16477] comedi comedi2: comedi_config --init_data is deprecated [ 322.808409][T16477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.811280][T16477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.814103][T16477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.827903][T16481] tipc: New replicast peer: 172.20.20.170 [ 322.834767][T16481] tipc: Enabled bearer , priority 10 [ 322.838269][T16481] tipc: New replicast peer: 0.0.0.0 [ 323.070219][ T5737] usb 8-1: USB disconnect, device number 42 [ 323.283322][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 323.535547][ T5737] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 323.686666][ T5737] usb 8-1: Using ep0 maxpacket: 16 [ 323.691211][ T5737] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.694786][ T5737] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 323.699913][ T5737] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 323.702856][ T5737] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.709941][ T5737] usb 8-1: config 0 descriptor?? [ 323.822829][T16519] syzkaller0: entered promiscuous mode [ 323.824674][T16519] syzkaller0: entered allmulticast mode [ 324.196414][T16530] netlink: 'syz.1.1782': attribute type 5 has an invalid length. [ 324.556721][ T8983] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 324.706437][ T8983] usb 6-1: Using ep0 maxpacket: 32 [ 324.710892][ T8983] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 324.715748][ T8983] usb 6-1: config 0 has no interface number 0 [ 324.717820][ T8983] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 324.729737][ T8983] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 324.746009][ T8983] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 324.749234][ T8983] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 324.798678][ T8983] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 324.801492][ T8983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.803863][ T8983] usb 6-1: Product: syz [ 324.805172][ T8983] usb 6-1: Manufacturer: syz [ 324.816125][ T8983] usb 6-1: SerialNumber: syz [ 324.820778][ T8983] usb 6-1: config 0 descriptor?? [ 324.832659][T16533] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 324.842560][ T8515] usb 7-1: USB disconnect, device number 41 [ 324.957655][ T8983] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input15 [ 324.969369][ T8515] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 325.463008][ T5124] usb 6-1: BOGUS urb xfer, pipe 1 != type 3 [ 325.839735][ T5737] usbhid 8-1:0.0: can't add hid device: -71 [ 325.848272][ T5737] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 325.860034][ T5737] usb 8-1: USB disconnect, device number 43 [ 325.935135][T16579] loop5: detected capacity change from 0 to 7 [ 325.963569][T16579] Dev loop5: unable to read RDB block 7 [ 325.970444][T16579] loop5: AHDI p1 p3 p4 [ 325.972160][T16579] loop5: partition table partially beyond EOD, truncated [ 325.994588][T16579] loop5: p1 size 100663296 extends beyond EOD, truncated [ 326.018333][T16579] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 326.088016][T16587] Dev loop5: unable to read RDB block 7 [ 326.106171][T16587] loop5: AHDI p1 p3 p4 [ 326.108148][T16587] loop5: partition table partially beyond EOD, truncated [ 326.114692][T16587] loop5: p1 size 100663296 extends beyond EOD, truncated [ 326.137811][T16587] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 326.305875][ T8515] net_ratelimit: 6 callbacks suppressed [ 326.305888][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.348401][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1790'. [ 326.370699][ T7198] udevd[7198]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 326.384560][ T7274] udevd[7274]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 326.434050][T16611] program syz.0.1791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.466306][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.576968][T16614] Mass Storage Function, version: 2009/09/11 [ 326.614059][T16614] LUN: removable file: (no medium) [ 326.732630][ T8515] wlan0 speed is unknown, defaulting to 1000 [ 326.995032][ T5877] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 327.068655][ T5877] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.086475][T16621] lo speed is unknown, defaulting to 1000 [ 327.244635][T16621] wlan0 speed is unknown, defaulting to 1000 [ 327.434442][T16639] FAULT_INJECTION: forcing a failure. [ 327.434442][T16639] name failslab, interval 1, probability 0, space 0, times 0 [ 327.439269][T16639] CPU: 2 UID: 0 PID: 16639 Comm: syz.0.1793 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.439288][T16639] Tainted: [L]=SOFTLOCKUP [ 327.439292][T16639] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 327.439298][T16639] Call Trace: [ 327.439302][T16639] [ 327.439307][T16639] dump_stack_lvl+0x100/0x190 [ 327.439324][T16639] should_fail_ex.cold+0x5/0xa [ 327.439338][T16639] should_failslab+0xc2/0x120 [ 327.439354][T16639] __kmalloc_noprof+0xfc/0x820 [ 327.439368][T16639] ? rcu_is_watching+0x12/0xc0 [ 327.439382][T16639] ? tomoyo_realpath_from_path+0xb6/0x690 [ 327.439416][T16639] tomoyo_realpath_from_path+0xb6/0x690 [ 327.439436][T16639] tomoyo_path_number_perm+0x23c/0x580 [ 327.439451][T16639] ? tomoyo_path_number_perm+0x22e/0x580 [ 327.439465][T16639] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 327.439480][T16639] ? get_pid_task+0x106/0x250 [ 327.439508][T16639] ? find_held_lock+0x2b/0x80 [ 327.439522][T16639] ? __fget_files+0x215/0x3d0 [ 327.439532][T16639] ? hook_file_ioctl_common+0x140/0x440 [ 327.439546][T16639] ? __fget_files+0x215/0x3d0 [ 327.439558][T16639] ? __fget_files+0x21f/0x3d0 [ 327.439571][T16639] security_file_ioctl_compat+0xd3/0x230 [ 327.439590][T16639] __ia32_compat_sys_ioctl+0xc2/0x360 [ 327.439608][T16639] __do_fast_syscall_32+0xe7/0x970 [ 327.439629][T16639] ? lockdep_hardirqs_on+0x78/0x100 [ 327.439645][T16639] do_fast_syscall_32+0x32/0x70 [ 327.439662][T16639] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.439677][T16639] RIP: 0023:0xf709efec [ 327.439690][T16639] Code: Unable to access opcode bytes at 0xf709efc2. [ 327.439695][T16639] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 327.439707][T16639] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c028aa05 [ 327.439714][T16639] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.439720][T16639] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 327.439726][T16639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.439732][T16639] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 327.439746][T16639] [ 327.439751][T16639] ERROR: Out of memory at tomoyo_realpath_from_path. [ 327.511797][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.035904][ T5877] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 328.187506][ T5877] usb 8-1: Using ep0 maxpacket: 8 [ 328.193558][ T5877] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 328.199317][ T5877] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 328.207315][ T5877] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 328.211243][ T5877] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.216980][ T5877] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 328.220613][ T5877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.431064][ T5877] usb 8-1: usb_control_msg returned -32 [ 328.434710][ T5877] usbtmc 8-1:16.0: can't read capabilities [ 328.444288][ T5877] usb 8-1: USB disconnect, device number 44 [ 328.466426][ T8983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.553611][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.728127][ T10] usb 6-1: USB disconnect, device number 40 [ 328.895416][ T5877] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 329.034829][T16788] FAULT_INJECTION: forcing a failure. [ 329.034829][T16788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.061443][ T5877] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 329.074376][T16788] CPU: 0 UID: 0 PID: 16788 Comm: syz.0.1803 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.074427][T16788] Tainted: [L]=SOFTLOCKUP [ 329.074431][T16788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 329.074438][T16788] Call Trace: [ 329.074443][T16788] [ 329.074448][T16788] dump_stack_lvl+0x100/0x190 [ 329.074468][T16788] should_fail_ex.cold+0x5/0xa [ 329.074482][T16788] _copy_from_iter+0x1f4/0x1690 [ 329.074504][T16788] ? __asan_memset+0x23/0x50 [ 329.074518][T16788] ? __pfx__copy_from_iter+0x10/0x10 [ 329.074535][T16788] ? __pfx___alloc_skb+0x10/0x10 [ 329.074557][T16788] netlink_sendmsg+0x808/0xda0 [ 329.074574][T16788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.074589][T16788] ? apparmor_socket_sendmsg+0x15b/0x270 [ 329.074603][T16788] ____sys_sendmsg+0xa4d/0xbe0 [ 329.074619][T16788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.074633][T16788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.074651][T16788] ___sys_sendmsg+0x190/0x1e0 [ 329.074665][T16788] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.074684][T16788] ? find_held_lock+0x2b/0x80 [ 329.074708][T16788] __sys_sendmsg+0x160/0x210 [ 329.074725][T16788] ? __pfx___sys_sendmsg+0x10/0x10 [ 329.074748][T16788] __do_fast_syscall_32+0xe7/0x970 [ 329.074767][T16788] ? lockdep_hardirqs_on+0x78/0x100 [ 329.074784][T16788] do_fast_syscall_32+0x32/0x70 [ 329.074801][T16788] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.074817][T16788] RIP: 0023:0xf709efec [ 329.074831][T16788] Code: Unable to access opcode bytes at 0xf709efc2. [ 329.074836][T16788] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 329.074848][T16788] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 329.074855][T16788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 329.074861][T16788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.074867][T16788] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 329.074873][T16788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.074887][T16788] [ 329.148054][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.151122][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.154154][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 329.176411][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.179341][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.182909][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 329.189518][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.192511][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.196675][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 329.224399][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.228323][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.231764][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 329.236264][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.239438][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.242896][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 329.247174][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.250069][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.253689][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 329.258958][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.261871][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.265518][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 329.269355][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.272288][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.276042][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 329.281783][ T5877] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 329.284948][ T5877] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 329.288638][ T5877] usb 7-1: Product: syz [ 329.289995][ T5877] usb 7-1: Manufacturer: syz [ 329.294036][ T5877] usb 7-1: SerialNumber: syz [ 329.307093][ T5877] usb 7-1: config 0 descriptor?? [ 329.342251][ T5877] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 329.533137][ T5518] usb 7-1: USB disconnect, device number 42 [ 329.567186][ T5518] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 329.598950][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.278105][T16828] ceph: No mds server is up or the cluster is laggy [ 330.282482][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 330.311130][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 330.605628][ T5518] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 330.628063][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.783944][T16857] bridge0: entered allmulticast mode [ 330.819192][ T5518] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 330.832352][ T5518] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.837857][ T5518] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.847665][ T5518] usb 7-1: config 0 interface 0 has no altsetting 0 [ 330.852779][ T5518] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.862303][ T5518] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.873702][ T5518] usb 7-1: config 0 interface 0 has no altsetting 0 [ 330.885804][ T5518] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.895242][ T5518] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.907018][ T5518] usb 7-1: config 0 interface 0 has no altsetting 0 [ 330.914347][ T5518] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.920323][ T5518] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.931042][ T5518] usb 7-1: config 0 interface 0 has no altsetting 0 [ 330.938167][ T5518] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.942667][ T5518] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.956900][ T5518] usb 7-1: config 0 interface 0 has no altsetting 0 [ 330.964647][ T5518] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.969562][ T5518] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.973969][ T5518] usb 7-1: config 0 interface 0 has no altsetting 0 [ 330.978107][ T5518] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.982303][ T5518] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.989107][ T5518] usb 7-1: config 0 interface 0 has no altsetting 0 [ 331.001889][ T5518] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.008648][ T5518] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 331.015256][ T5518] usb 7-1: config 0 interface 0 has no altsetting 0 [ 331.021978][ T5518] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 331.026564][ T5518] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 331.030060][ T5518] usb 7-1: Product: syz [ 331.031941][ T5518] usb 7-1: Manufacturer: syz [ 331.033887][ T5518] usb 7-1: SerialNumber: syz [ 331.042038][ T5518] usb 7-1: config 0 descriptor?? [ 331.056335][ T5518] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 331.252391][ T5518] usb 7-1: USB disconnect, device number 43 [ 331.290491][ T5518] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 331.507291][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.678976][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.050993][T16912] netlink: 'syz.2.1820': attribute type 4 has an invalid length. [ 332.325791][T16929] FAULT_INJECTION: forcing a failure. [ 332.325791][T16929] name failslab, interval 1, probability 0, space 0, times 0 [ 332.337939][T16929] CPU: 2 UID: 0 PID: 16929 Comm: syz.1.1822 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.337960][T16929] Tainted: [L]=SOFTLOCKUP [ 332.337964][T16929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 332.337971][T16929] Call Trace: [ 332.337976][T16929] [ 332.337981][T16929] dump_stack_lvl+0x100/0x190 [ 332.337998][T16929] should_fail_ex.cold+0x5/0xa [ 332.338011][T16929] should_failslab+0xc2/0x120 [ 332.338029][T16929] __kmalloc_noprof+0xfc/0x820 [ 332.338043][T16929] ? rcu_is_watching+0x12/0xc0 [ 332.338057][T16929] ? tomoyo_realpath_from_path+0xb6/0x690 [ 332.338078][T16929] tomoyo_realpath_from_path+0xb6/0x690 [ 332.338100][T16929] tomoyo_path_number_perm+0x23c/0x580 [ 332.338116][T16929] ? tomoyo_path_number_perm+0x22e/0x580 [ 332.338131][T16929] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 332.338146][T16929] ? get_pid_task+0x106/0x250 [ 332.338173][T16929] ? find_held_lock+0x2b/0x80 [ 332.338186][T16929] ? __fget_files+0x215/0x3d0 [ 332.338212][T16929] ? hook_file_ioctl_common+0x140/0x440 [ 332.338227][T16929] ? __fget_files+0x215/0x3d0 [ 332.338240][T16929] ? __fget_files+0x21f/0x3d0 [ 332.338253][T16929] security_file_ioctl_compat+0xd3/0x230 [ 332.338268][T16929] __ia32_compat_sys_ioctl+0xc2/0x360 [ 332.338288][T16929] __do_fast_syscall_32+0xe7/0x970 [ 332.338306][T16929] ? lockdep_hardirqs_on+0x78/0x100 [ 332.338323][T16929] do_fast_syscall_32+0x32/0x70 [ 332.338340][T16929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.338355][T16929] RIP: 0023:0xf70cefec [ 332.338370][T16929] Code: Unable to access opcode bytes at 0xf70cefc2. [ 332.338375][T16929] RSP: 002b:00000000f547b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 332.338405][T16929] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000890c [ 332.338413][T16929] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.338420][T16929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.338426][T16929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.338432][T16929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 332.338447][T16929] [ 332.338481][T16929] ERROR: Out of memory at tomoyo_realpath_from_path. [ 332.407977][ T5518] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 332.552134][T16931] netlink: 'syz.0.1823': attribute type 4 has an invalid length. [ 332.575991][ T5518] usb 8-1: Using ep0 maxpacket: 16 [ 332.583871][ T5518] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.588679][ T5518] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 332.597487][ T5518] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 332.610237][ T5518] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.636705][ T5518] usb 8-1: config 0 descriptor?? [ 332.719322][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.229369][T16941] Console: switching to colour dummy device 80x25 [ 333.255117][T16917] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 333.756087][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.786600][T16945] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 333.863591][T16945] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 333.869832][T16945] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 333.872581][T16945] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 333.884080][T16945] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 333.999463][T16945] pci 0000:00:01.0: Adding to iommu group 1 [ 334.016408][T16945] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 334.018319][T16945] pci 0000:00:01.0: vgaarb: bridge control possible [ 334.020116][T16945] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 334.052180][T16945] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 334.056229][T16945] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 334.071875][T16945] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 334.395909][T16945] [drm] Found bochs VGA, ID 0xb0c5. [ 334.397458][T16945] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 334.400874][T16945] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 335.015965][T16993] erofs (device sr0): cannot find valid erofs superblock [ 335.377688][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.381155][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.906204][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.415336][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.035788][ T5518] usbhid 8-1:0.0: can't add hid device: -71 [ 337.379429][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1841'. [ 337.489648][ T5518] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 337.501414][T17040] erofs (device sr0): cannot find valid erofs superblock [ 337.525206][ T5518] usb 8-1: USB disconnect, device number 45 [ 337.532208][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.728366][T17062] FAULT_INJECTION: forcing a failure. [ 337.728366][T17062] name failslab, interval 1, probability 0, space 0, times 0 [ 337.732471][T17062] CPU: 2 UID: 0 PID: 17062 Comm: syz.0.1847 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.732489][T17062] Tainted: [L]=SOFTLOCKUP [ 337.732494][T17062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.732500][T17062] Call Trace: [ 337.732516][T17062] [ 337.732521][T17062] dump_stack_lvl+0x100/0x190 [ 337.732620][T17062] should_fail_ex.cold+0x5/0xa [ 337.732639][T17062] should_failslab+0xc2/0x120 [ 337.732663][T17062] __kmalloc_noprof+0xfc/0x820 [ 337.732678][T17062] ? tomoyo_encode2+0xfb/0x3c0 [ 337.732728][T17062] tomoyo_encode2+0xfb/0x3c0 [ 337.732747][T17062] tomoyo_encode+0x29/0x50 [ 337.732763][T17062] tomoyo_realpath_from_path+0x18c/0x690 [ 337.732783][T17062] tomoyo_path_number_perm+0x23c/0x580 [ 337.732797][T17062] ? tomoyo_path_number_perm+0x22e/0x580 [ 337.732812][T17062] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 337.732827][T17062] ? get_pid_task+0x106/0x250 [ 337.732860][T17062] ? find_held_lock+0x2b/0x80 [ 337.732875][T17062] ? __fget_files+0x215/0x3d0 [ 337.732886][T17062] ? hook_file_ioctl_common+0x140/0x440 [ 337.732904][T17062] ? __fget_files+0x215/0x3d0 [ 337.732917][T17062] ? __fget_files+0x21f/0x3d0 [ 337.732930][T17062] security_file_ioctl_compat+0xd3/0x230 [ 337.732946][T17062] __ia32_compat_sys_ioctl+0xc2/0x360 [ 337.732965][T17062] __do_fast_syscall_32+0xe7/0x970 [ 337.733016][T17062] ? lockdep_hardirqs_on+0x78/0x100 [ 337.733032][T17062] do_fast_syscall_32+0x32/0x70 [ 337.733050][T17062] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 337.733065][T17062] RIP: 0023:0xf709efec [ 337.733079][T17062] Code: Unable to access opcode bytes at 0xf709efc2. [ 337.733097][T17062] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 337.733109][T17062] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 337.733115][T17062] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.733122][T17062] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 337.733128][T17062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.733134][T17062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 337.733149][T17062] [ 337.733162][T17062] ERROR: Out of memory at tomoyo_realpath_from_path. [ 337.836910][ T10] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 337.894295][T17070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.903626][T17070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.952611][T17070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.969322][T17070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.015977][ T10] usb 7-1: device descriptor read/64, error -71 [ 338.258802][ T10] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 338.385937][ T10] usb 7-1: device descriptor read/64, error -71 [ 338.388888][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.507445][ T10] usb usb7-port1: attempt power cycle [ 338.547359][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.845837][ T10] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 339.433519][ T10] usb 7-1: device descriptor read/8, error -71 [ 339.585867][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.842755][T17126] CIFS: Attempting to mount //127.0.0.1/share [ 340.037907][T17127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.062021][T17126] CIFS: VFS: Error connecting to socket. Aborting operation. [ 340.064593][T17126] CIFS: VFS: cifs_mount failed w/return code = -13 [ 340.131751][T17133] FAULT_INJECTION: forcing a failure. [ 340.131751][T17133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.149965][T17133] CPU: 2 UID: 0 PID: 17133 Comm: syz.3.1858 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.149985][T17133] Tainted: [L]=SOFTLOCKUP [ 340.149989][T17133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 340.149996][T17133] Call Trace: [ 340.150001][T17133] [ 340.150006][T17133] dump_stack_lvl+0x100/0x190 [ 340.150024][T17133] should_fail_ex.cold+0x5/0xa [ 340.150037][T17133] _copy_to_iter+0x5a4/0x1720 [ 340.150074][T17133] ? fib_route_seq_stop+0x31/0xb0 [ 340.150099][T17133] ? __pfx__copy_to_iter+0x10/0x10 [ 340.150118][T17133] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 340.150141][T17133] seq_read_iter+0x691/0x1270 [ 340.150160][T17133] ? aa_file_perm+0x7f3/0x14d0 [ 340.150182][T17133] seq_read+0x344/0x4d0 [ 340.150199][T17133] ? __pfx_seq_read+0x10/0x10 [ 340.150219][T17133] ? __lock_acquire+0x49f/0x1a40 [ 340.150236][T17133] ? import_ubuf+0x1b6/0x220 [ 340.150257][T17133] ? __pfx_seq_read+0x10/0x10 [ 340.150274][T17133] proc_reg_read+0x240/0x330 [ 340.150298][T17133] ? __pfx_proc_reg_read+0x10/0x10 [ 340.150310][T17133] vfs_readv+0x5d8/0x8d0 [ 340.150331][T17133] ? __pfx_vfs_readv+0x10/0x10 [ 340.150380][T17133] ? __fget_files+0x21f/0x3d0 [ 340.150396][T17133] ? do_preadv+0x1ac/0x270 [ 340.150412][T17133] do_preadv+0x1ac/0x270 [ 340.150430][T17133] ? __pfx_do_preadv+0x10/0x10 [ 340.150447][T17133] ? ksys_write+0x1ac/0x250 [ 340.150469][T17133] ? __pfx_ksys_write+0x10/0x10 [ 340.150484][T17133] __do_fast_syscall_32+0xe7/0x970 [ 340.150501][T17133] ? lockdep_hardirqs_on+0x78/0x100 [ 340.150518][T17133] do_fast_syscall_32+0x32/0x70 [ 340.150539][T17133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 340.150554][T17133] RIP: 0023:0xf6fdefec [ 340.150569][T17133] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 340.150574][T17133] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 000000000000014d [ 340.150586][T17133] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 340.150593][T17133] RDX: 0000000000000001 RSI: 000000000000114a RDI: 0000000000000000 [ 340.150600][T17133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.150607][T17133] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 340.150614][T17133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.150628][T17133] [ 340.378591][ T10] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 340.396506][ T10] usb 7-1: device descriptor read/8, error -71 [ 340.506837][ T10] usb usb7-port1: unable to enumerate USB device [ 340.636232][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.234512][T17184] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 341.247473][T17184] bond1: (slave macvlan2): Enslaving as an active interface with a down link [ 341.728542][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.734210][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.900138][T17233] FAULT_INJECTION: forcing a failure. [ 341.900138][T17233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.910857][T17233] CPU: 2 UID: 0 PID: 17233 Comm: syz.1.1872 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.910878][T17233] Tainted: [L]=SOFTLOCKUP [ 341.910882][T17233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 341.910889][T17233] Call Trace: [ 341.910894][T17233] [ 341.910899][T17233] dump_stack_lvl+0x100/0x190 [ 341.910917][T17233] should_fail_ex.cold+0x5/0xa [ 341.910931][T17233] _copy_from_iter+0x1f4/0x1690 [ 341.914036][T17233] ? __asan_memset+0x23/0x50 [ 341.914054][T17233] ? __pfx__copy_from_iter+0x10/0x10 [ 341.914072][T17233] ? __pfx___alloc_skb+0x10/0x10 [ 341.914106][T17233] netlink_sendmsg+0x808/0xda0 [ 341.914123][T17233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.914138][T17233] ? apparmor_socket_sendmsg+0x15b/0x270 [ 341.914153][T17233] ____sys_sendmsg+0xa4d/0xbe0 [ 341.914164][T17233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.914178][T17233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.914196][T17233] ___sys_sendmsg+0x190/0x1e0 [ 341.914210][T17233] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.914229][T17233] ? find_held_lock+0x2b/0x80 [ 341.914253][T17233] __sys_sendmsg+0x160/0x210 [ 341.914269][T17233] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.914289][T17233] ? __pfx_ksys_write+0x10/0x10 [ 341.914304][T17233] __do_fast_syscall_32+0xe7/0x970 [ 341.914321][T17233] ? lockdep_hardirqs_on+0x78/0x100 [ 341.914338][T17233] do_fast_syscall_32+0x32/0x70 [ 341.914381][T17233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.914400][T17233] RIP: 0023:0xf70cefec [ 341.914415][T17233] Code: Unable to access opcode bytes at 0xf70cefc2. [ 341.914421][T17233] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 341.914433][T17233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 341.914441][T17233] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.914447][T17233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.914454][T17233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.914461][T17233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.914475][T17233] [ 342.074721][T17255] FAULT_INJECTION: forcing a failure. [ 342.074721][T17255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.083744][T17255] CPU: 2 UID: 0 PID: 17255 Comm: syz.3.1878 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.083765][T17255] Tainted: [L]=SOFTLOCKUP [ 342.083770][T17255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 342.083777][T17255] Call Trace: [ 342.083782][T17255] [ 342.083787][T17255] dump_stack_lvl+0x100/0x190 [ 342.083805][T17255] should_fail_ex.cold+0x5/0xa [ 342.083819][T17255] _copy_from_iter+0x1f4/0x1690 [ 342.083839][T17255] ? __asan_memset+0x23/0x50 [ 342.083853][T17255] ? __pfx__copy_from_iter+0x10/0x10 [ 342.083870][T17255] ? __pfx___alloc_skb+0x10/0x10 [ 342.083891][T17255] netlink_sendmsg+0x808/0xda0 [ 342.083908][T17255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.083922][T17255] ? apparmor_socket_sendmsg+0x15b/0x270 [ 342.083938][T17255] ____sys_sendmsg+0xa4d/0xbe0 [ 342.083950][T17255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.083963][T17255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.083981][T17255] ___sys_sendmsg+0x190/0x1e0 [ 342.083994][T17255] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.084019][T17255] ? find_held_lock+0x2b/0x80 [ 342.084042][T17255] __sys_sendmsg+0x160/0x210 [ 342.084059][T17255] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.084079][T17255] ? __pfx_ksys_write+0x10/0x10 [ 342.084094][T17255] __do_fast_syscall_32+0xe7/0x970 [ 342.084111][T17255] ? lockdep_hardirqs_on+0x78/0x100 [ 342.084128][T17255] do_fast_syscall_32+0x32/0x70 [ 342.084145][T17255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.084160][T17255] RIP: 0023:0xf6fdefec [ 342.084174][T17255] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 342.084179][T17255] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 342.084191][T17255] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080006040 [ 342.084198][T17255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.084205][T17255] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.084212][T17255] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 342.084219][T17255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.084232][T17255] [ 342.277247][T17271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1880'. [ 342.785791][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.108583][T17268] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 343.124065][T17266] lo speed is unknown, defaulting to 1000 [ 343.127390][T17276] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 343.133078][T17266] wlan0 speed is unknown, defaulting to 1000 [ 343.292136][T17312] typec_fusb302 0-0022: supply vbus not found, using dummy regulator [ 343.374601][T17337] Invalid option length (1047276) for dns_resolver key [ 343.417775][T17331] typec_fusb302 1-0022: I2C/SMBus block functionality not supported! [ 343.427608][T17312] typec_fusb302 0-0022: failed to request gpio_int_n [ 343.451010][T17331] i2c i2c-1: new_device: Instantiated device typec_fusb302 at 0x22 [ 343.508274][T17312] typec_fusb302 0-0022: probe with driver typec_fusb302 failed with error -2 [ 343.514846][T17312] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 343.642399][T17353] erofs (device sr0): cannot find valid erofs superblock [ 343.914905][T17372] trusted_key: syz.1.1892 sent an empty control message without MSG_MORE. [ 343.919060][T17372] syzkaller0: entered promiscuous mode [ 343.920869][T17372] syzkaller0: entered allmulticast mode [ 343.934165][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.200262][T17414] fuse: Bad value for 'user_id' [ 344.209575][T17414] fuse: Bad value for 'user_id' [ 344.786737][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.960001][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.064109][T17439] syzkaller0: entered promiscuous mode [ 345.069765][T17439] syzkaller0: entered allmulticast mode [ 345.078159][T17439] FAULT_INJECTION: forcing a failure. [ 345.078159][T17439] name failslab, interval 1, probability 0, space 0, times 0 [ 345.082462][T17439] CPU: 0 UID: 0 PID: 17439 Comm: syz.1.1899 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.082481][T17439] Tainted: [L]=SOFTLOCKUP [ 345.082485][T17439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 345.082493][T17439] Call Trace: [ 345.082498][T17439] [ 345.082503][T17439] dump_stack_lvl+0x100/0x190 [ 345.082520][T17439] should_fail_ex.cold+0x5/0xa [ 345.082534][T17439] should_failslab+0xc2/0x120 [ 345.082550][T17439] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 345.082566][T17439] ? __alloc_skb+0x5b7/0x710 [ 345.082581][T17439] ? __alloc_skb+0x140/0x710 [ 345.082598][T17439] __alloc_skb+0x140/0x710 [ 345.082613][T17439] ? __alloc_skb+0x5b7/0x710 [ 345.082627][T17439] ? __pfx___alloc_skb+0x10/0x10 [ 345.082646][T17439] alloc_skb_with_frags+0xdd/0x760 [ 345.082664][T17439] ? __might_fault+0xc5/0x140 [ 345.082676][T17439] ? __might_fault+0xc5/0x140 [ 345.082690][T17439] sock_alloc_send_pskb+0x801/0x980 [ 345.082705][T17439] ? _copy_from_iter+0x270/0x1690 [ 345.082726][T17439] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 345.082741][T17439] ? find_held_lock+0x2b/0x80 [ 345.082755][T17439] ? dev_get_by_index+0x180/0x380 [ 345.082771][T17439] ? dev_get_by_index+0x180/0x380 [ 345.082789][T17439] packet_sendmsg+0x1ecf/0x4eb0 [ 345.082807][T17439] ? is_bpf_text_address+0x4a/0x1a0 [ 345.082827][T17439] ? __pfx___might_resched+0x10/0x10 [ 345.082849][T17439] ? aa_sk_perm+0x309/0xaa0 [ 345.082865][T17439] ? __pfx_aa_sk_perm+0x10/0x10 [ 345.082880][T17439] ? __pfx_packet_sendmsg+0x10/0x10 [ 345.082900][T17439] ? apparmor_socket_sendmsg+0x15b/0x270 [ 345.082914][T17439] ____sys_sendmsg+0xa4d/0xbe0 [ 345.082925][T17439] ? __pfx_packet_sendmsg+0x10/0x10 [ 345.082941][T17439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.082959][T17439] ___sys_sendmsg+0x190/0x1e0 [ 345.082973][T17439] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.082992][T17439] ? find_held_lock+0x2b/0x80 [ 345.083014][T17439] __sys_sendmsg+0x160/0x210 [ 345.083031][T17439] ? __pfx___sys_sendmsg+0x10/0x10 [ 345.083050][T17439] ? __pfx_ksys_write+0x10/0x10 [ 345.083065][T17439] __do_fast_syscall_32+0xe7/0x970 [ 345.083081][T17439] ? lockdep_hardirqs_on+0x78/0x100 [ 345.083098][T17439] do_fast_syscall_32+0x32/0x70 [ 345.083115][T17439] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 345.083130][T17439] RIP: 0023:0xf70cefec [ 345.083145][T17439] Code: Unable to access opcode bytes at 0xf70cefc2. [ 345.083151][T17439] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 345.083162][T17439] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 345.083169][T17439] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.083176][T17439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.083182][T17439] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 345.083194][T17439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 345.083208][T17439] [ 345.351966][T17449] erofs (device sr0): cannot find valid erofs superblock [ 345.506435][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.995611][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.594099][T17479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1908'. [ 346.600618][T17479] netlink: 'syz.0.1908': attribute type 11 has an invalid length. [ 346.603010][T17479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1908'. [ 346.608445][ T1035] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 346.693236][T17484] fuse: Bad value for 'user_id' [ 346.699055][T17484] fuse: Bad value for 'user_id' [ 346.765945][ T1035] usb 8-1: Using ep0 maxpacket: 8 [ 346.771820][ T1035] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.789323][ T1035] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 346.801104][ T1035] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 346.828551][ T1035] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 346.837494][ T1035] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 346.858721][ T1035] usb 8-1: Product: syz [ 346.860183][ T1035] usb 8-1: Manufacturer: syz [ 346.862503][ T1035] usb 8-1: SerialNumber: syz [ 346.875885][ T1035] usb 8-1: config 0 descriptor?? [ 346.995774][ T1035] rc_core: IR keymap rc-imon-rsc not found [ 347.002274][ T1035] Registered IR keymap rc-empty [ 347.009664][ T1035] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 347.028626][ T1035] input: iMON Station as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input16 [ 347.040109][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.539221][T17525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.561598][T17525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.610051][ T10] usb 8-1: USB disconnect, device number 46 [ 347.794037][T17540] syzkaller0: entered promiscuous mode [ 347.805963][T17540] syzkaller0: entered allmulticast mode [ 347.827917][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.866441][T17540] FAULT_INJECTION: forcing a failure. [ 347.866441][T17540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.878659][T17540] CPU: 0 UID: 0 PID: 17540 Comm: syz.1.1912 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.878681][T17540] Tainted: [L]=SOFTLOCKUP [ 347.878686][T17540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 347.878693][T17540] Call Trace: [ 347.878698][T17540] [ 347.878703][T17540] dump_stack_lvl+0x100/0x190 [ 347.878721][T17540] should_fail_ex.cold+0x5/0xa [ 347.878735][T17540] _copy_from_iter+0x1f4/0x1690 [ 347.878757][T17540] ? __pfx__copy_from_iter+0x10/0x10 [ 347.878774][T17540] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 347.878799][T17540] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 347.878817][T17540] skb_copy_datagram_from_iter+0x11f/0x720 [ 347.878836][T17540] packet_sendmsg+0x224f/0x4eb0 [ 347.878858][T17540] ? __pfx___might_resched+0x10/0x10 [ 347.878880][T17540] ? aa_sk_perm+0x309/0xaa0 [ 347.878897][T17540] ? __pfx_aa_sk_perm+0x10/0x10 [ 347.878911][T17540] ? __pfx_packet_sendmsg+0x10/0x10 [ 347.878927][T17540] ? __might_fault+0xc5/0x140 [ 347.878943][T17540] ? apparmor_socket_sendmsg+0x15b/0x270 [ 347.878958][T17540] __sys_sendto+0x48b/0x4e0 [ 347.878972][T17540] ? __pfx_packet_sendmsg+0x10/0x10 [ 347.878988][T17540] ? __pfx___sys_sendto+0x10/0x10 [ 347.879012][T17540] ? fput+0x79/0x100 [ 347.879026][T17540] ? ksys_write+0x1ac/0x250 [ 347.879038][T17540] __ia32_sys_sendto+0xdd/0x1b0 [ 347.879053][T17540] ? __do_fast_syscall_32+0x98/0x970 [ 347.879070][T17540] ? lockdep_hardirqs_on+0x78/0x100 [ 347.879086][T17540] __do_fast_syscall_32+0xe7/0x970 [ 347.879103][T17540] ? lockdep_hardirqs_on+0x78/0x100 [ 347.879119][T17540] do_fast_syscall_32+0x32/0x70 [ 347.879137][T17540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.879152][T17540] RIP: 0023:0xf70cefec [ 347.879165][T17540] Code: Unable to access opcode bytes at 0xf70cefc2. [ 347.879172][T17540] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 347.879184][T17540] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 347.879191][T17540] RDX: 0000000000000001 RSI: 0000000000040000 RDI: 0000000080000240 [ 347.879198][T17540] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 347.879205][T17540] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 347.879211][T17540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.879225][T17540] [ 348.076156][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.829787][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.832322][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.858235][T17553] erofs (device sr0): cannot find valid erofs superblock [ 349.005380][ T5518] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 349.116052][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.148887][T17560] input: syz0 as /devices/virtual/input/input17 [ 349.175408][ T5518] usb 8-1: Using ep0 maxpacket: 16 [ 349.180412][ T5518] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.197282][ T5518] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 349.201753][ T5518] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 349.206658][ T5518] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.220394][ T5518] usb 8-1: config 0 descriptor?? [ 349.663327][T17554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.765125][T17554] 8021q: adding VLAN 0 to HW filter on device bond2 [ 349.897096][ T5518] usbhid 8-1:0.0: can't add hid device: -71 [ 349.902744][ T5518] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 349.913569][ T5518] usb 8-1: USB disconnect, device number 47 [ 350.147227][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.375452][ T5518] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 350.537430][ T5518] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 350.545846][ T5518] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.550956][ T5518] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 350.558125][ T5518] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 350.563540][ T5518] usb 7-1: Manufacturer: syz [ 350.571480][ T5518] usb 7-1: config 0 descriptor?? [ 350.625729][ T5518] rc_core: IR keymap rc-hauppauge not found [ 350.629745][ T5518] Registered IR keymap rc-empty [ 350.633867][ T5518] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 350.645259][ T5518] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input18 [ 350.777982][T17623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.783783][T17623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.802680][ T64] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 350.804040][T17590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1920'. [ 350.819393][ T1035] usb 7-1: USB disconnect, device number 48 [ 350.868426][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.190429][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.357209][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.478407][T17623] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 351.578702][T17623] geneve2: left promiscuous mode [ 351.607554][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.711616][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.772436][T17670] netlink: 'syz.2.1932': attribute type 5 has an invalid length. [ 352.236294][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.535137][T17704] ptrace attach of "/syz-executor exec"[17703] was attempted by "/syz-executor exec"[17704] [ 352.535955][ T10] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 352.696510][ T10] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 352.703008][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.710729][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.718125][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 352.724025][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.733233][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.741202][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 352.747798][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.753027][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.763268][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 352.769896][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.774242][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.784315][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 352.791750][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.797944][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.804061][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 352.810219][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.814178][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.822255][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 352.829530][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.833515][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.842082][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 352.848116][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.855063][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.864291][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 352.876856][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 352.879893][ T10] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 352.887049][ T10] usb 7-1: Product: syz [ 352.889122][ T10] usb 7-1: Manufacturer: syz [ 352.892911][ T10] usb 7-1: SerialNumber: syz [ 352.899735][ T10] usb 7-1: config 0 descriptor?? [ 352.910462][ T10] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 353.031582][T17725] netlink: 'syz.3.1941': attribute type 5 has an invalid length. [ 353.119088][T17687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.131756][T17687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.156309][ T10] usb 7-1: USB disconnect, device number 49 [ 353.171189][ T10] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 353.185757][ C2] net_ratelimit: 1 callbacks suppressed [ 353.185770][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.266350][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.951971][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.280998][T17770] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1950'. [ 354.316403][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.386567][T17775] can: request_module (can-proto-0) failed. [ 354.468937][T17775] hub 1-0:1.0: USB hub found [ 354.474388][T17775] hub 1-0:1.0: 6 ports detected [ 354.756312][ T56] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 354.855471][ T5518] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 354.949884][ T56] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 354.953879][ T56] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 354.959163][ T56] usb 1-1: Product: QEMU USB Tablet [ 354.960955][ T56] usb 1-1: Manufacturer: QEMU [ 354.962564][ T56] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 355.011030][ T56] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0004/input/input19 [ 355.026788][ T5518] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 355.030342][ T5518] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.033263][ T5518] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.038748][ T5518] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.043042][ T5518] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.048650][ T5518] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.052113][ T5518] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.055682][ T5518] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.061510][ T5518] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.066669][ T5518] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.070012][ T5518] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.072990][ T5518] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.082236][ T5518] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.092985][ T5518] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.102918][ T5518] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.123737][ T5518] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.138182][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.141143][ T56] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 355.146563][ T5518] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.149659][ T5518] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.159175][ T5518] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.167974][ T5518] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.175683][ T5518] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.183171][T17813] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 355.187395][ T5518] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.194157][ T5518] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.196277][T17813] fuse: Bad value for 'fd' [ 355.206144][T17813] bridge_slave_0: default FDB implementation only supports local addresses [ 355.214463][ T5518] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.234052][ T5518] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.262815][ T5518] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 355.270065][ T5518] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 355.280814][ T5518] usb 7-1: Product: syz [ 355.288360][ T5518] usb 7-1: Manufacturer: syz [ 355.289880][ T5518] usb 7-1: SerialNumber: syz [ 355.296406][ T5518] usb 7-1: config 0 descriptor?? [ 355.326381][ T5518] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 355.355929][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.430880][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1955'. [ 355.513588][T17794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.521420][T17794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.525566][ T5518] usb 7-1: USB disconnect, device number 50 [ 355.532576][ T5518] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 356.426370][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.533809][T17860] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1961'. [ 356.547253][T17860] block2mtd: error: cannot open device Ta4Gg)_դEvr!4>=Z{By<0\i= [ 356.547253][T17860] \!ug[ [ 356.894811][T17893] tmpfs: Unknown parameter 'usrquotas/pci/devices/0000:00:02.0/driver/unbind' [ 357.038234][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.205869][ T1035] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 357.356435][ T1035] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 357.366815][ T1035] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 357.369665][ T1035] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 357.373070][ T1035] usb 7-1: config 0 interface 0 has no altsetting 0 [ 357.386538][ T1035] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 357.389399][ T1035] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 357.392789][ T1035] usb 7-1: config 0 interface 0 has no altsetting 0 [ 357.406426][ T1035] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 357.409162][ T1035] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 357.412426][ T1035] usb 7-1: config 0 interface 0 has no altsetting 0 [ 357.419435][ T1035] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 357.425802][ T1035] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 357.435844][ T1035] usb 7-1: config 0 interface 0 has no altsetting 0 [ 357.439015][ T1035] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 357.445844][ T1035] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 357.450466][ T1035] usb 7-1: config 0 interface 0 has no altsetting 0 [ 357.455146][ T1035] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 357.473638][ T1035] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 357.484660][ T1035] usb 7-1: config 0 interface 0 has no altsetting 0 [ 357.489825][ T1035] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 357.492759][ T1035] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 357.497367][ T1035] usb 7-1: config 0 interface 0 has no altsetting 0 [ 357.502112][ T1035] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 357.508042][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.509489][ T1035] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 357.526811][ T1035] usb 7-1: config 0 interface 0 has no altsetting 0 [ 357.543319][ T1035] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 357.547577][ T1035] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 357.550290][ T1035] usb 7-1: Product: syz [ 357.551888][ T1035] usb 7-1: Manufacturer: syz [ 357.553359][ T1035] usb 7-1: SerialNumber: syz [ 357.559657][ T1035] usb 7-1: config 0 descriptor?? [ 357.585036][ T1035] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 357.777640][T17896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.787050][T17896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.800298][ T5518] usb 7-1: USB disconnect, device number 51 [ 357.811092][ T5518] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 359.101841][T17949] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1975'. [ 359.327554][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.049749][T17956] netlink: 'syz.1.1976': attribute type 5 has an invalid length. [ 360.066574][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.110240][T17962] FAULT_INJECTION: forcing a failure. [ 360.110240][T17962] name failslab, interval 1, probability 0, space 0, times 0 [ 360.120268][T17962] CPU: 2 UID: 0 PID: 17962 Comm: syz.2.1977 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.120299][T17962] Tainted: [L]=SOFTLOCKUP [ 360.120304][T17962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 360.120312][T17962] Call Trace: [ 360.120316][T17962] [ 360.120321][T17962] dump_stack_lvl+0x100/0x190 [ 360.120340][T17962] should_fail_ex.cold+0x5/0xa [ 360.120351][T17962] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 360.120365][T17962] should_failslab+0xc2/0x120 [ 360.120382][T17962] kmem_cache_alloc_noprof+0x91/0x6a0 [ 360.120398][T17962] ? skb_clone+0x190/0x400 [ 360.120417][T17962] skb_clone+0x190/0x400 [ 360.120435][T17962] netlink_deliver_tap+0xaed/0xcc0 [ 360.120451][T17962] netlink_unicast+0x62b/0x850 [ 360.120472][T17962] ? __pfx_netlink_unicast+0x10/0x10 [ 360.120489][T17962] netlink_sendmsg+0x8b0/0xda0 [ 360.120504][T17962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.120520][T17962] ? apparmor_socket_sendmsg+0x15b/0x270 [ 360.120535][T17962] ____sys_sendmsg+0xa4d/0xbe0 [ 360.120547][T17962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.120561][T17962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.120580][T17962] ___sys_sendmsg+0x190/0x1e0 [ 360.120594][T17962] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.120613][T17962] ? find_held_lock+0x2b/0x80 [ 360.120638][T17962] __sys_sendmsg+0x160/0x210 [ 360.120655][T17962] ? __pfx___sys_sendmsg+0x10/0x10 [ 360.120675][T17962] ? __pfx_ksys_write+0x10/0x10 [ 360.120690][T17962] __do_fast_syscall_32+0xe7/0x970 [ 360.120707][T17962] ? lockdep_hardirqs_on+0x78/0x100 [ 360.120724][T17962] do_fast_syscall_32+0x32/0x70 [ 360.120741][T17962] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.120757][T17962] RIP: 0023:0xf7fd5fec [ 360.120771][T17962] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 360.120776][T17962] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 360.120789][T17962] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 360.120796][T17962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.120803][T17962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 360.120810][T17962] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 360.120816][T17962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.120831][T17962] [ 360.121106][T17962] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1977'. [ 360.396089][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.430320][T17954] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 360.432394][T17954] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 360.449334][T17954] vhci_hcd vhci_hcd.0: Device attached [ 360.675822][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 360.695924][ T5518] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 360.826444][ T9] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 360.829879][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.835898][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.841187][T17991] syzkaller0: entered promiscuous mode [ 360.844556][T17991] syzkaller0: entered allmulticast mode [ 360.846893][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 360.853181][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.859666][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.863166][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 360.868463][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.871377][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.874786][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 360.879932][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.882770][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.887848][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 360.892654][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.900534][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.907199][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 360.911799][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.914700][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.919133][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 360.924415][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.931576][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.940950][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 360.945972][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.948787][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.952181][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 360.957602][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 360.964514][ T9] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 360.968220][ T9] usb 6-1: Product: syz [ 360.969613][ T9] usb 6-1: Manufacturer: syz [ 360.971160][ T9] usb 6-1: SerialNumber: syz [ 360.976632][ T9] usb 6-1: config 0 descriptor?? [ 360.999665][ T9] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 361.203590][ T5876] usb 6-1: USB disconnect, device number 41 [ 361.211742][ T5876] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 361.438858][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.050045][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.055747][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.072228][T18027] erofs (device sr0): cannot find valid erofs superblock [ 362.292033][T18030] netlink: 'syz.2.1986': attribute type 5 has an invalid length. [ 362.477844][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.607581][T18034] erofs (device sr0): cannot find valid erofs superblock [ 363.061337][T18044] fuse: Bad value for 'user_id' [ 363.068654][T18044] fuse: Bad value for 'user_id' [ 363.112167][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.118588][T18047] syzkaller0: entered promiscuous mode [ 363.120666][T18047] syzkaller0: entered allmulticast mode [ 363.163050][T17980] vhci_hcd: connection reset by peer [ 363.165212][ T13] vhci_hcd vhci_hcd.3: stop threads [ 363.167389][ T13] vhci_hcd vhci_hcd.3: release socket [ 363.169295][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 363.515932][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.705755][ T5737] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 363.875901][ T5737] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 363.879660][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.882582][ T5737] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.886501][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 363.889848][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.892741][ T5737] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.896654][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 363.904891][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.908212][ T5737] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.916571][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 363.919582][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.922399][ T5737] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.929949][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 363.943946][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.954697][ T5737] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.975126][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 363.982340][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.990586][ T5737] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.997146][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 364.001952][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 364.017178][ T5737] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 364.030117][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 364.043770][ T5737] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 364.049732][ T5737] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 364.054323][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 364.076718][ T5737] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 364.086170][ T5737] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 364.090549][ T5737] usb 7-1: Product: syz [ 364.092585][ T5737] usb 7-1: Manufacturer: syz [ 364.094768][ T5737] usb 7-1: SerialNumber: syz [ 364.101714][ T5737] usb 7-1: config 0 descriptor?? [ 364.125066][ T5737] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 364.229402][T18087] sch_fq: defrate 4294967295 ignored. [ 364.342047][ T5737] usb 7-1: USB disconnect, device number 52 [ 364.364431][ T5737] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 364.563250][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.715626][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.585722][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.659628][T18116] syzkaller0: entered promiscuous mode [ 365.671450][T18116] syzkaller0: entered allmulticast mode [ 365.835767][ T5518] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 366.145893][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.251263][T18141] fuse: Bad value for 'user_id' [ 366.254103][T18141] fuse: Bad value for 'user_id' [ 366.626825][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.677191][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.925201][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.947025][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.953855][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.964671][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.969250][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.383417][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.393620][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.398155][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.407292][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.410694][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.592280][T18221] fuse: Bad value for 'user_id' [ 368.597731][T18221] fuse: Bad value for 'user_id' [ 368.707009][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.763273][ T5584] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.783770][ T5584] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.887317][T18222] erofs (device sr0): cannot find valid erofs superblock [ 369.089841][ T5584] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.107481][ T5584] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.185928][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.353668][ T5086] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 369.390567][ T5584] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.397377][ T5584] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.469720][T18180] lo speed is unknown, defaulting to 1000 [ 369.640814][ T5584] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.643953][ T5584] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.756084][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.855217][T18180] wlan0 speed is unknown, defaulting to 1000 [ 370.065542][ T5086] Bluetooth: hci4: command tx timeout [ 370.465792][ T5086] Bluetooth: hci0: command tx timeout [ 371.074403][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.155472][ T5086] Bluetooth: hci4: command tx timeout [ 372.159175][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.226987][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.555649][ T5086] Bluetooth: hci0: command tx timeout [ 373.188038][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.234418][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.237512][ T5086] Bluetooth: hci4: command tx timeout [ 374.315959][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.625680][ T5086] Bluetooth: hci0: command tx timeout [ 375.266792][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.269507][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.307147][ T5086] Bluetooth: hci4: command tx timeout [ 376.309621][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.705695][ T5086] Bluetooth: hci0: command tx timeout [ 377.346598][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.146938][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.149485][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.306302][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.386227][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.425889][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.466396][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.472685][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.479681][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.483605][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.345891][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.355981][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.372142][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.379144][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.506740][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.545930][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.481428][ T64] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.488268][ T64] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.494245][ T64] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.502740][ T64] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.508980][ T64] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.665804][ T8515] net_ratelimit: 7 callbacks suppressed [ 385.665823][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.720035][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.269420][ T5086] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 387.274116][ T5086] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 387.277380][ T5086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 387.281403][ T5086] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 387.298999][ T5086] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 387.426103][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.595493][ T5086] Bluetooth: hci5: command tx timeout [ 387.760965][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.785787][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.345584][ T5086] Bluetooth: hci6: command tx timeout [ 389.677599][ T5086] Bluetooth: hci5: command tx timeout [ 389.833870][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.141792][T18205] lo speed is unknown, defaulting to 1000 [ 390.237929][T18205] wlan0 speed is unknown, defaulting to 1000 [ 390.468599][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.736690][T18242] bond0: (slave syz_tun): Releasing backup interface [ 390.876536][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.902216][ T5584] bridge0: left allmulticast mode [ 391.425499][ T5086] Bluetooth: hci6: command tx timeout [ 391.676267][ T5584] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 391.745403][ T5086] Bluetooth: hci5: command tx timeout [ 391.757110][ T5584] bond0 (unregistering): Released all slaves [ 391.764953][ T5584] bond1 (unregistering): Released all slaves [ 391.777643][ T1156] smbdirect: ib_dev[syz1] removed [ 391.792190][ T5584] bond2 (unregistering): Released all slaves [ 391.839982][ T5441] 8021q: adding VLAN 0 to HW filter on device eth1 [ 391.922365][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.057552][ T5584] tipc: Left network mode [ 392.057644][T18271] lo speed is unknown, defaulting to 1000 [ 392.099875][T18282] lo speed is unknown, defaulting to 1000 [ 392.111011][T18271] wlan0 speed is unknown, defaulting to 1000 [ 392.149046][T18282] wlan0 speed is unknown, defaulting to 1000 [ 392.182199][ T5584] IPVS: stopping master sync thread 15669 ... [ 392.394044][ T5441] 8021q: adding VLAN 0 to HW filter on device eth2 [ 392.876987][T18180] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.879419][T18180] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.881809][T18180] bridge_slave_0: entered allmulticast mode [ 392.884589][T18180] bridge_slave_0: entered promiscuous mode [ 392.914301][ T5441] 8021q: adding VLAN 0 to HW filter on device eth3 [ 392.917431][T18180] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.925628][T18180] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.928177][T18180] bridge_slave_1: entered allmulticast mode [ 392.932544][T18180] bridge_slave_1: entered promiscuous mode [ 392.955448][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.125869][ T5584] hsr_slave_0: left promiscuous mode [ 393.165958][ T5584] hsr_slave_1: left promiscuous mode [ 393.209463][ T5584] veth1_macvtap: left promiscuous mode [ 393.211359][ T5584] veth0_macvtap: left promiscuous mode [ 393.213160][ T5584] veth1_vlan: left promiscuous mode [ 393.215228][ T5584] veth0_vlan: left promiscuous mode [ 393.507992][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.515842][ T64] Bluetooth: hci6: command tx timeout [ 393.516242][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.825994][ T5086] Bluetooth: hci5: command tx timeout [ 393.948731][T18180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.967582][T18205] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.975700][T18205] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.982804][T18205] bridge_slave_0: entered allmulticast mode [ 393.987321][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.993340][T18205] bridge_slave_0: entered promiscuous mode [ 394.009696][T18180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.059234][T18205] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.062480][T18205] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.065086][T18205] bridge_slave_1: entered allmulticast mode [ 394.076970][T18205] bridge_slave_1: entered promiscuous mode [ 394.159291][T18205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.213296][T18180] team0: Port device team_slave_0 added [ 394.220269][T18205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.266080][T18180] team0: Port device team_slave_1 added [ 394.292674][T18205] team0: Port device team_slave_0 added [ 394.300946][T18205] team0: Port device team_slave_1 added [ 394.344057][T18271] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.346979][T18271] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.349307][T18271] bridge_slave_0: entered allmulticast mode [ 394.351978][T18271] bridge_slave_0: entered promiscuous mode [ 394.398945][T18205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.401883][T18205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.411453][T18205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.417926][T18271] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.420115][T18271] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.422879][T18271] bridge_slave_1: entered allmulticast mode [ 394.426271][T18271] bridge_slave_1: entered promiscuous mode [ 394.429056][T18180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.431378][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.443194][T18180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.455469][T18205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.457756][T18205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.466243][T18205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.478205][T18180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.480525][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.488507][T18180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.560544][T18282] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.563285][T18282] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.567265][T18282] bridge_slave_0: entered allmulticast mode [ 394.570190][T18282] bridge_slave_0: entered promiscuous mode [ 394.591037][T18271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.604461][T18282] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.609586][T18282] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.612019][T18282] bridge_slave_1: entered allmulticast mode [ 394.614720][T18282] bridge_slave_1: entered promiscuous mode [ 394.629422][T18271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.633203][ T5441] 8021q: adding VLAN 0 to HW filter on device eth4 [ 394.712064][T18205] hsr_slave_0: entered promiscuous mode [ 394.716266][T18205] hsr_slave_1: entered promiscuous mode [ 394.744679][T18180] hsr_slave_0: entered promiscuous mode [ 394.748227][T18180] hsr_slave_1: entered promiscuous mode [ 394.750520][T18180] debugfs: 'hsr0' already exists in 'hsr' [ 394.752389][T18180] Cannot create hsr debugfs directory [ 394.755899][T18282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.776492][T18282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.795154][T18271] team0: Port device team_slave_0 added [ 394.813947][T18271] team0: Port device team_slave_1 added [ 394.854220][ T5584] IPVS: stop unused estimator thread 0... [ 394.914638][T18271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.917609][T18271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.929963][T18271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.937367][T18282] team0: Port device team_slave_0 added [ 394.941152][T18282] team0: Port device team_slave_1 added [ 394.953821][T18271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.957688][T18271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.968069][T18271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.026214][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.204219][ T5584] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.207801][ T5584] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.252468][T18282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.254734][T18282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.265747][T18282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.316791][T18271] hsr_slave_0: entered promiscuous mode [ 395.319755][T18271] hsr_slave_1: entered promiscuous mode [ 395.322025][T18271] debugfs: 'hsr0' already exists in 'hsr' [ 395.324274][T18271] Cannot create hsr debugfs directory [ 395.585483][ T5086] Bluetooth: hci6: command tx timeout [ 395.817279][T18282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.819559][T18282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.831853][T18282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.040569][ T5584] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.048319][ T5584] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.065699][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.133178][T18282] hsr_slave_0: entered promiscuous mode [ 396.137645][T18282] hsr_slave_1: entered promiscuous mode [ 396.140837][T18282] debugfs: 'hsr0' already exists in 'hsr' [ 396.143085][T18282] Cannot create hsr debugfs directory [ 396.370405][ T5584] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.374570][ T5584] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.548301][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.718618][ T5584] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.722715][ T5584] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.860481][T18205] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 396.900046][T18205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.903666][T18205] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 396.951627][T18205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.984671][T18205] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 397.009416][T18205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.013103][T18205] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 397.045717][T18205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.109850][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.283256][T18180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 397.314901][T18180] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.318700][T18180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 397.349341][T18180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.431141][ T5584] vlan0: left promiscuous mode [ 397.432779][ T5584] bond0: left promiscuous mode [ 397.434383][ T5584] bond_slave_0: left promiscuous mode [ 397.438220][ T5584] bond_slave_1: left promiscuous mode [ 397.447310][ T5584] bridge0: port 3(vlan0) entered disabled state [ 397.526698][ T5584] bridge_slave_1: left allmulticast mode [ 397.528670][ T5584] bridge_slave_1: left promiscuous mode [ 397.530746][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.577108][ T5584] bridge_slave_0: left allmulticast mode [ 397.579155][ T5584] bridge_slave_0: left promiscuous mode [ 397.581543][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.663574][ T5584] batman_adv: batadv0: Interface deactivated: gretap2 [ 397.917108][ T5584] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 397.920195][ T5584] ip6gre1 (unregistering): left promiscuous mode [ 398.146071][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.256174][ T5584] gretap0 (unregistering): left promiscuous mode [ 398.306366][ T5584] bond1 (unregistering): (slave gretap1): Releasing active interface [ 398.357664][ T5584] batman_adv: batadv0: Removing interface: gretap2 [ 398.566323][ T5584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.606205][ T5584] bond_slave_0: left allmulticast mode [ 398.626432][ T5584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.666055][ T5584] bond_slave_1: left allmulticast mode [ 398.687662][ T5584] bond0 (unregistering): Released all slaves [ 398.693005][ T5584] bond1 (unregistering): Released all slaves [ 398.730364][ T5584] bond2 (unregistering): (slave veth3): Releasing backup interface [ 398.747863][ T5584] bond2 (unregistering): Released all slaves [ 398.761406][ T5584] bond3 (unregistering): Released all slaves [ 398.774794][ T5584] bond4 (unregistering): Released all slaves [ 398.793100][T18180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 398.821101][T18180] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.832721][ T5441] 8021q: adding VLAN 0 to HW filter on device eth5 [ 398.843679][T18180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 398.903654][T18180] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.964221][ T5584] tipc: Disabling bearer [ 398.982475][ T5584] tipc: Disabling bearer [ 398.984600][ T5584] tipc: Left network mode [ 399.089251][T18282] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 399.111762][ T5584] IPVS: stopping master sync thread 14231 ... [ 399.117398][T18282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.162166][T18282] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 399.191328][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.199207][T18282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.281315][T18282] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 399.313742][T18282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.410858][T18282] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 399.448333][T18282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.451835][ T5441] 8021q: adding VLAN 0 to HW filter on device eth6 [ 399.587270][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.657390][T18205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.897387][T18205] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.939827][T18271] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 399.978143][T18271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.989851][ T234] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.992317][ T234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.996933][T18271] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 400.018301][T18271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.021133][T18271] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 400.058360][T18271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.086002][ T5584] dummy0: left promiscuous mode [ 400.176822][ T5584] hsr_slave_0: left promiscuous mode [ 400.216105][ T5584] hsr_slave_1: left promiscuous mode [ 400.218738][ T5584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.221210][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.236196][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.239663][ T5584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.242067][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.277315][ T5584] batman_adv: batadv0: Interface deactivated: vlan2 [ 400.279543][ T5584] batman_adv: batadv0: Removing interface: vlan2 [ 400.356773][ T5584] veth1_macvtap: left promiscuous mode [ 400.359225][ T5584] veth0_macvtap: left promiscuous mode [ 400.361734][ T5584] veth1_vlan: left promiscuous mode [ 400.363965][ T5584] veth0_vlan: left promiscuous mode [ 401.036370][ T5584] team0 (unregistering): Port device 12 removed [ 401.056175][ T5584] team0 (unregistering): Port device team_slave_0 removed [ 401.281561][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.295804][ T81] smbdirect: ib_dev[syz2] removed [ 401.319238][T18271] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 401.332944][T18271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.339124][ T234] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.341359][ T234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.356921][ T5441] 8021q: adding VLAN 0 to HW filter on device eth7 [ 401.360617][ T5737] lo speed is unknown, defaulting to 1000 [ 401.370874][ T5737] infiniband syz2: ib_query_port failed (-19) [ 401.378783][T18180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.411121][T18180] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.435198][ T234] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.437392][ T234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.454659][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.456962][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.565266][T18282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.631904][T18271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.638164][T18282] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.660984][ T234] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.663189][ T234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.681592][ T234] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.685998][ T234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.709810][T18271] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.748217][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.750504][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.779076][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.781302][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.800221][ T5441] 8021q: adding VLAN 0 to HW filter on device eth8 [ 402.107805][ T5584] IPVS: stop unused estimator thread 0... [ 402.308381][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.316023][T18205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.390910][T18180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.628069][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.650102][T18282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.711613][T18271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.727596][T18205] veth0_vlan: entered promiscuous mode [ 402.778960][T18205] veth1_vlan: entered promiscuous mode [ 402.820788][T18180] veth0_vlan: entered promiscuous mode [ 402.856325][T18180] veth1_vlan: entered promiscuous mode [ 402.893994][T18205] veth0_macvtap: entered promiscuous mode [ 402.911349][T18205] veth1_macvtap: entered promiscuous mode [ 402.974428][T18205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.990626][T18205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.030861][T18180] veth0_macvtap: entered promiscuous mode [ 403.062720][T18180] veth1_macvtap: entered promiscuous mode [ 403.117991][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.195029][T18180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.218528][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.236381][ T5584] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.246967][T18180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.263126][T18282] veth0_vlan: entered promiscuous mode [ 403.297020][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.301505][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.302312][T18271] veth0_vlan: entered promiscuous mode [ 403.321138][T18282] veth1_vlan: entered promiscuous mode [ 403.348394][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.372688][T18271] veth1_vlan: entered promiscuous mode [ 403.429111][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.434919][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.519404][ T5584] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.592417][T18282] veth0_macvtap: entered promiscuous mode [ 403.608712][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.613277][T18282] veth1_macvtap: entered promiscuous mode [ 403.617553][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.631917][T18271] veth0_macvtap: entered promiscuous mode [ 403.666297][ T5584] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.694859][T18271] veth1_macvtap: entered promiscuous mode [ 403.714642][T18271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.729210][T18271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.780687][ T5814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.785120][ T5814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.807551][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.819668][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.898382][T18282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.920276][T18282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.921905][T19605] erofs (device sr0): cannot find valid erofs superblock [ 403.930623][T19162] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.355977][T19162] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.362105][ T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.371402][ T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.378444][ T5584] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.383403][ T5584] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.389099][ T8465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.399077][ T5877] IPVS: starting estimator thread 0... [ 404.440258][ T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.440816][ T5814] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.451936][ T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.467407][T19637] fuse: Bad value for 'user_id' [ 404.471070][T19637] fuse: Bad value for 'user_id' [ 404.515753][T19639] IPVS: using max 43 ests per chain, 103200 per kthread [ 405.126141][ T5584] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.355953][ T5814] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.358988][ T5814] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.361863][ T5814] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.364736][ T5814] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.374128][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.385324][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.389098][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.704726][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.361481][ T8465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.373277][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.810301][T19694] 9pnet_virtio: no channels available for device syz [ 406.853044][T19694] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2020'. [ 407.133647][T19706] erofs (device sr0): cannot find valid erofs superblock [ 407.337834][T19719] [ 407.338641][T19719] ====================================================== [ 407.340648][T19719] WARNING: possible circular locking dependency detected [ 407.342704][T19719] syzkaller #0 Tainted: G L [ 407.344617][T19719] ------------------------------------------------------ [ 407.346674][T19719] syz.4.2026/19719 is trying to acquire lock: [ 407.348518][T19719] ffffffff901cc4e8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvc_func_allow_link+0x76/0x3f0 [ 407.349383][T19726] geneve1: entered promiscuous mode [ 407.351480][T19719] [ 407.351480][T19719] but task is already holding lock: [ 407.351489][T19719] ffff888012fac880 (&sb->s_type->i_mutex_key#34){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 407.358583][T19719] [ 407.358583][T19719] which lock already depends on the new lock. [ 407.358583][T19719] [ 407.361810][T19719] [ 407.361810][T19719] the existing dependency chain (in reverse order) is: [ 407.364670][T19719] [ 407.364670][T19719] -> #2 (&sb->s_type->i_mutex_key#34){++++}-{4:4}: [ 407.367475][T19719] lock_acquire+0x1b9/0x370 [ 407.369003][T19719] down_write+0x8b/0x1f0 [ 407.370434][T19719] configfs_depend_item_unlocked+0xf3/0x6a0 [ 407.372306][T19719] usbg_make_tpg+0x261/0x620 [ 407.373813][T19719] target_fabric_make_tpg+0xab/0x8c0 [ 407.375656][T19719] configfs_mkdir+0x51e/0xb70 [ 407.377211][T19719] vfs_mkdir+0x361/0x850 [ 407.378627][T19719] filename_mkdirat+0x48b/0x5e0 [ 407.380211][T19719] __ia32_sys_mkdir+0x6a/0x90 [ 407.381812][T19719] __do_fast_syscall_32+0xe7/0x970 [ 407.383473][T19719] do_fast_syscall_32+0x32/0x70 [ 407.385063][T19719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 407.387061][T19719] [ 407.387061][T19719] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 407.389238][T19719] lock_acquire+0x1b9/0x370 [ 407.390717][T19719] __mutex_lock+0x1a4/0x1bd0 [ 407.392278][T19719] tcm_set_name+0x29/0xb0 [ 407.393698][T19719] function_make+0x21c/0x3f0 [ 407.395215][T19719] configfs_mkdir+0x51e/0xb70 [ 407.396896][T19719] vfs_mkdir+0x361/0x850 [ 407.398322][T19719] filename_mkdirat+0x48b/0x5e0 [ 407.399881][T19719] __ia32_sys_mkdir+0x6a/0x90 [ 407.401444][T19719] __do_fast_syscall_32+0xe7/0x970 [ 407.403073][T19719] do_fast_syscall_32+0x32/0x70 [ 407.404641][T19719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 407.406694][T19719] [ 407.406694][T19719] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 407.409147][T19719] check_prev_add+0xeb/0xe60 [ 407.410722][T19719] __lock_acquire+0x136c/0x1a40 [ 407.412332][T19719] lock_acquire+0x1b9/0x370 [ 407.413828][T19719] __mutex_lock+0x1a4/0x1bd0 [ 407.415397][T19719] uvc_func_allow_link+0x76/0x3f0 [ 407.417005][T19719] configfs_symlink+0x540/0x11f0 [ 407.418592][T19719] vfs_symlink+0x178/0x4d0 [ 407.420091][T19719] filename_symlinkat+0x2a6/0x560 [ 407.421703][T19719] __ia32_sys_symlink+0x78/0xb0 [ 407.423266][T19719] __do_fast_syscall_32+0xe7/0x970 [ 407.424983][T19719] do_fast_syscall_32+0x32/0x70 [ 407.426638][T19719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 407.428704][T19719] [ 407.428704][T19719] other info that might help us debug this: [ 407.428704][T19719] [ 407.431849][T19719] Chain exists of: [ 407.431849][T19719] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#34 [ 407.431849][T19719] [ 407.436345][T19719] Possible unsafe locking scenario: [ 407.436345][T19719] [ 407.438564][T19719] CPU0 CPU1 [ 407.440230][T19719] ---- ---- [ 407.441838][T19719] lock(&sb->s_type->i_mutex_key#34); [ 407.443493][T19719] lock(&opts->dep_lock); [ 407.445634][T19719] lock(&sb->s_type->i_mutex_key#34); [ 407.447985][T19719] lock(gadget_subsys.su_mutex); [ 407.449484][T19719] [ 407.449484][T19719] *** DEADLOCK *** [ 407.449484][T19719] [ 407.451873][T19719] 2 locks held by syz.4.2026/19719: [ 407.453414][T19719] #0: ffff8880223a6450 (sb_writers#24){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 407.456680][T19719] #1: ffff888012fac880 (&sb->s_type->i_mutex_key#34){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 407.460313][T19719] [ 407.460313][T19719] stack backtrace: [ 407.462076][T19719] CPU: 0 UID: 0 PID: 19719 Comm: syz.4.2026 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.462095][T19719] Tainted: [L]=SOFTLOCKUP [ 407.462100][T19719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 407.462109][T19719] Call Trace: [ 407.462114][T19719] [ 407.462120][T19719] dump_stack_lvl+0x100/0x190 [ 407.462134][T19719] print_circular_bug.cold+0x178/0x1c7 [ 407.462154][T19719] check_noncircular+0x146/0x160 [ 407.462174][T19719] check_prev_add+0xeb/0xe60 [ 407.462191][T19719] ? stack_depot_save_flags+0x27/0x9d0 [ 407.462209][T19719] __lock_acquire+0x136c/0x1a40 [ 407.462228][T19719] ? vfs_symlink+0x178/0x4d0 [ 407.462245][T19719] lock_acquire+0x1b9/0x370 [ 407.462261][T19719] ? uvc_func_allow_link+0x76/0x3f0 [ 407.462277][T19719] ? __pfx___might_resched+0x10/0x10 [ 407.462296][T19719] __mutex_lock+0x1a4/0x1bd0 [ 407.462312][T19719] ? uvc_func_allow_link+0x76/0x3f0 [ 407.462326][T19719] ? uvc_func_allow_link+0x76/0x3f0 [ 407.462340][T19719] ? __lock_acquire+0x49f/0x1a40 [ 407.462356][T19719] ? __pfx___mutex_lock+0x10/0x10 [ 407.462371][T19719] ? make_vfsuid+0xec/0x140 [ 407.462388][T19719] ? generic_permission+0xae/0x800 [ 407.462403][T19719] ? uvc_func_allow_link+0x76/0x3f0 [ 407.462416][T19719] uvc_func_allow_link+0x76/0x3f0 [ 407.462430][T19719] ? mntput_no_expire+0xe7/0x220 [ 407.462447][T19719] configfs_symlink+0x540/0x11f0 [ 407.462462][T19719] ? bpf_lsm_inode_permission+0x9/0x10 [ 407.462478][T19719] ? security_inode_permission+0xbf/0x250 [ 407.462493][T19719] ? __pfx_configfs_symlink+0x10/0x10 [ 407.462508][T19719] vfs_symlink+0x178/0x4d0 [ 407.462524][T19719] filename_symlinkat+0x2a6/0x560 [ 407.462537][T19719] ? __pfx_filename_symlinkat+0x10/0x10 [ 407.462549][T19719] ? strncpy_from_user+0x19d/0x2d0 [ 407.462565][T19719] ? do_getname+0x191/0x390 [ 407.462579][T19719] __ia32_sys_symlink+0x78/0xb0 [ 407.462592][T19719] __do_fast_syscall_32+0xe7/0x970 [ 407.462609][T19719] do_fast_syscall_32+0x32/0x70 [ 407.462624][T19719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 407.462639][T19719] RIP: 0023:0xf703efec [ 407.462654][T19719] Code: Unable to access opcode bytes at 0xf703efc2. [ 407.462660][T19719] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000053 [ 407.462671][T19719] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000080001b00 [ 407.462678][T19719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 407.462684][T19719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 407.462691][T19719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.462697][T19719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 407.462706][T19719] [ 407.545412][T19624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.590989][ T5584] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.603295][ T5584] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.612799][ T5584] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.619094][ T5584] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.625496][ T5584] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.635512][ T5584] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.647558][ T5584] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.664532][ T5584] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.635597][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.705905][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.675677][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.716004][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.745874][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.748852][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.716641][T19624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.785816][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.835941][T19624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.786389][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.875980][T19624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.907591][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.948043][ T5518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog