last executing test programs: 11.983064391s ago: executing program 0 (id=46): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000003c0)={0x1}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x96}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x702, 0x1e, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000380)={0x6, &(0x7f00000000c0)=[{0x26, '\x00', @buffer={"bc3b2ab1d4dd10d9413895d1456ddd803c7dd8ea00d33e97e80a093854fe55a9", 0x20}, 0x6}, {0x1d, '\x00', @buffer={"8b81f06597d8dce9fc67e82025338a22510de92aa06a2b9ebcd73c0207c902cd", 0x20}, 0x7}, {0x43, '\x00', @buffer={"7d35420d9b670a03f9529d473d8691803e5cc56500698f48645bc7d20b6ed7a0", 0x20}, 0x10000}]}) 11.844507418s ago: executing program 0 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='270', 0x3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0c81) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') ioctl$GET_BITMAP_FILE(r1, 0x90000915, &(0x7f0000000780)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r1, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) write$nci(r1, 0x0, 0x1b2) unshare(0x40000000) 11.012943294s ago: executing program 3 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000780)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x10003, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x149000, 0x19a) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, &(0x7f00000005c0)) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000016000008001b"], 0x30}}, 0x0) 719.177054ms ago: executing program 0 (id=56): pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000ac0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000b00)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000b40)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000c40)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e, 0x0}}], 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000cc0)='./cgroup\x00', 0x0, 0x1008441, 0x0) 703.535062ms ago: executing program 1 (id=57): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x2, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x1, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x7fff, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 629.430554ms ago: executing program 3 (id=60): timer_create(0x0, 0x0, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000280)='\x00', 0x802, 0x2, &(0x7f00000002c0)={0x401, 0xfffffffffffff2aa, 0x3ff, 0x640bb0af}) mq_notify(r0, &(0x7f0000000440)={0x0, 0x13, 0x4, @thr={0x0, 0x0}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000200)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r2, &(0x7f00000005c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x7, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x4, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x3, 0x33b5, 0x1, 0xfffffff9, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x2, 0x6, 0xfffffffd, 0x7, 0x7fffffff, 0x3, 0x4, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x7, 0x0, 0xd, 0xba, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x0, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0x9, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x4, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81319d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x5, 0x9, 0x4, 0x80000001, 0x5, 0xe46, 0xfffffb66, 0x80, 0x8000002, 0x20000084, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x3, 0x8, 0x6d, 0x807, 0x2, 0x1, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x5, 0x8, 0xfe4, 0x3ff], [0x2, 0xffffffff, 0x4, 0x3, 0x3, 0x20000010, 0x80, 0x8001, 0x5, 0x1, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x64, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x5, 0xfffffff7, 0x2, 0x3, 0x0, 0x7, 0x3, 0x4c, 0x3, 0x1, 0xffffffff, 0x0, 0x9, 0x13, 0x10001, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x401, 0x4, 0xf, 0x7, 0x47, 0x7, 0x0, 0x11, 0xfffffffd, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10005, 0xfffffffd, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x5, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0xe, 0x10001, 0x1, 0x5, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0x9, 0x0, 0x0, 0x3, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb02d, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x2, 0x7, 0x4, 0x0, 0x8000b, 0x20400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) read$hiddev(r3, &(0x7f0000000a40)=""/117, 0x75) 619.527645ms ago: executing program 1 (id=61): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x5ae, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56e4f, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xff, 0x81}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 609.381678ms ago: executing program 3 (id=62): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) r1 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000600)={{0x80}, 'port0\x00', 0x62, 0x1308f3, 0x401, 0x800040b, 0x3, 0x4, 0x40, 0x0, 0x7cce8c743ee810da}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000019b40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000019b80)='./proc\x00', &(0x7f0000019bc0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000019c00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) write(r2, &(0x7f0000019c40)='27', 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000019c80), 0x2, 0x0) 579.082028ms ago: executing program 0 (id=64): mknodat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000280)={0xf0f022}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r2, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000980)={0x2, @win={{0x4, 0x7, 0x2, 0x40}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}}) socket$nl_sock_diag(0x10, 0x3, 0x4) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x48000, 0x0) 578.790822ms ago: executing program 1 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x103}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8800, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000680)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) listen(r1, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000500)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 578.611963ms ago: executing program 2 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x8910, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee0000ea584000"}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'batadv_slave_0\x00', &(0x7f00000000c0)=@ethtool_dump={0x3e, 0xffffff00, 0xfc17a14}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x198fb580ea88f23a, 0x0, &(0x7f0000000280)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)="020030397f00090100"/128, 0x80) 578.35896ms ago: executing program 3 (id=67): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000ac0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000002500)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000033c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000003400), 0x56) sendmsg$kcm(r8, &(0x7f0000003440)={&(0x7f0000003480)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003540)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 550.604778ms ago: executing program 1 (id=68): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x36, @unmapped=0xdddd0000}}], 0xe0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000140)='bdev\x00', 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 550.437478ms ago: executing program 2 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/ieee80211/phy0/aqm\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$kcm(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f00000002c0)=[0x1], &(0x7f0000000200), &(0x7f0000000000)=[0xfffffffffffffffe], 0x0, 0x1}) 491.736971ms ago: executing program 3 (id=70): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x54b, 0x4, 0x8f, 0x5}}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x36, @unmapped=0xdddd0000}}], 0x90}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 473.131923ms ago: executing program 2 (id=71): socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000580)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000005c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000700)={0x43, 0x0, 0x3, 0x3}, 0x10) write(r0, &(0x7f0000000780)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 445.528082ms ago: executing program 0 (id=72): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000400)={[0x8000, 0x1000000003, 0x1ffffffffffd, 0x5, 0x2d391, 0x3da0000000000, 0x2004cb, 0x80001000, 0xa7c, 0x3, 0x5, 0x9, 0x9, 0x0, 0xfffffffffffffffd, 0x5], 0xeeee8000, 0xa02}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x30, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 394.0014ms ago: executing program 2 (id=73): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x11, 0x1, 0x800) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11e, 0x1, 0x0, 0xfffffffffffffd61) r1 = syz_open_dev$vim2m(0x0, 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000006c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000900)='./config\x00', &(0x7f0000000940)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/idVendor\x00', 0x80200, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0) symlinkat(&(0x7f0000000a80)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b40)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000d40)='dummy_udc.0', 0xb) 295.121914ms ago: executing program 2 (id=74): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000400)={[0x8000, 0x1000000003, 0x1ffffffffffd, 0x5, 0x2d391, 0x3da0000000000, 0x2004cb, 0x80001000, 0xa7c, 0x3, 0x5, 0x9, 0x9, 0x0, 0xfffffffffffffffd, 0x5], 0xeeee8000, 0xa02}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x38, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 154.266668ms ago: executing program 3 (id=75): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x36, @unmapped=0xdddd0000}}], 0x88}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000140)='bdev\x00', 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 87.729896ms ago: executing program 0 (id=76): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x36, @unmapped=0xdddd0000}}], 0xa0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 66.802653ms ago: executing program 1 (id=77): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000800)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000900)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000940)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000a40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ac0), &(0x7f0000000b00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000b40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000bc0), &(0x7f0000000c00)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000c40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @desc4}, &(0x7f0000000d40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @desc1}, &(0x7f0000000f40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000fc0), &(0x7f0000001000)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000001040)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000001140)={0x0, "00112233448ee9f20599aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000011c0), &(0x7f0000001200)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000001240)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000012c0), &(0x7f0000001300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000001340)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000013c0), &(0x7f0000001400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000001440)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000014c0), &(0x7f0000001500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000001540)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000015c0), &(0x7f0000001600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66]}, &(0x7f0000001640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000016c0), &(0x7f0000001700)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000001740)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f00000017c0), &(0x7f0000001800)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f00000005c0)='id_resolver\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)='|', 0x1, r0) 15.84899ms ago: executing program 2 (id=78): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000400)={[0x8000, 0x1000000003, 0x1ffffffffffd, 0x5, 0x2d391, 0x3da0000000000, 0x2004cb, 0x80001000, 0xa7c, 0x3, 0x5, 0x9, 0x9, 0x0, 0xfffffffffffffffd, 0x5], 0xeeee8000, 0xa02}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x30, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 1 (id=79): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi4\x00', 0x48003, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x5) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x1, &(0x7f00000004c0)=""/160, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x40000000) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:12871' (ED25519) to the list of known hosts. [ 41.063203][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 41.063255][ T42] audit: type=1400 audit(1793968222.564:141): avc: denied { mounton } for pid=5770 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.064739][ T42] audit: type=1400 audit(1793968222.564:142): avc: denied { mount } for pid=5770 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.069008][ T5770] cgroup: Unknown subsys name 'net' [ 41.070281][ T42] audit: type=1400 audit(1793968222.574:143): avc: denied { unmount } for pid=5770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.209040][ T5770] cgroup: Unknown subsys name 'cpuset' [ 41.212903][ T5770] cgroup: Unknown subsys name 'rlimit' [ 41.373498][ T42] audit: type=1400 audit(1793968222.874:144): avc: denied { setattr } for pid=5770 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.374379][ T42] audit: type=1400 audit(1793968222.874:145): avc: denied { create } for pid=5770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.374643][ T42] audit: type=1400 audit(1793968222.874:146): avc: denied { write } for pid=5770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.374985][ T42] audit: type=1400 audit(1793968222.874:147): avc: denied { read } for pid=5770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.391451][ T42] audit: type=1400 audit(1793968222.894:148): avc: denied { mounton } for pid=5770 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 41.393631][ T42] audit: type=1400 audit(1793968222.894:149): avc: denied { mount } for pid=5770 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 41.448642][ T5778] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.449546][ T42] audit: type=1400 audit(1793968222.954:150): avc: denied { relabelto } for pid=5778 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.149979][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.067090][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 46.067104][ T42] audit: type=1400 audit(1793968227.574:158): avc: denied { ioctl } for pid=5785 comm="syz-executor" path="socket:[6539]" dev="sockfs" ino=6539 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.097071][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.098156][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.099423][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.099900][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.100136][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.101865][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.103716][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.103837][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.107018][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.107533][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.108302][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.108963][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.109163][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.109813][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.111011][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.111120][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.111328][ T42] audit: type=1400 audit(1793968227.604:159): avc: denied { read } for pid=5785 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.111356][ T42] audit: type=1400 audit(1793968227.604:160): avc: denied { open } for pid=5785 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.111378][ T42] audit: type=1400 audit(1793968227.614:161): avc: denied { mounton } for pid=5785 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.113400][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.116311][ T42] audit: type=1400 audit(1793968227.614:162): avc: denied { module_request } for pid=5785 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.116696][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.122098][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.123340][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.127877][ T42] audit: type=1400 audit(1793968227.634:163): avc: denied { mounton } for pid=5792 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.130820][ T42] audit: type=1400 audit(1793968227.634:164): avc: denied { module_request } for pid=5792 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.145125][ T42] audit: type=1400 audit(1793968227.644:165): avc: denied { sys_module } for pid=5784 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.295617][ T42] audit: type=1400 audit(1793968227.794:166): avc: denied { create } for pid=5788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 46.314420][ T42] audit: type=1400 audit(1793968227.814:167): avc: denied { write } for pid=5784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 46.321023][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.323947][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.324483][ T5792] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.325135][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.329197][ T5788] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.332768][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.418501][ T5785] infiniband rxe0: set active [ 46.420559][ T5785] infiniband rxe0: added rxe_eth0 [ 46.429479][ T5785] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 46.429501][ T5785] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 46.429523][ T5785] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 46.430950][ T5776] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.448977][ T5785] RDS/IB: rxe0: added [ 46.449086][ T5785] smc: adding ib device rxe0 with port count 1 [ 46.449119][ T5785] smc: ib device rxe0 port 1 has no pnetid [ 46.461618][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.474392][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.562691][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.716492][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.722471][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.722518][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.722667][ T5784] bridge_slave_0: entered allmulticast mode [ 46.723469][ T5784] bridge_slave_0: entered promiscuous mode [ 46.726767][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.726850][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.726911][ T5784] bridge_slave_1: entered allmulticast mode [ 46.727753][ T5784] bridge_slave_1: entered promiscuous mode [ 46.734470][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.734531][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.734580][ T5792] bridge_slave_0: entered allmulticast mode [ 46.735299][ T5792] bridge_slave_0: entered promiscuous mode [ 46.749826][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.749870][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.749921][ T5792] bridge_slave_1: entered allmulticast mode [ 46.750668][ T5792] bridge_slave_1: entered promiscuous mode [ 46.751414][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.751455][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.751516][ T5788] bridge_slave_0: entered allmulticast mode [ 46.752349][ T5788] bridge_slave_0: entered promiscuous mode [ 46.764186][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.764362][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.764512][ T5788] bridge_slave_1: entered allmulticast mode [ 46.765247][ T5788] bridge_slave_1: entered promiscuous mode [ 46.767760][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.797709][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.811343][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.814671][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.818622][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.841751][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.843752][ T5784] team0: Port device team_slave_0 added [ 46.855901][ T5784] team0: Port device team_slave_1 added [ 46.875319][ T5788] team0: Port device team_slave_0 added [ 46.886901][ T5792] team0: Port device team_slave_0 added [ 46.894500][ T5792] team0: Port device team_slave_1 added [ 46.895465][ T5788] team0: Port device team_slave_1 added [ 46.903125][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.903135][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.903149][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.920106][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.920117][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.920131][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.935638][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.935652][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.935672][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.937308][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.937321][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.937342][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.938173][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.938184][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.938204][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.944830][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.949609][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.949621][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.949642][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.983849][ T5784] hsr_slave_0: entered promiscuous mode [ 46.984270][ T5784] hsr_slave_1: entered promiscuous mode [ 47.006004][ T5788] hsr_slave_0: entered promiscuous mode [ 47.006431][ T5788] hsr_slave_1: entered promiscuous mode [ 47.006783][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 47.006792][ T5788] Cannot create hsr debugfs directory [ 47.040100][ T5792] hsr_slave_0: entered promiscuous mode [ 47.040598][ T5792] hsr_slave_1: entered promiscuous mode [ 47.040912][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 47.040921][ T5792] Cannot create hsr debugfs directory [ 47.353995][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.361124][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.361913][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.368389][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.373053][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.377340][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.384550][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.386996][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.450968][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.454412][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.457848][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.457899][ T5784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.458249][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.458296][ T5784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.475622][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.478803][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.479399][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.481011][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.481376][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.485455][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.497680][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.497747][ T5792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.497947][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.497993][ T5792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.521209][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.521332][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.521418][ T5785] bridge_slave_0: entered allmulticast mode [ 47.522531][ T5785] bridge_slave_0: entered promiscuous mode [ 47.525141][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.525215][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.525304][ T5785] bridge_slave_1: entered allmulticast mode [ 47.526517][ T5785] bridge_slave_1: entered promiscuous mode [ 47.545425][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.547324][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.554856][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.555659][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.558872][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.561709][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.599045][ T5785] team0: Port device team_slave_0 added [ 47.602965][ T5785] team0: Port device team_slave_1 added [ 47.610196][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.612388][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.614260][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.617876][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.625369][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.625381][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.625399][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.631159][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.641663][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.642418][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.645379][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.647568][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.647577][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.647591][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.692056][ T5785] hsr_slave_0: entered promiscuous mode [ 47.692478][ T5785] hsr_slave_1: entered promiscuous mode [ 47.692795][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 47.692804][ T5785] Cannot create hsr debugfs directory [ 47.802582][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.827207][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.870432][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.872924][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.886166][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.889238][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.891744][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.891871][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.893584][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.893659][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.895236][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.895310][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.900187][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.906349][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.908133][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.912520][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.912989][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.915670][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.931416][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.931497][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.941384][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.974843][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.002499][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.002586][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.029359][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.029443][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.119406][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.138593][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.142291][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.142336][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.145487][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.145548][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.170709][ T5795] Bluetooth: hci3: command tx timeout [ 48.176197][ T5795] Bluetooth: hci2: command tx timeout [ 48.176843][ T5795] Bluetooth: hci0: command tx timeout [ 48.177124][ T5795] Bluetooth: hci1: command tx timeout [ 48.305324][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.351586][ T5784] veth0_vlan: entered promiscuous mode [ 48.356399][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.359837][ T5784] veth1_vlan: entered promiscuous mode [ 48.392905][ T5784] veth0_macvtap: entered promiscuous mode [ 48.400345][ T5784] veth1_macvtap: entered promiscuous mode [ 48.421206][ T5792] veth0_vlan: entered promiscuous mode [ 48.426091][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.428794][ T5792] veth1_vlan: entered promiscuous mode [ 48.433666][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.471399][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.480264][ T5792] veth0_macvtap: entered promiscuous mode [ 48.485192][ T5792] veth1_macvtap: entered promiscuous mode [ 48.505426][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.511846][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.526142][ T5656] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.542675][ T5788] veth0_vlan: entered promiscuous mode [ 48.544095][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.544109][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.552861][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.570167][ T5788] veth1_vlan: entered promiscuous mode [ 48.575567][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.575587][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.619522][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.619543][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.641705][ T5788] veth0_macvtap: entered promiscuous mode [ 48.662143][ T5788] veth1_macvtap: entered promiscuous mode [ 48.663400][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.663416][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.666572][ T5785] veth0_vlan: entered promiscuous mode [ 48.677729][ T5858] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.678242][ T5858] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.684936][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.685241][ T5785] veth1_vlan: entered promiscuous mode [ 48.694238][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.703327][ T5784] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.725495][ T5785] veth0_macvtap: entered promiscuous mode [ 48.728349][ T5858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.728433][ T5858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.728673][ T5858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.728997][ T5858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.730497][ T5785] veth1_macvtap: entered promiscuous mode [ 48.737019][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.756965][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.757161][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.757681][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.757958][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.766603][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.787730][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.796746][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.796766][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.842046][ T5942] FAULT_INJECTION: forcing a failure. [ 48.842046][ T5942] name failslab, interval 1, probability 0, space 0, times 1 [ 48.842092][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 48.842107][ T5942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.842122][ T5942] Call Trace: [ 48.842134][ T5942] [ 48.842140][ T5942] dump_stack_lvl+0x100/0x190 [ 48.842166][ T5942] should_fail_ex.cold+0x5/0xa [ 48.842187][ T5942] should_failslab+0xc2/0x120 [ 48.842202][ T5942] __kmalloc_cache_noprof+0x91/0x6d0 [ 48.842219][ T5942] ? percpu_ref_init+0xec/0x3f0 [ 48.842252][ T5942] ? __pfx_css_release+0x10/0x10 [ 48.842272][ T5942] percpu_ref_init+0xec/0x3f0 [ 48.842291][ T5942] ? init_and_link_css+0x4ae/0xc80 [ 48.842307][ T5942] cgroup_apply_control_enable+0x65d/0xdd0 [ 48.842329][ T5942] ? css_populate_dir+0x233/0x590 [ 48.842344][ T5942] cgroup_mkdir+0x9da/0x13a0 [ 48.842366][ T5942] ? __pfx_cgroup_mkdir+0x10/0x10 [ 48.842387][ T5942] kernfs_iop_mkdir+0x111/0x190 [ 48.842399][ T5942] ? security_inode_mkdir+0xc9/0x2b0 [ 48.842414][ T5942] vfs_mkdir+0x36d/0x8a0 [ 48.842428][ T5942] filename_mkdirat+0x4c4/0x630 [ 48.842469][ T5942] ? __pfx_filename_mkdirat+0x10/0x10 [ 48.842485][ T5942] ? strncpy_from_user+0x19d/0x2d0 [ 48.842506][ T5942] ? do_getname+0x191/0x390 [ 48.842525][ T5942] __x64_sys_mkdirat+0x89/0xc0 [ 48.842542][ T5942] do_syscall_64+0x123/0x790 [ 48.842559][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.842571][ T5942] RIP: 0033:0x7f773879fb19 [ 48.842581][ T5942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.842592][ T5942] RSP: 002b:00007f77395c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 48.842605][ T5942] RAX: ffffffffffffffda RBX: 00007f7738a25fa0 RCX: 00007f773879fb19 [ 48.842613][ T5942] RDX: 00000000000001ff RSI: 0000200000000540 RDI: ffffffffffffff9c [ 48.842620][ T5942] RBP: 00007f7738837b70 R08: 0000000000000000 R09: 0000000000000000 [ 48.842626][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.842633][ T5942] R13: 00007f7738a26038 R14: 00007f7738a25fa0 R15: 00007ffc44269b48 [ 48.842649][ T5942] [ 48.851017][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.851036][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.900267][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.900286][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.918648][ T5858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.918994][ T5858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.919297][ T5858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.919588][ T5858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.944414][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.944433][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.135694][ T5957] xt_hashlimit: size too large, truncated to 1048576 [ 49.675081][ T5982] syzkaller0: entered promiscuous mode [ 49.675095][ T5982] syzkaller0: entered allmulticast mode [ 50.176624][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 50.256100][ T5145] Bluetooth: hci1: command tx timeout [ 50.256122][ T5145] Bluetooth: hci0: command tx timeout [ 50.256134][ T5145] Bluetooth: hci2: command tx timeout [ 50.256146][ T5145] Bluetooth: hci3: command tx timeout [ 51.098289][ T6031] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 51.103695][ T6025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 51.348767][ T42] kauditd_printk_skb: 117 callbacks suppressed [ 51.348780][ T42] audit: type=1400 audit(1793968232.854:285): avc: denied { unlink } for pid=5788 comm="syz-executor" name="file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.406777][ T42] audit: type=1400 audit(1793968232.914:286): avc: denied { read write } for pid=6032 comm="syz.2.26" name="video8" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 51.407099][ T42] audit: type=1400 audit(1793968232.914:287): avc: denied { open } for pid=6032 comm="syz.2.26" path="/dev/video8" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 51.412431][ T42] audit: type=1400 audit(1793968232.914:288): avc: denied { ioctl } for pid=6032 comm="syz.2.26" path="/dev/video8" dev="devtmpfs" ino=973 ioctlcmd=0xc008561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 51.594714][ T42] audit: type=1400 audit(1793968233.094:289): avc: denied { ioctl } for pid=6040 comm="syz.1.28" path="/dev/vhost-vsock" dev="devtmpfs" ino=1308 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.618409][ T42] audit: type=1400 audit(1793968233.124:290): avc: denied { create } for pid=6040 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.628190][ T42] audit: type=1400 audit(1793968233.134:291): avc: denied { connect } for pid=6040 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.757060][ T6045] syzkaller0: entered promiscuous mode [ 51.757080][ T6045] syzkaller0: entered allmulticast mode [ 51.848913][ T42] audit: type=1400 audit(1793968233.354:292): avc: denied { write } for pid=6047 comm="syz.0.30" name="raw6" dev="proc" ino=4026533010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 51.851846][ T42] audit: type=1400 audit(1793968233.354:293): avc: denied { read write } for pid=6047 comm="syz.0.30" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 51.851893][ T42] audit: type=1400 audit(1793968233.354:294): avc: denied { open } for pid=6047 comm="syz.0.30" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 51.887907][ T6050] syzkaller0: entered promiscuous mode [ 51.887927][ T6050] syzkaller0: entered allmulticast mode [ 51.930807][ T6052] syzkaller0: entered promiscuous mode [ 51.930828][ T6052] syzkaller0: entered allmulticast mode [ 52.160910][ T6063] bridge0: port 3(netdevsim0) entered blocking state [ 52.162362][ T6063] bridge0: port 3(netdevsim0) entered disabled state [ 52.162508][ T6063] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 52.164762][ T6063] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 52.167954][ T6063] bridge0: port 3(netdevsim0) entered blocking state [ 52.168044][ T6063] bridge0: port 3(netdevsim0) entered forwarding state [ 52.305889][ T6071] netlink: 144 bytes leftover after parsing attributes in process `syz.0.40'. [ 52.326204][ T5145] Bluetooth: hci2: command tx timeout [ 52.326237][ T5145] Bluetooth: hci0: command tx timeout [ 52.326256][ T5145] Bluetooth: hci1: command tx timeout [ 52.326551][ T5795] Bluetooth: hci3: command tx timeout [ 52.387350][ T5776] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.422794][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 52.422809][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 52.429644][ T6073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.433406][ T6073] bond1: (slave bond0): making interface the new active one [ 52.436642][ T6073] bond1: (slave bond0): Enslaving as an active interface with an up link [ 52.445819][ T6073] netlink: 'syz.0.41': attribute type 4 has an invalid length. [ 52.445834][ T6073] netlink: 152 bytes leftover after parsing attributes in process `syz.0.41'. [ 52.447495][ T6073] .`: renamed from bond0 (while UP) [ 52.515265][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.538045][ T5776] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 52.541520][ T5776] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 52.541793][ T5776] usb 8-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 52.541836][ T5776] usb 8-1: config 0 interface 0 has no altsetting 0 [ 52.552044][ T5776] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 52.552207][ T5776] usb 8-1: Product: syz [ 52.552265][ T5776] usb 8-1: Manufacturer: syz [ 52.552310][ T5776] usb 8-1: SerialNumber: syz [ 52.606112][ T5776] usb 8-1: config 0 descriptor?? [ 52.620525][ T6062] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 52.690935][ T5776] usb 8-1: selecting invalid altsetting 0 [ 52.847392][ T6062] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.847806][ T6062] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.848113][ T6062] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.848424][ T6062] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.848740][ T6062] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.851750][ T6062] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.852018][ T6062] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.852317][ T6062] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.852613][ T6062] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.852936][ T6062] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.878318][ T6061] snd-usb-audio 8-1:0.0: Runtime PM usage count underflow! [ 52.919928][ T5776] usb 8-1: USB disconnect, device number 2 [ 52.969264][ T6089] warning: `syz.0.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.977910][ T24] usb 7-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 53.041571][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.041600][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.198629][ T6096] FAULT_INJECTION: forcing a failure. [ 53.198629][ T6096] name failslab, interval 1, probability 0, space 0, times 0 [ 53.198656][ T6096] CPU: 1 UID: 0 PID: 6096 Comm: syz.0.47 Not tainted syzkaller #0 PREEMPT(full) [ 53.198677][ T6096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.198688][ T6096] Call Trace: [ 53.198703][ T6096] [ 53.198710][ T6096] dump_stack_lvl+0x100/0x190 [ 53.198744][ T6096] should_fail_ex.cold+0x5/0xa [ 53.198770][ T6096] should_failslab+0xc2/0x120 [ 53.198790][ T6096] kmem_cache_alloc_noprof+0x92/0x6a0 [ 53.198815][ T6096] ? __proc_create+0xc1/0x8f0 [ 53.198833][ T6096] ? __proc_create+0x247/0x8f0 [ 53.198853][ T6096] __proc_create+0x247/0x8f0 [ 53.198871][ T6096] ? __pfx___proc_create+0x10/0x10 [ 53.198896][ T6096] proc_create_reg+0x75/0x170 [ 53.198916][ T6096] proc_create_net_data+0x8e/0x1c0 [ 53.198934][ T6096] ? __pfx_proc_create_net_data+0x10/0x10 [ 53.198951][ T6096] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 53.198973][ T6096] ? inet6_net_init+0x67c/0xa20 [ 53.199003][ T6096] udp6_proc_init+0x57/0x80 [ 53.199028][ T6096] inet6_net_init+0x6b4/0xa20 [ 53.199052][ T6096] ? __pfx_inet6_net_init+0x10/0x10 [ 53.199076][ T6096] ops_init+0x1e2/0x5f0 [ 53.199101][ T6096] setup_net+0x118/0x3a0 [ 53.199124][ T6096] ? __pfx_setup_net+0x10/0x10 [ 53.199147][ T6096] ? bpf_lsm_namespace_init+0x9/0x10 [ 53.199200][ T6096] copy_net_ns+0x340/0x7a0 [ 53.199227][ T6096] create_new_namespaces+0x3ea/0xac0 [ 53.199256][ T6096] unshare_nsproxy_namespaces+0xf6/0x210 [ 53.199282][ T6096] ksys_unshare+0x44f/0x980 [ 53.199302][ T6096] ? __pfx_ksys_unshare+0x10/0x10 [ 53.199334][ T6096] __x64_sys_unshare+0x31/0x40 [ 53.199354][ T6096] do_syscall_64+0x123/0x790 [ 53.199377][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.199395][ T6096] RIP: 0033:0x7f773879fb19 [ 53.199409][ T6096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.199425][ T6096] RSP: 002b:00007f77395c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 53.199443][ T6096] RAX: ffffffffffffffda RBX: 00007f7738a25fa0 RCX: 00007f773879fb19 [ 53.199454][ T6096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 53.199463][ T6096] RBP: 00007f7738837b70 R08: 0000000000000000 R09: 0000000000000000 [ 53.199472][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.199481][ T6096] R13: 00007f7738a26038 R14: 00007f7738a25fa0 R15: 00007ffc44269b48 [ 53.199503][ T6096] [ 53.446649][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48'. [ 53.592940][ T6100] syzkaller0: entered promiscuous mode [ 53.592963][ T6100] syzkaller0: entered allmulticast mode [ 53.612879][ T24] metro_usb 7-1:1.0: Metrologic USB to Serial converter detected [ 53.654197][ T24] usb 7-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 53.672377][ T6103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 53.745160][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.51'. [ 53.790304][ T6109] overlay: Unknown parameter 'fsmagic' [ 53.798783][ T6109] FAULT_INJECTION: forcing a failure. [ 53.798783][ T6109] name failslab, interval 1, probability 0, space 0, times 0 [ 53.798811][ T6109] CPU: 3 UID: 0 PID: 6109 Comm: syz.3.52 Not tainted syzkaller #0 PREEMPT(full) [ 53.798834][ T6109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.798845][ T6109] Call Trace: [ 53.798850][ T6109] [ 53.798855][ T6109] dump_stack_lvl+0x100/0x190 [ 53.798892][ T6109] should_fail_ex.cold+0x5/0xa [ 53.798923][ T6109] should_failslab+0xc2/0x120 [ 53.798941][ T6109] kmem_cache_alloc_noprof+0x92/0x6a0 [ 53.798969][ T6109] ? find_held_lock+0x2b/0x80 [ 53.798989][ T6109] ? __kernfs_new_node+0xd2/0xa10 [ 53.799014][ T6109] __kernfs_new_node+0xd2/0xa10 [ 53.799038][ T6109] ? __pfx___kernfs_new_node+0x10/0x10 [ 53.799060][ T6109] ? lock_acquire+0x1d1/0x380 [ 53.799084][ T6109] ? kernfs_root+0x23/0x2a0 [ 53.799107][ T6109] ? find_held_lock+0x2b/0x80 [ 53.799126][ T6109] ? kernfs_root+0xee/0x2a0 [ 53.799177][ T6109] ? kernfs_root+0xee/0x2a0 [ 53.799211][ T6109] kernfs_create_dir_ns+0xa4/0x2b0 [ 53.799237][ T6109] internal_create_group+0x36f/0xfb0 [ 53.799272][ T6109] ? __pfx_internal_create_group+0x10/0x10 [ 53.799298][ T6109] ? __pfx_kobject_add+0x10/0x10 [ 53.799338][ T6109] internal_create_groups+0x9d/0x150 [ 53.799364][ T6109] ib_setup_port_attrs+0x41f/0x600 [ 53.799394][ T6109] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 53.799427][ T6109] ? rdma_counter_init+0x209/0x400 [ 53.799450][ T6109] ib_register_device+0x8a7/0xdd0 [ 53.799486][ T6109] siw_newlink+0xb44/0xe70 [ 53.799515][ T6109] nldev_newlink+0x3b0/0x630 [ 53.799558][ T6109] ? __pfx_nldev_newlink+0x10/0x10 [ 53.799654][ T6109] ? cred_has_capability.isra.0+0x186/0x300 [ 53.799681][ T6109] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 53.799699][ T6109] ? lock_acquire+0x1d1/0x380 [ 53.799725][ T6109] ? hook_capable+0x1bc/0x500 [ 53.799761][ T6109] ? cap_capable+0x107/0x430 [ 53.799785][ T6109] ? security_capable+0x80/0x260 [ 53.799810][ T6109] ? ns_capable+0xcd/0xf0 [ 53.799829][ T6109] ? __pfx_nldev_newlink+0x10/0x10 [ 53.799855][ T6109] rdma_nl_rcv_msg+0x392/0x6f0 [ 53.799877][ T6109] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 53.799906][ T6109] ? __lock_acquire+0x5c0/0x1f40 [ 53.799937][ T6109] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 53.799962][ T6109] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 53.799999][ T6109] ? netlink_deliver_tap+0x1ae/0xb50 [ 53.800026][ T6109] netlink_unicast+0x668/0x950 [ 53.800051][ T6109] ? __pfx_netlink_unicast+0x10/0x10 [ 53.800084][ T6109] netlink_sendmsg+0x9ac/0x10c0 [ 53.800110][ T6109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.800138][ T6109] ? selinux_socket_sendmsg+0x198/0x2f0 [ 53.800168][ T6109] ? ____sys_sendmsg+0xa99/0xc30 [ 53.800193][ T6109] ____sys_sendmsg+0xa99/0xc30 [ 53.800214][ T6109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.800241][ T6109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.800279][ T6109] ___sys_sendmsg+0x190/0x1e0 [ 53.800305][ T6109] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.800334][ T6109] ? futex_wait+0x11e/0x370 [ 53.800365][ T6109] ? find_held_lock+0x2b/0x80 [ 53.800400][ T6109] __sys_sendmsg+0x160/0x210 [ 53.800424][ T6109] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.800454][ T6109] do_syscall_64+0x123/0x790 [ 53.800494][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.800515][ T6109] RIP: 0033:0x7efc9d99fb19 [ 53.800531][ T6109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.800546][ T6109] RSP: 002b:00007efc9e924028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.800566][ T6109] RAX: ffffffffffffffda RBX: 00007efc9dc25fa0 RCX: 00007efc9d99fb19 [ 53.800581][ T6109] RDX: 000000000000c000 RSI: 0000200000000700 RDI: 0000000000000006 [ 53.800618][ T6109] RBP: 00007efc9da37b70 R08: 0000000000000000 R09: 0000000000000000 [ 53.800630][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.800661][ T6109] R13: 00007efc9dc26038 R14: 00007efc9dc25fa0 R15: 00007ffd56e6d9a8 [ 53.800689][ T6109] [ 53.801304][ T6109] infiniband syz2: Couldn't register device with driver model [ 53.801997][ T6109] siw: device registration error -12 [ 53.835427][ T5934] usb 7-1: USB disconnect, device number 2 [ 53.844009][ T5934] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 53.844538][ T5934] metro_usb 7-1:1.0: device disconnected [ 53.870609][ T6111] FAULT_INJECTION: forcing a failure. [ 53.870609][ T6111] name failslab, interval 1, probability 0, space 0, times 0 [ 53.870638][ T6111] CPU: 0 UID: 0 PID: 6111 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(full) [ 53.870660][ T6111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.870672][ T6111] Call Trace: [ 53.870678][ T6111] [ 53.870686][ T6111] dump_stack_lvl+0x100/0x190 [ 53.870726][ T6111] should_fail_ex.cold+0x5/0xa [ 53.870757][ T6111] should_failslab+0xc2/0x120 [ 53.870782][ T6111] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 53.870815][ T6111] ? alloc_inode+0x183/0x250 [ 53.870840][ T6111] alloc_inode+0x183/0x250 [ 53.870859][ T6111] new_inode+0x22/0x1c0 [ 53.870880][ T6111] gadgetfs_make_inode+0x23/0x1c0 [ 53.870910][ T6111] gadgetfs_create_file+0x34/0xe0 [ 53.870950][ T6111] gadgetfs_bind+0x4a7/0x940 [ 53.870989][ T6111] gadget_bind_driver+0x28c/0xbf0 [ 53.871011][ T6111] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 53.871042][ T6111] ? __pfx_gadget_bind_driver+0x10/0x10 [ 53.871065][ T6111] really_probe+0x241/0xa60 [ 53.871096][ T6111] __driver_probe_device+0x210/0x460 [ 53.871120][ T6111] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.871146][ T6111] driver_probe_device+0x4a/0x140 [ 53.871204][ T6111] __driver_attach+0x231/0x5b0 [ 53.871231][ T6111] ? __pfx___driver_attach+0x10/0x10 [ 53.871256][ T6111] bus_for_each_dev+0x13e/0x1d0 [ 53.871281][ T6111] ? __pfx_bus_for_each_dev+0x10/0x10 [ 53.871299][ T6111] ? bus_add_driver+0x306/0x620 [ 53.871331][ T6111] bus_add_driver+0x4bf/0x620 [ 53.871357][ T6111] driver_register+0x1e2/0x360 [ 53.871395][ T6111] usb_gadget_register_driver_owner+0x132/0x210 [ 53.871419][ T6111] dev_config+0xdce/0x1610 [ 53.871450][ T6111] ? ksys_write+0x90/0x250 [ 53.871471][ T6111] ? __pfx_dev_config+0x10/0x10 [ 53.871508][ T6111] vfs_write+0x2aa/0x1050 [ 53.871529][ T6111] ? __pfx_dev_config+0x10/0x10 [ 53.871557][ T6111] ? lock_acquire+0x1d1/0x380 [ 53.871583][ T6111] ? __fget_files+0x34/0x3d0 [ 53.871607][ T6111] ? __pfx_vfs_write+0x10/0x10 [ 53.871625][ T6111] ? find_held_lock+0x2b/0x80 [ 53.871648][ T6111] ? __fget_files+0x215/0x3d0 [ 53.871688][ T6111] ? __fget_files+0x21f/0x3d0 [ 53.871723][ T6111] ksys_write+0x12a/0x250 [ 53.871745][ T6111] ? __pfx_ksys_write+0x10/0x10 [ 53.871776][ T6111] do_syscall_64+0x123/0x790 [ 53.871803][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.871823][ T6111] RIP: 0033:0x7efc9d99fb19 [ 53.871839][ T6111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.871857][ T6111] RSP: 002b:00007efc9e924028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.871878][ T6111] RAX: ffffffffffffffda RBX: 00007efc9dc25fa0 RCX: 00007efc9d99fb19 [ 53.871891][ T6111] RDX: 000000000000001f RSI: 0000200000008f80 RDI: 0000000000000006 [ 53.871903][ T6111] RBP: 00007efc9da37b70 R08: 0000000000000000 R09: 0000000000000000 [ 53.871915][ T6111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.871926][ T6111] R13: 00007efc9dc26038 R14: 00007efc9dc25fa0 R15: 00007ffd56e6d9a8 [ 53.871962][ T6111] [ 53.875511][ T6111] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 53.875536][ T6111] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 53.883254][ T6111] gadgetfs: bound to dummy_udc driver [ 53.964166][ T6117] Bluetooth: MGMT ver 1.23 [ 54.160446][ T24] e1000 0000:00:07.0 eth0: Reset adapter [ 54.261929][ T6119] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 54.406371][ T5799] Bluetooth: hci3: command tx timeout [ 54.406405][ T5799] Bluetooth: hci0: command tx timeout [ 54.406460][ T5145] Bluetooth: hci2: command tx timeout [ 54.406508][ T5795] Bluetooth: hci1: command tx timeout [ 54.426237][ T24] e1000 0000:00:07.0 eth0: Reset adapter [ 54.537259][ T6145] input: syz0 as /devices/virtual/input/input8 [ 54.538265][ T24] e1000 0000:00:07.0 eth0: Reset adapter [ 54.640967][ T6140] syzkaller0: entered promiscuous mode [ 54.640991][ T6140] syzkaller0: entered allmulticast mode [ 54.669795][ T6148] tipc: Started in network mode [ 54.669823][ T6148] tipc: Node identity 06e1d899c889, cluster identity 4711 [ 54.670480][ T6148] tipc: Enabled bearer , priority 0 [ 54.675566][ T6148] syzkaller0: entered promiscuous mode [ 54.675585][ T6148] syzkaller0: entered allmulticast mode [ 54.690313][ T6148] tipc: Resetting bearer [ 54.694651][ T6147] tipc: Resetting bearer [ 54.711179][ T6147] tipc: Disabling bearer [ 54.741478][ T50] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 54.750410][ T6156] device-mapper: table: 248:1: crypt: Error decoding and setting key (-ENOKEY) [ 54.750426][ T6156] device-mapper: ioctl: error adding target to table [ 54.997100][ T50] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 55.145867][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 55.147252][ T50] usb 7-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 55.148984][ T50] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 55.149003][ T50] usb 7-1: config 0 has no interface number 0 [ 55.149037][ T50] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 55.149053][ T50] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 55.149071][ T50] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 55.149088][ T50] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 55.149116][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.151496][ T50] usb 7-1: config 0 descriptor?? [ 55.164451][ T50] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 55.418280][ T6084] usb 7-1: USB disconnect, device number 3 [ 55.418435][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 55.421832][ T6156] ldusb 7-1:0.55: Couldn't submit interrupt_out_urb -19 [ 55.425638][ T6084] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 56.726919][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 57.783343][ T50] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.818331][ T42] kauditd_printk_skb: 45 callbacks suppressed [ 57.818352][ T42] audit: type=1400 audit(1793968239.324:340): avc: denied { write } for pid=6184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.881851][ T42] audit: type=1400 audit(1793968239.384:341): avc: denied { write } for pid=6187 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.046721][ T42] audit: type=1400 audit(1793968241.554:342): avc: denied { write } for pid=6190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.112914][ T42] audit: type=1400 audit(1793968241.614:343): avc: denied { write } for pid=6193 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.889599][ T42] audit: type=1400 audit(1793968244.394:344): avc: denied { write } for pid=6196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.941831][ T42] audit: type=1400 audit(1793968244.444:345): avc: denied { write } for pid=6199 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.338312][ T42] audit: type=1400 audit(1793968245.844:346): avc: denied { ioctl } for pid=6202 comm="syz.0.64" path="/dev/video8" dev="devtmpfs" ino=973 ioctlcmd=0xc008561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 64.350285][ T42] audit: type=1400 audit(1793968245.854:347): avc: denied { write } for pid=6205 comm="syz.2.66" name="dlm" dev="configfs" ino=3086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.351940][ T42] audit: type=1400 audit(1793968245.854:348): avc: denied { write } for pid=6205 comm="syz.2.66" name="comms" dev="configfs" ino=12326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.353867][ T42] audit: type=1400 audit(1793968245.854:349): avc: denied { prog_load } for pid=6205 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.357891][ T42] audit: type=1400 audit(1793968245.864:350): avc: denied { write } for pid=6204 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.358076][ T42] audit: type=1400 audit(1793968245.864:351): avc: denied { nlmsg_write } for pid=6204 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.360904][ T6206] netlink: 'syz.1.65': attribute type 4 has an invalid length. [ 64.401890][ T6203] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 64.401905][ T6203] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 64.439131][ T6203] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 64.439147][ T6203] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 64.446513][ T42] audit: type=1400 audit(1793968245.944:352): avc: denied { mount } for pid=6214 comm="syz.2.69" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 64.463612][ T6203] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 64.463627][ T6203] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 64.469976][ T6203] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 64.469989][ T6203] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 64.516500][ T42] audit: type=1400 audit(1793968246.024:353): avc: denied { unmount } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 64.667262][ T6234] configfs-gadget.g1 gadget.0: HOST MAC ce:fd:d5:86:04:2b [ 64.667340][ T6234] configfs-gadget.g1 gadget.0: MAC 2e:51:99:7f:52:66 [ 64.906013][ T5776] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.062339][ T5776] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04 [ 65.064969][ T5776] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketS ** replaying previous printk message ** [ 65.064969][ T5776] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.064987][ T5776] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 65.065027][ T5776] usb 5-1: Dual-Role OTG device on HNP port [ 65.065249][ T5776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.072763][ C3] ------------[ cut here ]------------ [ 65.072773][ C3] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 65.072788][ C3] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#3: udevd/5195 [ 65.091782][ C3] Modules linked in: [ 65.093769][ C3] CPU: 3 UID: 0 PID: 5195 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 65.096671][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.099872][ C3] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 65.101563][ C3] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 9a 32 84 0a 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 a0 b7 fb 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 40 aa fb 8c [ 65.107471][ C3] RSP: 0000:ffffc9000433f940 EFLAGS: 00010046 [ 65.109371][ C3] RAX: dffffc0000000000 RBX: ffff888028c500e0 RCX: ffffffff8cfbeea0 [ 65.111848][ C3] RDX: 0000000000000081 RSI: ffffffff8cfbb7a0 RDI: ffffffff92780770 [ 65.114345][ C3] RBP: 0000000000000081 R08: ffffffff8cfbaa80 R09: 0000000000000000 [ 65.116920][ C3] R10: ffffffff926aa95f R11: 0000000000000003 R12: ffffffff8cfbaa80 [ 65.119413][ C3] R13: 0000000000000000 R14: ffff888028c500e0 R15: ffff8880280a92a0 [ 65.121862][ C3] FS: 00007f57007ca880(0000) GS:ffff8880d4775000(0000) knlGS:0000000000000000 [ 65.124540][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.126592][ C3] CR2: 0000001b2e70dff8 CR3: 0000000037b94000 CR4: 0000000000352ef0 [ 65.129092][ C3] Call Trace: [ 65.130153][ C3] [ 65.131121][ C3] hidg_set_alt+0x190/0xa10 [ 65.132773][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 65.135311][ C3] ? rcu_is_watching+0x13/0xc0 [ 65.136991][ C3] composite_setup+0x2ccf/0x9290 [ 65.138800][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 65.140595][ C3] ? __pfx_composite_setup+0x10/0x10 [ 65.142567][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 65.144592][ C3] ? do_raw_spin_lock+0x128/0x260 [ 65.146405][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 65.148383][ C3] ? configfs_composite_setup+0xfb/0x130 [ 65.150121][ C3] configfs_composite_setup+0xfb/0x130 [ 65.151756][ C3] dummy_timer+0x20a0/0x3840 [ 65.153154][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 65.154946][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 65.156621][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 65.158105][ C3] ? rcu_is_watching+0x13/0xc0 [ 65.159767][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 65.161666][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 65.163185][ C3] __hrtimer_run_queues+0x448/0x9a0 [ 65.164749][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 65.166287][ C3] handle_softirqs+0x216/0xa20 [ 65.167774][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 65.169353][ C3] ? _raw_spin_unlock+0x28/0x50 [ 65.170830][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 65.172536][ C3] __irq_exit_rcu+0x178/0x220 [ 65.173992][ C3] irq_exit_rcu+0x9/0x30 [ 65.175293][ C3] sysvec_apic_timer_interrupt+0x56/0xc0 [ 65.176998][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 65.178793][ C3] RIP: 0033:0x7f57000baa08 [ 65.180148][ C3] Code: ce 48 8b 05 f2 63 13 00 64 c7 00 0c 00 00 00 31 c0 5b c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 55 48 89 f8 41 54 55 <53> 48 83 ec 18 48 f7 e6 48 89 c3 0f 90 c0 48 85 db 0f 88 31 02 00 [ 65.186230][ C3] RSP: 002b:00007ffd15010400 EFLAGS: 00000286 [ 65.188412][ C3] RAX: 0000000000000001 RBX: 000055acd9bdf400 RCX: 0000000000000054 [ 65.191184][ C3] RDX: 000055acd9bd9620 RSI: 0000000000000030 RDI: 0000000000000001 [ 65.193687][ C3] RBP: fffffffffffffff3 R08: 000055acd9bdf400 R09: 0000000000000020 [ 65.196036][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: 000055acd9bdaed0 [ 65.198364][ C3] R13: 000055acd9bd9620 R14: 0000000000000001 R15: 000055acd9c1e170 [ 65.200672][ C3] [ 65.201579][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 65.203708][ C3] CPU: 3 UID: 0 PID: 5195 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 65.206195][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.209137][ C3] Call Trace: [ 65.210130][ C3] [ 65.211019][ C3] dump_stack_lvl+0x100/0x190 [ 65.212456][ C3] vpanic+0x2dc/0x6f8 [ 65.213696][ C3] panic+0xd1/0xe0 [ 65.214827][ C3] ? __pfx_panic+0x10/0x10 [ 65.216171][ C3] check_panic_on_warn.cold+0x19/0x34 [ 65.217764][ C3] ? usb_ep_enable+0x3e6/0x490 [ 65.219208][ C3] __warn.cold+0x191/0x321 [ 65.220549][ C3] __report_bug+0x30f/0x440 [ 65.221943][ C3] ? usb_ep_enable+0x3e6/0x490 [ 65.223378][ C3] ? __pfx___report_bug+0x10/0x10 [ 65.224905][ C3] ? try_to_wake_up+0x158/0x1ca0 [ 65.226457][ C3] report_bug_entry+0xe2/0x290 [ 65.227978][ C3] ? usb_ep_enable+0x3f8/0x490 [ 65.229473][ C3] handle_bug+0x1cd/0x2a0 [ 65.230828][ C3] exc_invalid_op+0x17/0x50 [ 65.232254][ C3] asm_exc_invalid_op+0x1a/0x20 [ 65.233775][ C3] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 65.235476][ C3] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 9a 32 84 0a 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 a0 b7 fb 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 40 aa fb 8c [ 65.241405][ C3] RSP: 0000:ffffc9000433f940 EFLAGS: 00010046 [ 65.243289][ C3] RAX: dffffc0000000000 RBX: ffff888028c500e0 RCX: ffffffff8cfbeea0 [ 65.245744][ C3] RDX: 0000000000000081 RSI: ffffffff8cfbb7a0 RDI: ffffffff92780770 [ 65.248182][ C3] RBP: 0000000000000081 R08: ffffffff8cfbaa80 R09: 0000000000000000 [ 65.250600][ C3] R10: ffffffff926aa95f R11: 0000000000000003 R12: ffffffff8cfbaa80 [ 65.253049][ C3] R13: 0000000000000000 R14: ffff888028c500e0 R15: ffff8880280a92a0 [ 65.255534][ C3] hidg_set_alt+0x190/0xa10 [ 65.256979][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 65.258593][ C3] ? rcu_is_watching+0x13/0xc0 [ 65.260143][ C3] composite_setup+0x2ccf/0x9290 [ 65.261696][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 65.263264][ C3] ? __pfx_composite_setup+0x10/0x10 [ 65.264926][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 65.266554][ C3] ? do_raw_spin_lock+0x128/0x260 [ 65.268151][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 65.269819][ C3] ? configfs_composite_setup+0xfb/0x130 [ 65.271570][ C3] configfs_composite_setup+0xfb/0x130 [ 65.273273][ C3] dummy_timer+0x20a0/0x3840 [ 65.274741][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 65.276557][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 65.278316][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 65.279879][ C3] ? rcu_is_watching+0x13/0xc0 [ 65.281380][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 65.283202][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 65.284752][ C3] __hrtimer_run_queues+0x448/0x9a0 [ 65.286370][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 65.287961][ C3] handle_softirqs+0x216/0xa20 [ 65.289467][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 65.291116][ C3] ? _raw_spin_unlock+0x28/0x50 [ 65.292636][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 65.294393][ C3] __irq_exit_rcu+0x178/0x220 [ 65.295887][ C3] irq_exit_rcu+0x9/0x30 [ 65.297209][ C3] sysvec_apic_timer_interrupt+0x56/0xc0 [ 65.298942][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 65.300831][ C3] RIP: 0033:0x7f57000baa08 [ 65.302233][ C3] Code: ce 48 8b 05 f2 63 13 00 64 c7 00 0c 00 00 00 31 c0 5b c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 55 48 89 f8 41 54 55 <53> 48 83 ec 18 48 f7 e6 48 89 c3 0f 90 c0 48 85 db 0f 88 31 02 00 [ 65.308173][ C3] RSP: 002b:00007ffd15010400 EFLAGS: 00000286 [ 65.310058][ C3] RAX: 0000000000000001 RBX: 000055acd9bdf400 RCX: 0000000000000054 [ 65.312497][ C3] RDX: 000055acd9bd9620 RSI: 0000000000000030 RDI: 0000000000000001 [ 65.314961][ C3] RBP: fffffffffffffff3 R08: 000055acd9bdf400 R09: 0000000000000020 [ 65.317409][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: 000055acd9bdaed0 [ 65.319851][ C3] R13: 000055acd9bd9620 R14: 0000000000000001 R15: 000055acd9c1e170 [ 65.322311][ C3] [ 65.323969][ C3] Kernel Offset: disabled [ 65.325328][ C3] Rebooting in 86400 seconds..