last executing test programs:

2m48.064575701s ago: executing program 2 (id=236):
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x20200, 0x0)
ioctl$BSG_IO(r0, 0x2285, &(0x7f00000002c0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x100009, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, &(0x7f0000000380)="bf794c7a0e88", 0x0, 0xfff, 0x30, &(0x7f0000000240)="3ae8d568e4e3878eff1f4f9a25eff4846738bcca73b56f12b35669a8495d4ed8fe857b690a643c6c00f7b972004f2e656c75cb057df61710cd7dcb91b52de269a36213941625b30ce071", 0x40})

2m48.062754472s ago: executing program 2 (id=237):
setns(0xc9, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x8)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000180)={'team_slave_0\x00', @random="8c8ff8781ba2"})
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregset(0x4205, r1, 0x201, &(0x7f0000000080)={&(0x7f0000000840)="dcef58b7f29c1f7c93d183044aedba283413e619c3292537f77439028f68610a6c55a23623672853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee88462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0651a6cc55c", 0x90})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x101100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x20000000000)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000680)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000007c0)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ptrace$setregset(0x4205, r1, 0x200, &(0x7f0000000400)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60})
ptrace$getsig(0x4202, r1, 0xd, &(0x7f0000000480))
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x4}, 0x10)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYRESDEC], 0x88}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
r8 = geteuid()
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="df250d7c5e037d085f458008684f6cf4dbc01f4d2b883df6471c9d15667fd1f92f11d64d8147756b1bba922aace0b222137bf4eb97e38e861e99f8e8f54fefe384d9f7bacdce3806d4284504f56e785b9cb61b754ccfc0b58ef435c46c4d7b1af0542f46d0f1", @ANYRES32=r8, @ANYRESDEC=r7], 0x34}, 0x1, 0x0, 0x0, 0xc044089}, 0x2004c000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

2m47.935655001s ago: executing program 2 (id=239):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

2m47.935130242s ago: executing program 2 (id=240):
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000280)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4600040000010000000000000002003e"], 0x78)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x1000)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
ptrace(0x10, r1)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x1, 0x5001)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x1, 0x5004)
ptrace$getregset(0x4204, r1, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8})
ptrace$setregset(0x4205, r1, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8})
ptrace(0x11, r1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0)
map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1)

2m47.835308573s ago: executing program 2 (id=241):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x73, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

2m47.58518185s ago: executing program 2 (id=242):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f00000000c0)="0f060f30baf80c66b8ba2bc88266efbafc0cb85896ef66b90203000066b80300000066ba000000000f300f01ca670f230c0f01f7d1243ee500", 0x39}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x8800, 0xfffffffe})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r2], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x4000840)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'erspan0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe5e}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)

2m47.571947378s ago: executing program 32 (id=242):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f00000000c0)="0f060f30baf80c66b8ba2bc88266efbafc0cb85896ef66b90203000066b80300000066ba000000000f300f01ca670f230c0f01f7d1243ee500", 0x39}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x8800, 0xfffffffe})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r2], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x4000840)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'erspan0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe5e}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)

2m29.805663416s ago: executing program 4 (id=491):
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/223) (fail_nth: 6)

2m29.726092624s ago: executing program 4 (id=492):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x40001, 0x18, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) (fail_nth: 15)

2m29.725879381s ago: executing program 4 (id=493):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0xa24, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x1, @media='ib\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x400c1}, 0x4000)
r3 = syz_open_dev$video4linux(&(0x7f0000000300), 0x3, 0x8002)
ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000280)={0x0, 0x0, {0x7, 0x3, 0x200a, 0x9, 0x4, 0x6, 0x1}})
ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)=<r4=>0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000200)={0x2, 0x3, 0xff, 0x0, r4})
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffbc)
ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000))

2m29.651949886s ago: executing program 4 (id=495):
mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x40000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt_trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./mnt_trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0)
r2 = syz_io_uring_setup(0xf, &(0x7f0000000180)={0x0, 0x0, 0x1000, 0x3, 0xffffffff, 0x0, 0x0}, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x12345, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x2, 0x20, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004380)={0x2020}, 0x36)
read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0x70d5f977)

2m29.585404384s ago: executing program 4 (id=496):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'})
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
getsockopt$sock_int(r2, 0x1, 0x22, 0x0, &(0x7f0000000180))
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000071000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c00018100000000000000ff"], 0x24}}, 0x0)

2m29.204284881s ago: executing program 4 (id=501):
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
ptrace(0x10, r0)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004)
ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8})
ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8})
ptrace(0x11, r0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0)
ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000000), 0x5005)
map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1)

2m29.150536676s ago: executing program 33 (id=501):
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
ptrace(0x10, r0)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004)
ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8})
ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8})
ptrace(0x11, r0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0)
ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000000), 0x5005)
map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1)

2m19.896165851s ago: executing program 3 (id=618):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x1f00, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

2m19.54524956s ago: executing program 1 (id=624):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000100)={0x0, 0x0})
ioctl$KVM_CAP_HYPERV_SYNIC(r8, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_RUN(r8, 0xae80, 0x0)

2m19.38645833s ago: executing program 3 (id=627):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0f85403, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x3, 0x2, 0x9, 0x2, 0x5})

2m19.325893002s ago: executing program 1 (id=628):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newae={0x64, 0x1e, 0x101, 0x70bd2d, 0x25dfdbfc, {{@in6=@private2, 0x4d3, 0xa, 0x33}, @in6=@remote, 0x4, 0x3500}, [@lifetime_val={0x24, 0x9, {0x3, 0x3, 0x9f8, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) (async)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
r1 = socket(0x10, 0x80002, 0x10000)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x18, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x4000080)

2m19.325774s ago: executing program 3 (id=629):
r0 = syz_ublk_setup_io_uring(0x220, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x3, 0xd0}, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000140)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x2, 0x1})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000001c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000300)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1)

2m19.325689298s ago: executing program 1 (id=630):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200), 0x2000)

2m19.248189313s ago: executing program 3 (id=631):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x804)

2m19.246432763s ago: executing program 1 (id=633):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000005c0))
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000008000300", @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x2210088, &(0x7f0000000880)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"])
chdir(&(0x7f0000000900)='./file0\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
ftruncate(r4, 0x4a8e)
write$cgroup_pressure(r4, &(0x7f0000000980)={'full', 0x20, 0x1, 0x20, 0x6}, 0x2f)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0))
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040029bd7000ffdbdf250300000008000300030000000c00068008000300000000000800030001000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\v\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000108020001000006020202020202010882848b960c12182400"/47], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
mount$9p_xen(&(0x7f00000001c0), &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0), 0x40040, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d78656e2c64656275673d3078303030303030303030303030303030392c6e6f657874656e642c736d61636b66737472616e736d7574653d2a2c2d2427e02c232c6d6561737572652c00"])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rxrpc/locals\x00', 0x0, 0x0)
lseek(r6, 0x7ff, 0x1)
userfaultfd(0x80801)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)={<r7=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000500)={r7, 0x80001, 0x80000004})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540))

2m19.246210625s ago: executing program 3 (id=634):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48)
bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000240)={@cgroup=r0, 0xffffffffffffffff, 0x2c}, 0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/devices.allow\x00', 0xa0000, 0x48)
r2 = syz_open_dev$mtd(&(0x7f0000000140), 0xffffffffffff4382, 0x680080)
ioctl$BLKPG(r2, 0xc0104d08, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0})
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00')
close(r3)
ppoll(&(0x7f0000000100)=[{r1, 0x6049}], 0x1, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'bridge0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r5, &(0x7f0000000480)='3', 0x4e)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x3a, 0x4, 0x7fff3fff}]})
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, 0x0, 0x0)
socket$unix(0x1, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x40001, 0x18, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)

2m19.115433979s ago: executing program 3 (id=636):
r0 = socket(0x10, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m18.595183389s ago: executing program 1 (id=637):
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x20200, 0x0)
ioctl$BSG_IO(r0, 0x2285, &(0x7f00000002c0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x100009, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, &(0x7f0000000200)=""/54, 0xfff, 0x30, 0x0, 0x40}) (fail_nth: 8)

2m18.195877859s ago: executing program 1 (id=638):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$unix(0x1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) (async)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) (async)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x11000)=nil, &(0x7f00004af000/0x4000)=nil, 0x100000001, 0x0, 0x0, 0x6803, 0x0, 0x0, 0x1d, 0x1f})
r2 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x2100) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000580)={0x0}) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e20, 0xff, @empty, 0x9}}, 0x6, 0x400}, &(0x7f0000000340)=0x90) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e21, 0x9, @mcast1, 0x4}}, 0x3, 0x1}, &(0x7f00000004c0)=0x90) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000500)=0x113000) (async)
prlimit64(0x0, 0x7, &(0x7f0000000080)={0x7, 0x100}, 0x0) (async)
eventfd2(0x43, 0x1) (async)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000e03bab167898c733f560fa918bb51300001200000439c7da29ba3059f4afca9337a8c435842d11eb3b1bab97b7182ca4d1124a386dbf0cc5903e8b2231fbf27d150f75037272dbc65dd1ef8568b400dafaf34da59a81db798c32982b3ae1df1396431d5a94a1b4a06b", @ANYRES32=0x0, @ANYBLOB="010a000004000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

2m18.095587125s ago: executing program 34 (id=638):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$unix(0x1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) (async)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) (async)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x11000)=nil, &(0x7f00004af000/0x4000)=nil, 0x100000001, 0x0, 0x0, 0x6803, 0x0, 0x0, 0x1d, 0x1f})
r2 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x2100) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000580)={0x0}) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e20, 0xff, @empty, 0x9}}, 0x6, 0x400}, &(0x7f0000000340)=0x90) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e21, 0x9, @mcast1, 0x4}}, 0x3, 0x1}, &(0x7f00000004c0)=0x90) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000500)=0x113000) (async)
prlimit64(0x0, 0x7, &(0x7f0000000080)={0x7, 0x100}, 0x0) (async)
eventfd2(0x43, 0x1) (async)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000e03bab167898c733f560fa918bb51300001200000439c7da29ba3059f4afca9337a8c435842d11eb3b1bab97b7182ca4d1124a386dbf0cc5903e8b2231fbf27d150f75037272dbc65dd1ef8568b400dafaf34da59a81db798c32982b3ae1df1396431d5a94a1b4a06b", @ANYRES32=0x0, @ANYBLOB="010a000004000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

2m4.12331416s ago: executing program 35 (id=636):
r0 = socket(0x10, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m53.715692663s ago: executing program 0 (id=869):
ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000000040)={0x8, 0x2, @ofdm={0x0, 0x14, 0x3, 0x9, 0x2, 0xb}})

1m53.715505743s ago: executing program 0 (id=870):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0xd)
ioctl$sock_SIOCADDDLCI(r0, 0x5452, &(0x7f0000000100)={'veth1\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000380), 0x5, 0x1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x5001})
r2 = fsopen(&(0x7f0000000200)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='sec\x00', &(0x7f0000000300)='krb5\x00', 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1})
write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff00000000000000000000ffffac141419ff020000000000000000000000000001042088be"], 0x76)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7)
ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)=0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2c)

1m53.565757402s ago: executing program 0 (id=871):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/mtrr\x00', 0x2, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000380)={'syztnl1\x00', <r2=>0x0, 0x10, 0x80, 0xfffffbff, 0xef5, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x66, 0x0, 0x80, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'batadv_slave_0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000ec0)={'syztnl0\x00', <r4=>0x0, 0x2f, 0x6, 0x5, 0x8, 0x10, @private1, @private2, 0x0, 0x10, 0xd14e, 0x629}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001000)={'syztnl0\x00', &(0x7f0000000f80)={'syztnl1\x00', <r5=>0x0, 0x29, 0x94, 0x0, 0x4, 0x65, @empty, @mcast1, 0x8000, 0x10, 0x6, 0xff}})
sendmsg$ETHTOOL_MSG_STATS_GET(r0, &(0x7f0000001140)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0x9c, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x2}, @ETHTOOL_A_STATS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_STATS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STATS_SRC={0x8}, @ETHTOOL_A_STATS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x440c0}, 0x1)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e00)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)='%pI4   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000e40)={&(0x7f0000000080)="cd3df76ae48edbc70ac51da7ca4985802361a80706772dcdab0f0767", &(0x7f00000000c0)=""/103, &(0x7f0000000140)="63824f8f30545f0dd284dd5a926d5730402c713127fa7bbca3c2a43d59b914be87f83c2691b54905700eecfcb8f6a1ad1446c02243357e95595d54148967acb3103ffdae31fd3aaea12a1a78604b46fe6d18a8ad3f1792c091ecb270432d4af7a8252c3c6abf3d2c06c7c7f0bedb52", &(0x7f0000000c80)="01672112fe5d95c78eb24102bc90ef4752ae89fe5f5e271c079bd73191f6ea1b427c813f0e21ef93d0333b3ad403af9b23293293de19b1b930ff95c575054e3333c1d01e09c5a9f09aabd878feec4e3962aa6f18767480e75fe0343e00f9b41fb380420f0a2756cd57338c551d7dc7c5204d16943bc80661ace52757867c508f1102f73d35a9c795b5e5942ed9a0c9a936c63f830453944577f9eb5a68a5e1023e4c066bd01937bfbf84e00521ce844b207ad8b4866c94101b4205bc32a167d8c215cfee332a26d1e86ad9429921d361c2d526dfbfe4931377575c614a", 0xe, r6}, 0x38)

1m50.869899592s ago: executing program 0 (id=880):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10002, 0xf, 0x3, 0x0, 0x1, 0x3}, 0x30, 0x0)
landlock_restrict_self(r0, 0x3)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x16)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002a40)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1m50.795079947s ago: executing program 0 (id=883):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv6/conf/default/forwarding\x00', 0x101201, 0x181)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000004c0)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'ip6_vti0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000540)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000580)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @remote}, 0x14)
write(r3, &(0x7f0000000440)='1', 0x1)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDMKTONE(r7, 0x4b30, 0x5e000)
r8 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000300)={0x8000000, 0x400, 0x4, 0x3ff, 0x1, 0x9})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}]}, 0x7c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r9=>0xffffffffffffffff, {0x4}}, './file0\x00'})
write$tun(r9, &(0x7f0000000340)=ANY=[], 0x1c)
r10 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
ptrace$cont(0x19, r10, 0xd, 0xf)

1m50.725832833s ago: executing program 0 (id=887):
r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000040)={0x8, 0x2, @ofdm={0x0, 0x14, 0x3, 0x9, 0x2, 0xb}})

1m35.7411686s ago: executing program 36 (id=887):
r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000040)={0x8, 0x2, @ofdm={0x0, 0x14, 0x3, 0x9, 0x2, 0xb}})

55.655675092s ago: executing program 6 (id=1592):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffffffffffea1, 0x1, {0x2, '\x00', 0x101, 0x0, 0x7, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c840)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)

55.620208311s ago: executing program 6 (id=1594):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x5452, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000380), 0x5, 0x1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x5001})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000200)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='sec\x00', &(0x7f0000000300)='krb5\x00', 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1})
write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff000000000000000000"], 0x76)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7)
ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)=0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2c)

55.492253434s ago: executing program 6 (id=1599):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000004c0)=0x3, 0x4)
recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x12160, 0x0)

55.45842592s ago: executing program 6 (id=1601):
syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500002800000000002c9078ac1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba89a477856045dbcde66f9f837ef20192fd65d6067439bbd3a33a6acd069e5b77e46e5c0d2aa0afc4cfa2e95b8a41d6bf261e1e1f9aa4a50abaa1ddbccc9d127ca3bf042e2d182d297a9c43546327a4c61bd5044372663141093513796fe05beb20ae4ee8842f35f294"], 0x0)
r0 = getpid()
mkdir(&(0x7f0000000280)='./file0\x00', 0x1e)
mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f00000003c0)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000800)={'syzkaller1\x00', 0x1})
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtfilter={0x88, 0x2c, 0x601, 0x3, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x2000000, 0x8, 0x9, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0)
r5 = syz_pidfd_open(r0, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x48100)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r7, 0x0, 0xb, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x2)
mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/cpu/drivers/processor\x00', 0x0, 0x0)
r9 = openat(r8, 0x0, 0x1, 0x0)
write(r9, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000740)={0x1, r5, 0x80000})
r10 = openat(r8, &(0x7f00000006c0)='bind\x00', 0x1, 0x0)
write(r10, &(0x7f0000000700)='cpu1', 0x4)
r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000100)={0x2000, 0x101, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'})
close_range(r5, 0xffffffffffffffff, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000780), 0x30100, 0x0)

55.290324128s ago: executing program 6 (id=1606):
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
fanotify_init(0x0, 0x80000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
epoll_create1(0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

54.965447045s ago: executing program 6 (id=1612):
write(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
close_range(r1, 0xffffffffffffffff, 0x0)

54.869320765s ago: executing program 37 (id=1612):
write(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
close_range(r1, 0xffffffffffffffff, 0x0)

6.413874806s ago: executing program 7 (id=2116):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000100)=0x6, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r3, 0x30d}, 0x14}}, 0x0)
read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x40}, 0x4, 0x700000000000000}, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r8, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)
pread64(r1, &(0x7f0000004200)=""/236, 0xec, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000043c0)=ANY=[@ANYBLOB="290000000300000000000000000000004100000000000000080000000000000067726f75705f696400"], 0x29)

3.700657801s ago: executing program 7 (id=2122):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000980)={0x1, 0x1, 0xb, 0x17, 0x164, &(0x7f00000009c0)})
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2210088, &(0x7f00000001c0)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"])
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x0, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40)
r2 = memfd_create(&(0x7f0000000500)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xe5,\x82\x03\x00\x19\x8d\xff\xff\xff\xff\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xe7!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7c\x06\x00\x00\x00\x00\x00\x00\x001\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfc^\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11X\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xfc\xbc\xeb[^\xc7\xc0v/\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0a\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xed\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x9f\x0f\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00', 0x6)
fallocate(r2, 0x0, 0xb, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
write(r2, &(0x7f0000000880)="1ea500e8908eeb75bccfbbc0a2932a6cfda2cf4aae25fa798ad4cf7bcc6247c36f50fa151a1882ec642ab5547f1b88c431d6c2df67c7795e076d16a8a65f5043a0f00cf6cfb3f3ccf420b0c67c136b6f8f8326ba97f4d96588f7d642c25cc4b084670aa705bc33e7fb4086442a676cc0836d3bd3c58d8a851c739fa1037e7b5148b0f8c06e470f3cd05a3ed098d2db10378ee7a9017cd58242dfe0508522a5021013640c47eb5bdb931729b7c00b43f45cdf549e67d97c1490d22e7d9571d362acc5674ce251102275dbfa19397d76bcfe7b963cd33e44", 0xd7)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000002c0)={@private2}, &(0x7f0000000300)=0x14)
chdir(&(0x7f0000000240)='./file0\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0)
r5 = syz_open_dev$dvb_demux(&(0x7f0000000340), 0x0, 0x700)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000380)={0xefb8, 0x1, 0x2, 0x3, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000003c0)={0x3, 0x0, 0x3, 0x13})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x8010, r3, 0x47550000)
add_key$keyring(&(0x7f0000000080), 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r6, &(0x7f0000000000), 0xd)

3.620389562s ago: executing program 7 (id=2126):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r1=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) (fail_nth: 1)

3.413583626s ago: executing program 7 (id=2130):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000100)=0x6, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r3, 0x30d}, 0x14}}, 0x0)
read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x40}, 0x4, 0x700000000000000}, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r8, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)
pread64(r1, &(0x7f0000004200)=""/236, 0xec, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000043c0)=ANY=[@ANYBLOB="290000000300000000000000000000004100000000000000080000000000000067726f75705f696400"], 0x29)

3.400259927s ago: executing program 7 (id=2131):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x84)
fchdir(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_emit_ethernet(0x15e, &(0x7f00000002c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840)
write$nci(r2, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x8)
openat(0xffffffffffffff9c, 0x0, 0x81, 0x0)

1.107023018s ago: executing program 9 (id=2158):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x37, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f00000038c0)=[@enter_looper, @request_death={0x400c630e, 0x3, 0x1}, @acquire={0x40046305, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0xb1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000003800)={@flat=@weak_binder={0x77622a85, 0x1015, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000002800)=""/4096, 0x1000, 0x0, 0x36}, @fda={0x66646185, 0x9, 0x0, 0x10}}, &(0x7f0000003880)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0})

1.105227951s ago: executing program 9 (id=2159):
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
fanotify_init(0x0, 0x80000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
epoll_create1(0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

1.059400836s ago: executing program 5 (id=2160):
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x2)
ioctl$FE_READ_SIGNAL_STRENGTH(r1, 0x80026f47, &(0x7f0000000140))
pipe2$9p(&(0x7f0000002640)={<r2=>0x0, <r3=>0x0}, 0x0)
pipe2$9p(&(0x7f0000002680)={0x0, <r4=>0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000026c0)='./mnt\x00', 0x1ff)
mount$9p_fd(0x0, &(0x7f0000002700)='./mnt\x00', &(0x7f0000002740), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}})
write$P9_RVERSION(r3, &(0x7f00000027c0)=ANY=[@ANYBLOB="1500000065ffff002000000800395032303030"], 0x15)
write$P9_RATTACH(r3, &(0x7f0000002800)={0x14, 0x69, 0x0, {0x8c}}, 0x14)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
request_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb14x\x0f\xdf\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb]@F\xe3?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18K\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00', 0xffffffffffffffff)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/keys\x00', 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=@newsa={0x138, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in6=@mcast1, 0x4e1e, 0x0, 0x0, 0x0, 0x2}, {@in=@private=0xa010101, 0x4d2, 0x2b}, @in6=@local, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x1, 0x7fffffffffffffff}, {}, {}, 0x0, 0xfffffffe, 0x2, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00')
preadv(r7, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/44, 0x2c}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})

1.038115764s ago: executing program 9 (id=2161):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x103800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000100)=0x3ff, 0x4)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x10, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {}, {0x9, 0xa}, {0x7}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r2, &(0x7f00000004c0)={0x0, 0x14, &(0x7f0000000500)=[{&(0x7f0000000540)=' ', 0xffffff1f}], 0x1}, 0x0)

481.246007ms ago: executing program 5 (id=2162):
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
fanotify_init(0x0, 0x80000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
epoll_create1(0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

468.825382ms ago: executing program 5 (id=2163):
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, 0x2, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_TUPLE={0x90, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x44880}, 0x4008800)

402.000166ms ago: executing program 5 (id=2164):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20)
write$binfmt_elf32(r0, 0x0, 0x4cd)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1)
writev(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0xefd, &(0x7f0000000800)={0x0, 0x9492, 0x110101, 0x6, 0x38b}, &(0x7f0000000880), &(0x7f00000008c0)=<r2=>0x0, &(0x7f0000000900)=<r3=>0x0)
syz_io_uring_setup(0x1839, &(0x7f0000000b80)={0x0, 0x2f1e, 0x4, 0x2, 0x1000200, 0x0, r1}, &(0x7f00000009c0)=<r4=>0x0, &(0x7f0000000a00), &(0x7f0000000a40))
syz_ublk_add_dev(r1, r4, r2, r3, &(0x7f0000000a80)={0x2e, 0x15, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000b00)=@new_dev={0x2, 0x610, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x18}}}, &(0x7f0000000b40))
socket$igmp6(0xa, 0x3, 0x2)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000700)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000740)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000780)={{@my=0x1}, @host, 0x0, 0x400000, 0x7})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7aa, &(0x7f00000007c0)={{@my=0x1}})
setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000001600)={{0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, {0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1, {[0xa, 0x1, 0x1000d5, 0x8, 0x5, 0x33cb, 0x2, 0x8]}}, 0x5c)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000640), &(0x7f00000006c0)=0x68)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000600)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x6}})
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r9, 0x5608, 0x2)
mremap(&(0x7f00001a5000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffa000/0x3000)=nil)
r10 = getpid()
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000c00)=""/191, 0xbf}], 0x1}, 0x81}, {{&(0x7f0000000040)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f0000000280)=""/154, 0x9a}], 0x2, &(0x7f0000000380)=""/5, 0x5}, 0x8}], 0x2, 0x2062, &(0x7f0000000440)={0x77359400})
syz_pidfd_open(r10, 0x0)

386.486963ms ago: executing program 5 (id=2165):
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000001c0)="c6f5", 0x2}], 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

336.34372ms ago: executing program 5 (id=2166):
socket(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

327.644473ms ago: executing program 7 (id=2168):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000006c0)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0)
ioctl(0xffffffffffffffff, 0xc138fd09, 0x0)
write(r1, &(0x7f0000000780)='auto', 0x4)
write(r0, &(0x7f00000001c0)='7', 0x1)

288.834757ms ago: executing program 8 (id=2169):
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
fanotify_init(0x0, 0x80000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
epoll_create1(0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

250.35054ms ago: executing program 8 (id=2170):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket$netlink(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1})

182.046764ms ago: executing program 8 (id=2171):
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
fanotify_init(0x0, 0x80000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
epoll_create1(0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

160.51855ms ago: executing program 9 (id=2172):
mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000013c0), 0x804000, &(0x7f0000000400)=ANY=[])
read$FUSE(r0, &(0x7f0000001840)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
acct(&(0x7f0000000000)='./file0\x00')
write$FUSE_INIT(r0, &(0x7f00000038c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000003940)="9bbd22b09fbd2fb35c4f7fd619bd3f7c64ac7b8ebe80ae3d5dcd944f2b79b2842d41aae592aa845deef381a80aa7000f8ec7ad6835a2b2bd7ed495fe7708123c7ca939e44487767828a5540224c52f7759c76928a175cde8c466344c4e61cb1357369d39eeec5c10cc9ed903b5bf5e851caa15dc6cfbaf077b10bc33c50dfcdd1568e5dd22687fa5d27245c36f46720886a604aa7bcee412c6f4c81c00494b5edb406b12962be767a244f1111281ac50796ce046e8817563d60f095fd6b33e9f5214180cd24101b202df4a4e62cea9ef6a9592eabca774407b89cd6c9caf17d68c847a7782be6c9d327267cc1e16b22f1a4f6c695dfa15a7e996f51070c66dd9cb7ac18432239b8dc180a80c13af3b912c12a38e581584906aa2bcad8f8280e0ee33a77b5c62e13fe5914b67f181b0814cef360fbcfb5359a4f8864640d0aa1daf6c1c3fb42ad066d3b4e875caf74d7305cda51c9f7b1a8daf737cf88815b148363445e1f008000000b4b402a8eed7ad3d2e1f304f3b4658bf6aa1d0ab381de53bad621f9c9bd0e173845ae01d70ab29ba41130e64b872da5bd8f3d5451d3ac83219ede2870aca306595b25794d1bbe211822f35ef5fe723dcb4c6d93eaafc6ab33cfca9a706e297fb74a384548499a80ec36d2e84ec14bd8aefad4fa4e907c464331c93d196be202117d5a5a32df60b632650153aa698577e61dbf40c1f5e6547eafaaef0884826af5451f2b36bfa5f4bf19694bd78c9c788a6cc534ee2860ec20bc107b38c3a779ceb468e0a1260d22950ffab2ec9e2a5a255b62fa3373ccfe6ea4e08bfbfcffb9a83e3d2d2b43604362778f7c13f25e3771168af6383930b95b66c624b52d8690d868d3a38057a5ec3c5f2c58f2df49c3459e02db42c1c195723c0c9b5ad2a3ada677548d0bac7e492a3e304d1591aa57671fb62f35aec55639f869a84dce1172e5dfdb905bc7601325abb63b070ce3164b1e41422a728f17f4a711c92ff2b86fddf698637c4c6a68090a8f858af81f3542f3ab180329a018debe6d6ae2abe87024e5ef4c2ad70aec80fafea78e45db2e83e171ef10108377675bd7cfca148dc488f735da15d99cb458ed37b23535f572f0f2b053053bd0e7758c3d7956f7ba812d6099bfc3d4c1ca1adc8687bf308c4450987f6a5e19ee44da0d2be18ccfb540c6e73cce2d2518c3b5047491e67a965f0aaf3aa40ac80b1c5ba599b934f00a58c832417ebf5b0a6ae240e82e7dcbd7a26ba1510ba18f3ae053f2154a6ce1285e89c4a61de3678ad098e327dc50907ce3360adb5197bd87651aee3982fa2bfee595fe7c65a41cef22308bb25169f69918aab5686cfb604ad36773babfa7f10d8e519b38c03fa5566209f7bc157d957eaf19eb015be54a90254e2af44942990f577ae1057212c5c5443a1f94a8f2004195ff623a411fc75a3c8b6f236f44215c2479b95abf0ace41ab9a6abaddbe4c524910e69b2079dc84d0742377b8106eb5accd294808acafbccd1e58748c3aa2c0598bf26ad850402b150bd409aff39142adb1aaf2a239cec020b9db50c64b0237ab6e8637fec4038997635fe37d1668d59ba429da7153a0bcca25b4f17145c17894c58d773fa710472b16f2bc10f22535a656d4920221beb1cfe05ea501e8973b5da9fcbed991a055f975896f23d9404a2521733806a507f0f9ec9a6a4d7558536ffc20e4b4aee4c64a8906b0678ee08771717e58e8b4914c873283dcbd9ee1c4531c54768b91f13ac89e068306f8213325267e780d085393ca537e7809eaece0766731103b20e82bff4c93b7d26703733775daf296088fea8fd8319a2a7c3737a732cafb852189d64642bc23dac076bc204fa94a077ce4448ddb03b902a03f93f89068415b224cb88b7b8bb357282312f53f6b4e85af6b3cac0ffa8b97e5cecfd68f239a02c2cd46378c81ab2aead8d6c0a294504dd850c7e274ab1228b31bebc69e547cefad34883256633e4868f05295f55f3d4b1478ea51f7ad8a6b417e69963ed63ef01c1ff38bcd1c4021c1ade7f244e6cadc0eba641b0dea1b459e6f9f44d46c1732cea0144caf86439f4d7fb12ba24d2fa40fa94fb88b61252e336692f322c27a0a77ef81a08947de399ec7304e27b27259e32cd1d3abb5d2e3a76514792001d00fba8fc8beb88cf17235d9c28664e3a6c458000a5c7afef521c9001c2dfcde37edf6536341f392f1321b79b599327b8b2b2a77ebd03e0ec1a1604f25d61b41053f520d1982a8cf5cfb9bbf870ee995ea5420e790e2ab0034b55779b9125779bc5e5d0997b80b3369cfc931e3498fd9e294c10468e0a2375f69774d21e7b73dc4da2a5d314c05ec53228768b8a8ffd65d198f5a01a69acaff78fb3949de9860279d8b3f8de626014d7e0c941c2b31218878ceec30ad572de29b34095946788cd58eef8841d76af16731be640b437eaedd7ad38b7a4a0190f79950b60476a9197d56b456d466bb37822753790ce9d7b4c4abb929bf71ff2e49c6d0ca24ea4ae69c140a4926475d1ae9ac23e19a35ec68087507ab89b54912da66ca9949ceb7599845b91e4a93533b66841250818d9c45c6ec8f42ea95d5c0408023dfdcc1fdb9072d1c654089e6b115b9c2a3644c44834e0d92f5d77d0120d937e87c25fe4009d10b3c4cd6dd8662e29bb8cab13eed5a0fc4ee37896fe9a55dd60700d926047b6f041ea74abb9cc6022fd0236d6190f14531ce6edb0c4fbeef03621b61591131318f5637e57d325e12279c0e2e8949d6f5d6f8c7eb9dd0a199333cdc6a9b5edb245b360513cd3f0258dd641ad9fbead8cabdefb76ab6727d1a2a4d9a3a9997eb9e8abf6bcdc0ad4fd96089a35c09c5e65491cfaea8dc0435a2c395cd0f4bc016b4d0bbaca58c8e3f501b64b8cc69c105c29ace6e5424316850781bc3366e92039ad7252bf8293b9ca227e67bb4ec0c56fda7fef8d6c604886999eaa553a44016503edc00e363ddb409ef57642df4847012ea49ee38fc3fc9a4bd2ed71c944e1483089d6ba48009f2931f10000000000000002b469951cc8b84bbabc4f8ae1d1538061841898d02eae7795fbc9a1b919fa6898c0a8788ca5e77727ef60978b29630a74ed7f183dbacba8ab2f92a4af09b955266f72a908d6703699155108602f63542e0807fe6c13a7152652015ea75316ff56faee5b5f49e6bc01a85f28139afa2e50b10f370a2d5afa19306433a7ff5051de4b112588b9cb8c499c381e469fd83efc15d84dedd41a3bf57b1e8406d588f73ccfc5a0caa70ca9424be0f44f6a694b2230045cf15a8aa0eec1706a51d7f8e7e629f65f9ba232602edfae26df589adb1fec36f81fd86afbd02f79f3b5914c209588b82d292277adaa97c4e68eb20841d33603596072975c8aec91d090c56898aa41710fda2d4696da86b79b9f47a2c875755e9fc9d230f971c2d5284f3e401c748f2e75f5d537b0b593c8e97c498bcb2fedc846e49d0183a15e3424dfc0093c39d1644f2b4b4e49306e8e77a44d006c19f4dc4b0f36ff2bc3452840dd012bb238a79f0699c2f1078634e462a65d4458e9cba6a728bf6be3bf377f793828ee16153e62d432f91d911ccf45f546ba1746b55ca3e44a69dc444d2c85ccbcb5fd47ca7acfb55707674e08bc24d471b91a3c578d0b9890f034e3eaefeb9ea1db15474698dc6b84c3fc2e7a916b0ae90abfa3dea205013398393afa639f4b8545a1b7d50979f73b7a05a457a02335f420df57db60e081111f242df9375e61f7eadcb427b9794770e6791919bd527af1c972dbeb6ac304c9a450c4fd95d478610e2121b802e1bee84f6ccea3c7fc1a2ab4412ddd82c66b5036732c27f77311307d78306a137d8c437ee9d4711328780528f09313f41a64ee547c3f64e0973c9511309121838af913c782bae812cf0a1131818d3650406f34473986034fd69e7ba0c6dd199243324d103693d31fcf0ba29b3262049456a08efea1c8c0ae73f5e5ff0f3eb52805abbabba0755a9e34e5fc1f0a2c4fd1793cc9ff1d8ea10a1acc2788b9703746e96be176ac358c4a18fe399c0a65f955cfe799dfbd155edec413093a5c9defefc88dbbff2582d73282e6eb5d839eccad5667cb56b5fa1f76252a0b7d181b27a000ab281ec86678d92badcb6035fee52c166aa1fa8767db8928a451e9b15804e1c95ea7fb047ea3acbbb4d0fcea400eeefa0196524b3cfe1dbab2ab76d5d7b595b0ef8ec7e31ec4ebde01c438bf4c676e6cddfedadb73c002e3b83d6ec09bd48404f49235ea56c51b7b378338d9a5067f2353cc43c1f37dbd3b1f48514df51d64c536456cf8ee1acc3953e8076cf6cae2d827cf4f94d8f20744aeccacd86c3368e381ebdc47d1364f251842e66c2932927314e2bae663bb83df11e627d142d4eed812febb06a3c3856cc12a6ce1a33bddee122a4d5a6c6c0cc3502627b31fa45c2902e0b670d9e5a4d30bcd208011fa92d313f7974372ae5dff3f9ce8a44d189c63ae6e33a5beb6444a96e425ba70a83339909b5c01b3566378cc89e1a77b97c1989a2e9e2901f9469311af108d8ffb09e2fdf7e036ffe243f741f972b3bf4987e5357b9bf6a2dd2152afd38aceb0379616c20eb2f5dd55224dd6eba0ede705e0b5ddc478f3f430137dd482b049ab059889cd99e2f9e8ec9a93dc46a45a91a7e83e0ba3381265bb7ad865d38a7f2a78e3d0166cb8991fe68ddd69d16037d709486e1ca6b82305eb1b8049d6bd3feb614dcdd2d6681cabb1ce8cbb2973788eacbd8b86dc6474cf758a8df04368b50892145e0c5a38420af39a24e861f149fa357e103c2261e12e8c3c1765ec5989b7b3fafcb701817f3188589ab90bdd5e3639ff3e8dce970d9e11e342fb5fa615f31f92d82dad8bc246c8d110721f9d95f2b6929e1b0748928dfd6e62b2689347a1d067a8317aebb488dfbe599d4c0bae7d7fc4979dfc1d630e32652ae39e7d10806da0eeb18c30961619024c5d2deca5f65138423fe0d7196db681d01936209fd2131b4b57d74be0cf7e59b7cfbe33094e8dcff731c89d619d94a84f63d930e46880a2e9d45eee741082752c83dca96135bf29d35fdd4fd75d0bc58ea1a290ad9f4576256df7812ce408cfd3beb89758137065425f07c1bfe2c62d050ff303197f0ed01057ca9d58f18db1aad542905dd26d584aa47953275cd62ced0cefcee714dc0ea6e08bb639d436d0ebe312c5c5bd20977ce7944853b681ae71dda0780691c8ad142047b5fbc821f0f5292330e8e9e2f7a4d7e8b42e85cc35923bde0041d1d0a5a5c96962b4ff99c1bf88ca1bb3ebfdf96a89e8ebc4992cb3ca27bdcc1ca80f52d78f344090126b32a4c6cb42ca281cd14e5de431ef4d5a64993083e85c4e2a8bc9dd9ce18a70d12f4d59fade9c3794abb679f6014dda15126b66e04bc3055870cdef12ff9d43e18ce948d58cf02ef065d8647054905232d525000dab5999cbd6ebe212d32d2c80599b79428f77b27ffb53eae6eb755cf786a4566e02435eacf932db4201aaab7d5a0a4cb44e95c1674cdbb48fdd02136b65177e5fc1bbd6b63e6eb65c12730ee9b495be6d27a5f05c4b2a4c99afbc25efb61ac1a051b1260bed695350b1f305850d699b501806b34e5334f184bc847153aee13892d8397bfd4104ff0f2abe211ff01df42c28fa7650e0e1c72a4b91403bb127abe163d367e6f9b16b0b671c4cf2c76dd5041c0256a84de0a52641dea1f5ae2d036de136eabaf5fefce8a678b71f6ad6b8ce19da13e1c9a6d0262e6f88de33e1b6ed427f6c9e3ddc3065aa892d986fafb7718ec842c9f00dca0c750dcfa80b6f87c6e60d5dcfde176495066aaa547f3353edb3a1abd10d15cbb92b40e4ad5072d29ae1628acecb532b36c6baf4b5af55628a7850d12ea32bfb79a39f3f54ccbde37c99b61563502039a204ee848998e8f327c1f67bff899d4c06346f7fd47755374e1ac6eb6682b922cdc594c4f4c274d259f965218b4d4d71140f93ba328a1d5d9e6a9714835faafe8eddad1222fd8423c9f0aba7d348e57d533686954e0dfd0dc2133cd685f6c06d7e641fc71126943971a721f3fe62e145a40d4e0baeca04bc6e285a220aff92ebd8513456ca19e15fcce7b0172c44edb1a6b5b80feaaab986921033da2d09499ebcbbd2a02d7d6609c7c51b2944b6e062966d838e36d895a07f420a9c8879024dd23bca910e292f1e3bfb968454c50eedafb63b4901cc369aebb1ad439c1213fbaa6db03618f7358445492c83a0cf06211635ae4d7da841fc923dfa16e681cb3d1593706cc8a67b3cb5908e33562159af99f69f805bc251ea6bb01f3360efd86ff198c7c6cd46e6ba6c9f0d43228b4a9919e3d59d58111bbd299073bfbb10143dd6d1ab332bff605e133adc91f01977397be4e584c662e541ff428fc6446f49e3cc6a3567049922b043591d3a890e7d2be8358a22cd2ce168b631f6a863a3ab64fff52654befd1e38adf2e5df935dae73236a2a6dd1c85ae55fdb126f394c340aa6d2ddb2863a8b9b4ebd5bc41b69ba704a9e1ea60814771774d22d3876377d4e389b8a86e5de267646a684e93e7e273050401c007bc91f2e1a24a20e3c732fe5a67ecf155de295dd6b12e01ccc7b46f5b298af30a2b73512b5aaf3b5b0393fb5d888c3779047984ec69fb308e68f8c3bc5db797dca978592a14a97f9ddaba08d0286aa412b2cd067b625db60180e404a428b7929509b1239e6a266c737d83ba0fba35c256e86b446b8a23312fe0fdcd220536b62488f4f8198b63eca167ab1602da2a6dcffc6eb838e0576fe4518e79f1b1a84fc526b1bdbd2111fb1ff7ed1f2fe422eef43597a2fdacb418a62962ec9c29d5fbe69425dc9373cd093f1b55a3297ec5ad515a5103f62b21299048759321868e51a890c314b08cc227b8b2d8f4fa9bb46a095b11cad830aa64bd6719b215b86a63851e99b949ea1c88ee9d06900818496e6195c29eb16cb3bcf522924d69a5e8eb9c0166928ed9eec0e26151903b08539ddae09c0fcd8d1d4386b919cd6235b17f95025e71791d03b3b82e8dc5f778f6c88a7fab5c18e37cfebbeeb9950433dd0ab0d62c7bc19636977722b0aebb7f3c2922086205783132607973df951d5aaf0daceb0824683b3b81a93ca4df16691c03308c4cb041126e995ec70294b57cd23019e50b05733ad39d7ee1d88d837e2e152433925877bdf54413d4a17ead6d3df87005e17a4bf4d8afc9a77d3059a6dd18bbdcaa1710313cec1ac69efd5177c702138fae70f81f27857094e6a269c4dd0eab3acbc74a52607ab890958778534dd136c7c6f2c8a54d194ee82d69a1781db65356f21498783815beb97438c6aabf268ae734288c7283a741b8734caa8771114f44bb1b7e649630877e18663a2cf2b41f1252035ce05094a6fe9dfd571ade2fcd7769b2ebe15ba79b9a9182da09390e752c628cfe531460b5eeed03fce13532d8ea33f33cef98035f3b921bd83672365495599d50177c9d641d7f3d1d99821802167ff48e636bc9faa200512cde00e8bca8d566c4fa91fc7408cfd2cd1010e4e2e6eb8677c0f0d51e52f68cb64b10b31ed55730c2ae2a78c1978ea138d33f84e0db4a4d046f260880c7749f45805cf1a1b0d4b392742dee43b5ec91d78bd586fe7237e7515f7f0be70f0ed8641214a2355ce888f85c4d8072a5bfc57bab423206de7ab49f8cbde332a1d4b9837773f44a8923858855716721146cada79c581070dbfb3a53bd9c13ffc75b94c338e929a202597ba8408c4ef360630301ee80fc648687d7d5eff51e0bc0a0b3b5b18e633e6730b3acf86a3a34a22aa9ab1367aaa447bb23e9b2100993583c46b9d5ccc1443f8cc2dd2bb07a64a0cbcd142bc44d26e0a5271a6d5af3568ddad172df09272a6097f901921723e8786807da23968b585804fe5a41e94deb3d9dc4069a1ad1cb0f52bd1cae687807df01a1fbe26442cb80dacf61f50e93fca12c9bfbd7e0dc7fe90fb2783ff0df4525969af851839d8dee7115d6010d7ca5565a921ea9bbef7c0987bb1224ecedfdbf9c9256822738d5c7b56036fda0615514146d32a9a3b247f848b6b9782c879aafe22e6060902fd0f49033b6c5419c3dc001ce257e9e6b902f4ce3497b331ca8e669b569a03784547dd9a3ce08bb44ef98e7eb564fbfb7c42b79508d12f93406392a422bd377e1ca208bc93be50e18f3b8daf1545a49f291e86047967d5961c20694e6ce3af71c15ff5afb27635c47e88d16f5ea16efe35f78e402077b0201e1e48b21fc40fed6ae942373da5d49b2be8a0b320113221bb7cad503516ea2af3cc8418aa53bdcf3cbff028f9cb4b1b7a3a9ead9e86e28b8e8252e3ad6de8272a16bee4a358dfff2e2efdd9e25e409eb715586b369093a303663554610680d7175652917a22f9eaec6678fff8c030a0b40e43c42dd6745460e2d08780e516661f8d3c54d30723e849d92355d25ef70ad4f1f4f27aecd5231e0a5a832b7d4a395421a61e949fb059cddd8069e32c8872a1bb7beddc78e426cd14cf6c2001b992dfaaf6e53869881c6963ed018dd3b063be5dae2bdc99fc7c26afdb6142ebd5c3f2d5056828dac7acace9d12c3f5228159292dab681fb754a92e7f7af33bb3b25fa85b8018e46b034469e750c9e20c891dc2929830e37ab43d4ddf57d06c34977e54e923a65578bdc66362eeceb5617835f7690efb60720d113348b1dfab4d2f26686f670f05bcbb4f998d4c48a821d1d8f08c3d51193ea51a538ad8ef303d07e263e96d50d70f9492984b51af87f9b5e8af13393fb1cd0159be29149cade47b11ea4296383531aa00c6e8ec7a6d1cf55303257fb125214eae7d9d54bd8d26bec5d2d5aa4779321ae01051cb7e33c54148ebacbc7092f5ea7196559328c32fb674d9a84a055ffeb7283496ad3dbfa07cee420f0ca10d2a4ac9beeef58980f9b2a0ebc7f9531e59cfa8b6fb216cd9604989ff3f1e7bf11c081afa1b806c3f383f3a3f92e31508574ba916f813490bf70891e88046e658a422c76fd337ddeceb409f46fce4b4046b5c7e6dc99883b57a4d9b273fda7800af6b5fbed3aa753c1ec33a4c8c5fdd26578e23108e43e933078517a37f655115e5901ac88d8f53b3aa23b3bd8bbe29a2181543be86fea34c79ffc66c6f1b6e64092b4c6d6d4ea30e3a98e2b0f09dee7b8eb0cd48b0a8a1415f9c2ebbd52c7ea65dfa9235e513b348ef8fa6cef16fa54f2514318e5b3b7aa18712202b59991340b37291436597dbe64146c6be04b46e9021a4a0d926552f2bdd3af76915fb177c9534c5453d0ebb9f261275c2075c4d133bbee85bf43c2b6901a701b02affa810609ba04e5f2de9418cf59ba451186876f6b8e5f2f0b9c324b6525ae1fe60ba935ab42ce60dba23549515034156e3dd8eda6ac9064ffc0518e317266a39aabe53dc2db76c13edb74111b97aeb8db268248b7a39fcc197afa7cd77fc67f7e46f848b00ac928b818facf5572d73338849cc2939f9f2194771604cb7f65645cc91a45645531306576ad7d3f854bf901570e721df8ebf4c3c04147660905bbfec0e50889ff4060a8053ee7085f48e12d4222b51ad841f822dcbe52ab88032fc4288e3e44f77bc673a7ba7b979760988aa7022d5460adca5151fd59c39f5d9e744662b917b52c9fdc2f313a6ef1549ff5e205926a60bbe31a76bc88489259b41c8816e61da3c75a0a1c94227d779d75a7268ea7b50abf219dd61ae92d5e13850d1ab5e51784f4b96298ce2eb3b3bf33c03c0a95a72e8b3933b79c3d18357124df7e0f7d99429a80bd97d0edb83f2fe638cb9081384d4b29d80b7178aaba8aa0a09b3743ca664557d3dc6d7e6f7a78f4b1cfcc6c0341794b5c49d76b5974fbdba19d0fdfee0a9dd39e7245ca0dc0ef33b09d0fcf0c4b31cab9a0cd5257f2f849a08162052818e5269c16812e7b0bd2cab8d1265deaba07259f3c36b73982973f373fa17bb7c6601aed5e16618ee760be125e4a0f927fdfebb0a76e5a78fd5e524f71e794e21b3782b48234a6e7eeae677c5bff4ec6eb403729f1452bfd59aea767df48e43b8dbf0c1e4f05b483b48170ae707a672a36887b11b53505457f2d3607db31c6d0c941199e5b3b2e55983e5ecbf71cd0302517590b5455a1de29441fe537055de1fc825b24eca9fe647556e6e8b1b2cb6b1f01dd437328eb5dd442dee1bad29a3c3d333e076c2441d164009c26280ba3d1299651f30628d2a31e9a5fff5a0577aed2a255ed919329bc8d8969187a8bb58b7f6e9c94ef01773d74638ade95dbd2ab820c6fa62db1e9e906abd46f22c919a8c7e5ffa0979258ad418b5111b119d668b3e3bf3d9a0b8b2910b5cfc4d301341b56e7f5920362e2e0f34cbd882ca3af65c4af44615e25aedfc3f660aa5de3058dcd0ffa42f6ca9bb0eca9ac276263894d074ce93d68d84d8b453adce98a9562bc7d85e2e9dda1b13c86e345983daebe5ea6fcfc22cc30cc9da517b8dd090986267e93936b9bb5fecdb337b3a52eb134855dc4f3883c8fc39332c93901eaca70be9cdf9cd2e075f190be29726ffe97d06f337a0cf9d796a562fa4ae905706188a5fc5ed1152156519fe5ea0eb7dc0d2327c5e3f8e9c134db8563525a9b0aefada63a0bd50d8acfab5f2db169e828f725f825ff2b3464dcbab76d5b9b556f171320f7abe47b18a65ba474a64b6fa766937fee1eb8dc0d1602d326363c20dd1e1d17e2ff3f081406640025eb576cd3b3f03eb82a8667d7ce70a3d026fc5a98fbaffa978f68e52fb07da0d70d97e10c620b1d73f3ac11c32446a782b7627d4ebf4d44552cec25741f11cf2285721c8b054c291d987340ff3e2f989d45f5a3e34d413e3e91ada49127a8cafcf86629c59eeca15e004815a0429dec7b1ab30ea57d7720c695eee4cd678c1c41da30194ace06fe7da9feecd795f9a5122ed7e2ea66c106f8ae8cc12edddb24903151c536363151e615fc2d504fabe9de44b605d4ac3d483e1fee4d3e631204ca833792a168d1a9289530c2b7883320b5149a1a9bf36344f903429f5c4f3a8efa4b3c55280954505435b251a05978c0a511cd737b4a37bd163f12be04dfb9216d8535962654cdefba38ecd19c3ec2f18a8f03d1f8893e6fad55be75694f0be4065a0592356aa7310606359696189a834bac7cbaab260bd303729343a31cd28732d3c8149724280127156a8631ff492285f149451dc021a310122a77a3e21f22e45acd214792b205ee82f30bca3f066cc05ca3c40dca2bb9b158423ee03bf28996284215722ecb7e6cb0d256bc1bf2d2571ec3baafac8b84845f92dc8d88d27f8957c71590a9c56703f4d158f2fa7b813c480f5bcfbd5db0e47a8097e24f1d5f2091eae4b608329b0c31a82bdd02f645ce0484215c11266d89c5671138a819f249278399b16b6396bf06fc1a3501b235d8e450acb6b0ae50ae254ad4a7f1f95daab3c9a9819e72fda00e28d3f3df651d73c7204086d3fb07fb8f4577a0479defa3f3772cc91d81646ed88923522406793fa1b074aa498a9eddeb824d3cf2bc0f2a971c24203fa6f9f2bb4ea059a6ef00", 0x2000, &(0x7f0000005940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005a00)={0x90, 0x0, 0x5, {0x1fffffffffffff9, 0x2, 0x5, 0xfffffffffffffffe, 0x4, 0x1df, {0x8, 0x2, 0x6, 0x2, 0x2, 0x3f49, 0xc05, 0x9, 0xc6e, 0x2000, 0x0, 0x0, r2, 0xe70, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
setns(0xc9, 0x0)
r3 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRES16=0x0, @ANYBLOB="020028bd7000fbdbdf25092ae9002800028008dea16522951fa54700010016c620001440038008760100070000000800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c810}, 0x24040031)
syz_clone(0xa0840800, &(0x7f00000010c0)="e133d5c0f2805d6ed2ed8f5e514fe66a567e45943d0b5f6543b716a0576f35f5faa020f84f3277d6812f747698375a0a798cda0d44fff830fc817c6a6e622550169b060000002c329c9d81f59a49eed8fe7ab20b260523fd361fcc115822feee43ca3508435fb06d696980aae1f3c142244b100f9b2d7ae93a08ae9d4f10d13973555f557cd7b4a712cee7a7711446510efec0fbb74a35e2a8f1d3fccef4b801f6294ea559ddd68fdc994b500a9260000000000000000000", 0xb8, &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000000500)="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")
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001300)={'bridge_slave_0\x00', <r5=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES8=r5, @ANYBLOB="00000000000000001c001a8018000580140006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = getpid()
fcntl$setownex(r6, 0xf, &(0x7f0000000300)={0x2, r7})
syz_pidfd_open(r7, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, '.\x00'})
r9 = socket$packet(0x11, 0x3, 0x300)
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x300, 0x94)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'vlan0\x00', <r10=>0x0})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180)=0xf3f, 0x4)
sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000240)={0xc9, 0xc, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)

146.991118ms ago: executing program 8 (id=2173):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20)
write$binfmt_elf32(r0, 0x0, 0x4cd)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1)
writev(r0, &(0x7f0000001680), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0xefd, &(0x7f0000000800)={0x0, 0x9492, 0x110101, 0x6, 0x38b}, &(0x7f0000000880), &(0x7f00000008c0)=<r2=>0x0, &(0x7f0000000900)=<r3=>0x0)
syz_io_uring_setup(0x1839, &(0x7f0000000b80)={0x0, 0x2f1e, 0x4, 0x2, 0x1000200, 0x0, r1}, &(0x7f00000009c0)=<r4=>0x0, &(0x7f0000000a00), &(0x7f0000000a40))
syz_ublk_add_dev(r1, r4, r2, r3, &(0x7f0000000a80)={0x2e, 0x15, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000b00)=@new_dev={0x2, 0x610, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x18}}}, &(0x7f0000000b40))
socket$igmp6(0xa, 0x3, 0x2)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000700)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000740)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000780)={{@my=0x1}, @host, 0x0, 0x400000, 0x7})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7aa, &(0x7f00000007c0)={{@my=0x1}})
setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000001600)={{0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, {0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1, {[0xa, 0x1, 0x1000d5, 0x8, 0x5, 0x33cb, 0x2, 0x8]}}, 0x5c)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000640), &(0x7f00000006c0)=0x68)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000600)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x6}})
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r9, 0x5608, 0x2)
mremap(&(0x7f00001a5000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffa000/0x3000)=nil)
r10 = getpid()
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000c00)=""/191, 0xbf}], 0x1}, 0x81}, {{&(0x7f0000000040)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f0000000280)=""/154, 0x9a}], 0x2, &(0x7f0000000380)=""/5, 0x5}, 0x8}], 0x2, 0x2062, &(0x7f0000000440)={0x77359400})
syz_pidfd_open(r10, 0x0)

64.604816ms ago: executing program 8 (id=2174):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000020100000900010073797a3000000000070002006c6f0000070003006c6f"], 0x30}}, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='measure #', 0x9)
syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000100)={0x57, 0x8a5, 0x6, 0x7, 0xc, 0xeb50})
recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x12160, 0x0)

26.414466ms ago: executing program 9 (id=2175):
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000001c0)="c6f5", 0x2}], 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0)

5.527055ms ago: executing program 8 (id=2176):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x84)
fchdir(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_emit_ethernet(0x15e, &(0x7f00000002c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840)
write$nci(r2, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x8)
openat(0xffffffffffffff9c, 0x0, 0x81, 0x0)

0s ago: executing program 9 (id=2177):
socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090)

kernel console output (not intermixed with test programs):

194608][T10422] name failslab, interval 1, probability 0, space 0, times 0
[  174.194638][T10422] CPU: 0 UID: 0 PID: 10422 Comm: syz.6.1463 Not tainted syzkaller #0 PREEMPT(full) 
[  174.194659][T10422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  174.194671][T10422] Call Trace:
[  174.194678][T10422]  <TASK>
[  174.194685][T10422]  dump_stack_lvl+0x100/0x190
[  174.194717][T10422]  should_fail_ex.cold+0x5/0xa
[  174.194743][T10422]  should_failslab+0xc2/0x120
[  174.194771][T10422]  __kvmalloc_node_noprof+0x113/0x9b0
[  174.194797][T10422]  ? bpf_compute_postorder+0x6b6/0x860
[  174.194817][T10422]  ? bpf_stack_liveness_init+0x29/0xd0
[  174.194849][T10422]  bpf_stack_liveness_init+0x29/0xd0
[  174.194872][T10422]  bpf_check+0x7d98/0xac70
[  174.194899][T10422]  ? __css_rstat_updated+0x1ce/0x590
[  174.194921][T10422]  ? __lock_acquire+0x5c0/0x1f40
[  174.194941][T10422]  ? __pfx___css_rstat_updated+0x10/0x10
[  174.194974][T10422]  ? __pfx_bpf_check+0x10/0x10
[  174.195000][T10422]  ? lock_acquire+0x1d1/0x380
[  174.195020][T10422]  ? find_held_lock+0x2b/0x80
[  174.195046][T10422]  ? bpf_prog_load+0x1a27/0x2ab0
[  174.195075][T10422]  ? __asan_memset+0x23/0x50
[  174.195102][T10422]  ? bpf_prog_load+0x1ae1/0x2ab0
[  174.195128][T10422]  bpf_prog_load+0x1ae1/0x2ab0
[  174.195158][T10422]  ? __pfx_bpf_prog_load+0x10/0x10
[  174.195201][T10422]  __sys_bpf+0x1f46/0x4a30
[  174.195226][T10422]  ? __pfx___sys_bpf+0x10/0x10
[  174.195245][T10422]  ? find_held_lock+0x2b/0x80
[  174.195268][T10422]  ? get_pid_task+0xfc/0x250
[  174.195292][T10422]  ? get_pid_task+0xfc/0x250
[  174.195321][T10422]  ? find_held_lock+0x2b/0x80
[  174.195350][T10422]  ? rcu_read_lock_any_held+0x6a/0x90
[  174.195365][T10422]  ? find_held_lock+0x2b/0x80
[  174.195386][T10422]  ? ksys_write+0x190/0x250
[  174.195405][T10422]  ? ksys_write+0x190/0x250
[  174.195424][T10422]  ? lock_acquire+0x1d1/0x380
[  174.195456][T10422]  ? fput+0x7c/0x100
[  174.195480][T10422]  ? ksys_write+0x1ac/0x250
[  174.195504][T10422]  ? __x64_sys_bpf+0xce/0x140
[  174.195523][T10422]  __x64_sys_bpf+0xce/0x140
[  174.195546][T10422]  ? do_syscall_64+0xae/0x790
[  174.195573][T10422]  do_syscall_64+0x123/0x790
[  174.195600][T10422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.195619][T10422] RIP: 0033:0x7f0d03b9e1d9
[  174.195636][T10422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.195652][T10422] RSP: 002b:00007f0d04a54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  174.195670][T10422] RAX: ffffffffffffffda RBX: 00007f0d03e25fa0 RCX: 00007f0d03b9e1d9
[  174.195683][T10422] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005
[  174.195695][T10422] RBP: 00007f0d04a54090 R08: 0000000000000000 R09: 0000000000000000
[  174.195706][T10422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  174.195717][T10422] R13: 00007f0d03e26038 R14: 00007f0d03e25fa0 R15: 00007ffc427ff1c8
[  174.195745][T10422]  </TASK>
[  174.391249][   T30] usb 13-1: new high-speed USB device number 4 using dummy_hcd
[  174.421085][T10435] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1469'.
[  174.461643][ T5738] Bluetooth: hci5: unexpected event for opcode 0x042c
[  174.466066][T10437] No such timeout policy "syz1"
[  174.531248][   T30] usb 13-1: device descriptor read/64, error -71
[  174.651542][   T30] usb usb13-port1: attempt power cycle
[  175.012107][   T30] usb 13-1: new high-speed USB device number 5 using dummy_hcd
[  175.015798][T10454] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1478'.
[  175.033265][   T30] usb 13-1: device descriptor read/8, error -71
[  175.281240][   T30] usb 13-1: new high-speed USB device number 6 using dummy_hcd
[  175.312438][   T30] usb 13-1: device descriptor read/8, error -71
[  175.395191][T10465] FAULT_INJECTION: forcing a failure.
[  175.395191][T10465] name failslab, interval 1, probability 0, space 0, times 0
[  175.395220][T10465] CPU: 2 UID: 0 PID: 10465 Comm: syz.7.1483 Not tainted syzkaller #0 PREEMPT(full) 
[  175.395258][T10465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  175.395270][T10465] Call Trace:
[  175.395276][T10465]  <TASK>
[  175.395285][T10465]  dump_stack_lvl+0x100/0x190
[  175.395315][T10465]  should_fail_ex.cold+0x5/0xa
[  175.395339][T10465]  should_failslab+0xc2/0x120
[  175.395365][T10465]  __kmalloc_cache_noprof+0x91/0x6d0
[  175.395384][T10465]  ? snd_card_file_add+0x52/0x320
[  175.395408][T10465]  snd_card_file_add+0x52/0x320
[  175.395431][T10465]  snd_mixer_oss_open+0xaf/0x2f0
[  175.395448][T10465]  ? __pfx_snd_mixer_oss_open+0x10/0x10
[  175.395467][T10465]  soundcore_open+0x2e3/0x5a0
[  175.395487][T10465]  ? __pfx_soundcore_open+0x10/0x10
[  175.395505][T10465]  chrdev_open+0x234/0x6a0
[  175.395530][T10465]  ? __pfx_chrdev_open+0x10/0x10
[  175.395554][T10465]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  175.395578][T10465]  do_dentry_open+0x6ab/0x14d0
[  175.395599][T10465]  ? __pfx_chrdev_open+0x10/0x10
[  175.395628][T10465]  vfs_open+0x82/0x3f0
[  175.395655][T10465]  path_openat+0x19fa/0x2440
[  175.395683][T10465]  ? __pfx_path_openat+0x10/0x10
[  175.395714][T10465]  do_file_open+0x20e/0x430
[  175.395750][T10465]  ? __pfx_do_file_open+0x10/0x10
[  175.395792][T10465]  ? _raw_spin_unlock+0x28/0x50
[  175.395815][T10465]  ? alloc_fd+0x471/0x7a0
[  175.395848][T10465]  do_sys_openat2+0x10f/0x1e0
[  175.395864][T10465]  ? __pfx_do_sys_openat2+0x10/0x10
[  175.395881][T10465]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  175.395913][T10465]  __x64_sys_openat+0x12d/0x210
[  175.395930][T10465]  ? __pfx___x64_sys_openat+0x10/0x10
[  175.395955][T10465]  do_syscall_64+0x123/0x790
[  175.395981][T10465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.395999][T10465] RIP: 0033:0x7f062299e1d9
[  175.396015][T10465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.396030][T10465] RSP: 002b:00007f06238fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  175.396049][T10465] RAX: ffffffffffffffda RBX: 00007f0622c25fa0 RCX: 00007f062299e1d9
[  175.396061][T10465] RDX: 0000000000000400 RSI: 0000200000000300 RDI: ffffffffffffff9c
[  175.396073][T10465] RBP: 00007f0622a35888 R08: 0000000000000000 R09: 0000000000000000
[  175.396084][T10465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.396095][T10465] R13: 00007f0622c26038 R14: 00007f0622c25fa0 R15: 00007ffca9cb7dc8
[  175.396120][T10465]  </TASK>
[  175.423420][   T30] usb usb13-port1: unable to enumerate USB device
[  175.495378][T10475] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1487'.
[  175.566127][T10482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.018641][T10494] netlink: 'syz.5.1495': attribute type 1 has an invalid length.
[  176.018765][T10494] nbd: couldn't find a device at index 867766997
[  176.407126][T10514] 9p: Bad value for 'rfdno'
[  176.654624][T10522] FAULT_INJECTION: forcing a failure.
[  176.654624][T10522] name failslab, interval 1, probability 0, space 0, times 0
[  176.654644][T10522] CPU: 2 UID: 0 PID: 10522 Comm: syz.8.1507 Not tainted syzkaller #0 PREEMPT(full) 
[  176.654657][T10522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  176.654663][T10522] Call Trace:
[  176.654668][T10522]  <TASK>
[  176.654672][T10522]  dump_stack_lvl+0x100/0x190
[  176.654692][T10522]  should_fail_ex.cold+0x5/0xa
[  176.654708][T10522]  should_failslab+0xc2/0x120
[  176.654732][T10522]  __kmalloc_cache_noprof+0x91/0x6d0
[  176.654751][T10522]  ? copy_mount_options+0x55/0x190
[  176.654779][T10522]  copy_mount_options+0x55/0x190
[  176.654803][T10522]  __x64_sys_mount+0x1ab/0x310
[  176.654823][T10522]  ? __pfx___x64_sys_mount+0x10/0x10
[  176.654842][T10522]  do_syscall_64+0x123/0x790
[  176.654859][T10522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.654871][T10522] RIP: 0033:0x7f47ff19e1d9
[  176.654880][T10522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.654890][T10522] RSP: 002b:00007f48000cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  176.654901][T10522] RAX: ffffffffffffffda RBX: 00007f47ff425fa0 RCX: 00007f47ff19e1d9
[  176.654908][T10522] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000
[  176.654914][T10522] RBP: 00007f48000cf090 R08: 0000200000000240 R09: 0000000000000000
[  176.654921][T10522] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  176.654927][T10522] R13: 00007f47ff426038 R14: 00007f47ff425fa0 R15: 00007ffe404ece88
[  176.654942][T10522]  </TASK>
[  176.681788][T10524] Bluetooth: hci0: unsupported parameter 255
[  176.681800][T10524] Bluetooth: hci0: unsupported parameter 255
[  177.347076][T10546] Bluetooth: hci0: unsupported parameter 255
[  177.347095][T10546] Bluetooth: hci0: unsupported parameter 255
[  177.473583][   T44] kauditd_printk_skb: 1391 callbacks suppressed
[  177.473601][   T44] audit: type=1400 audit(2000000362.945:2396): avc:  denied  { read write } for  pid=10555 comm="syz.5.1522" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  177.473645][   T44] audit: type=1400 audit(2000000362.945:2397): avc:  denied  { open } for  pid=10555 comm="syz.5.1522" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  177.573629][ T5738] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  177.684732][T10569] Bluetooth: hci0: unsupported parameter 255
[  177.684752][T10569] Bluetooth: hci0: unsupported parameter 255
[  177.946741][   T44] audit: type=1400 audit(2000000363.415:2398): avc:  denied  { ioctl } for  pid=10580 comm="syz.7.1533" path="socket:[42994]" dev="sockfs" ino=42994 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  177.946810][T10581] syzkaller0: entered promiscuous mode
[  177.946828][T10581] syzkaller0: entered allmulticast mode
[  178.052064][ T5748] Bluetooth: hci2: sending frame failed (-49)
[  178.054322][ T5738] Bluetooth: hci2: Opcode 0x1003 failed: -49
[  178.350341][T10619] FAULT_INJECTION: forcing a failure.
[  178.350341][T10619] name failslab, interval 1, probability 0, space 0, times 0
[  178.350369][T10619] CPU: 1 UID: 0 PID: 10619 Comm: syz.6.1547 Not tainted syzkaller #0 PREEMPT(full) 
[  178.350388][T10619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  178.350399][T10619] Call Trace:
[  178.350405][T10619]  <TASK>
[  178.350411][T10619]  dump_stack_lvl+0x100/0x190
[  178.350442][T10619]  should_fail_ex.cold+0x5/0xa
[  178.350484][T10619]  should_failslab+0xc2/0x120
[  178.350512][T10619]  __kvmalloc_node_noprof+0x113/0x9b0
[  178.350534][T10619]  ? check_attach_btf_id+0x2b9/0x1c20
[  178.350562][T10619]  ? sort_subprogs_topo+0xde/0xe50
[  178.350604][T10619]  sort_subprogs_topo+0xde/0xe50
[  178.350631][T10619]  ? bpf_insn_is_cond_jump+0x90/0xd0
[  178.350650][T10619]  ? bpf_prune_dead_branches+0x477/0x800
[  178.350678][T10619]  bpf_check+0x7e33/0xac70
[  178.350704][T10619]  ? __css_rstat_updated+0x1ce/0x590
[  178.350727][T10619]  ? __lock_acquire+0x5c0/0x1f40
[  178.350749][T10619]  ? __pfx___css_rstat_updated+0x10/0x10
[  178.350789][T10619]  ? __pfx_bpf_check+0x10/0x10
[  178.350815][T10619]  ? lock_acquire+0x1d1/0x380
[  178.350836][T10619]  ? find_held_lock+0x2b/0x80
[  178.350861][T10619]  ? bpf_prog_load+0x1a27/0x2ab0
[  178.350895][T10619]  ? __asan_memset+0x23/0x50
[  178.350920][T10619]  ? bpf_prog_load+0x1ae1/0x2ab0
[  178.350945][T10619]  bpf_prog_load+0x1ae1/0x2ab0
[  178.350975][T10619]  ? __pfx_bpf_prog_load+0x10/0x10
[  178.351022][T10619]  __sys_bpf+0x1f46/0x4a30
[  178.351048][T10619]  ? __pfx___sys_bpf+0x10/0x10
[  178.351067][T10619]  ? find_held_lock+0x2b/0x80
[  178.351093][T10619]  ? get_pid_task+0xfc/0x250
[  178.351118][T10619]  ? get_pid_task+0xfc/0x250
[  178.351150][T10619]  ? find_held_lock+0x2b/0x80
[  178.351182][T10619]  ? rcu_read_lock_any_held+0x6a/0x90
[  178.351198][T10619]  ? find_held_lock+0x2b/0x80
[  178.351223][T10619]  ? ksys_write+0x190/0x250
[  178.351244][T10619]  ? ksys_write+0x190/0x250
[  178.351265][T10619]  ? lock_acquire+0x1d1/0x380
[  178.351314][T10619]  ? fput+0x7c/0x100
[  178.351341][T10619]  ? ksys_write+0x1ac/0x250
[  178.351364][T10619]  ? __x64_sys_bpf+0xce/0x140
[  178.351382][T10619]  __x64_sys_bpf+0xce/0x140
[  178.351402][T10619]  ? do_syscall_64+0xae/0x790
[  178.351430][T10619]  do_syscall_64+0x123/0x790
[  178.351456][T10619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.351474][T10619] RIP: 0033:0x7f0d03b9e1d9
[  178.351489][T10619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.351505][T10619] RSP: 002b:00007f0d04a54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  178.351523][T10619] RAX: ffffffffffffffda RBX: 00007f0d03e25fa0 RCX: 00007f0d03b9e1d9
[  178.351535][T10619] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005
[  178.351545][T10619] RBP: 00007f0d04a54090 R08: 0000000000000000 R09: 0000000000000000
[  178.351556][T10619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  178.351566][T10619] R13: 00007f0d03e26038 R14: 00007f0d03e25fa0 R15: 00007ffc427ff1c8
[  178.351591][T10619]  </TASK>
[  178.559298][   T44] audit: type=1400 audit(2000000364.025:2399): avc:  denied  { transition } for  pid=10637 comm="syz.8.1553" path="/87/file0" dev="tmpfs" ino=474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  178.559725][   T44] audit: type=1400 audit(2000000364.025:2400): avc:  denied  { entrypoint } for  pid=10637 comm="syz.8.1553" path="/87/file0" dev="tmpfs" ino=474 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  178.559888][   T44] audit: type=1400 audit(2000000364.025:2401): avc:  denied  { share } for  pid=10637 comm="syz.8.1553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  178.560056][   T44] audit: type=1400 audit(2000000364.025:2402): avc:  denied  { noatsecure } for  pid=10637 comm="syz.8.1553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  178.634699][T10649] syzkaller0: entered promiscuous mode
[  178.634721][T10649] syzkaller0: entered allmulticast mode
[  178.936313][T10665] trusted_key: encrypted_key: insufficient parameters specified
[  178.938397][T10666] trusted_key: encrypted_key: insufficient parameters specified
[  178.978624][T10663] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  178.997867][T10671] syzkaller0: entered promiscuous mode
[  178.997981][T10671] syzkaller0: entered allmulticast mode
[  179.282978][T10696] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  179.422836][T10703] null_blk: disk nullb1 created
[  179.473535][T10706] syzkaller0: entered promiscuous mode
[  179.473557][T10706] syzkaller0: entered allmulticast mode
[  179.621319][   T30] usb 13-1: new high-speed USB device number 7 using dummy_hcd
[  179.684529][T10710] program syz.6.1579 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  179.781642][   T30] usb 13-1: Using ep0 maxpacket: 16
[  179.781989][T10712] netlink: 666 bytes leftover after parsing attributes in process `syz.6.1580'.
[  179.783493][   T30] usb 13-1: New USB device found, idVendor=0733, idProduct=3261, bcdDevice= b.0a
[  179.784470][   T30] usb 13-1: config 4 has an invalid interface number: 111 but max is 0
[  179.784491][   T30] usb 13-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  179.784505][   T30] usb 13-1: config 4 has no interface number 0
[  179.784538][   T30] usb 13-1: config 4 interface 111 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 8
[  179.784557][   T30] usb 13-1: config 4 interface 111 altsetting 7 endpoint 0xD has invalid maxpacket 512, setting to 64
[  179.784578][   T30] usb 13-1: config 4 interface 111 altsetting 7 has a duplicate endpoint with address 0x4, skipping
[  179.784596][   T30] usb 13-1: config 4 interface 111 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  179.784613][   T30] usb 13-1: config 4 interface 111 altsetting 7 has a duplicate endpoint with address 0xE, skipping
[  179.784630][   T30] usb 13-1: config 4 interface 111 altsetting 7 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  179.784650][   T30] usb 13-1: config 4 interface 111 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  179.784668][   T30] usb 13-1: config 4 interface 111 altsetting 7 endpoint 0x7 has an invalid bInterval 255, changing to 7
[  179.784689][   T30] usb 13-1: config 4 interface 111 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  179.784707][   T30] usb 13-1: config 4 interface 111 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  179.784728][   T30] usb 13-1: config 4 interface 111 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  179.784744][   T30] usb 13-1: config 4 interface 111 altsetting 7 has a duplicate endpoint with address 0xB, skipping
[  179.784761][   T30] usb 13-1: config 4 interface 111 has no altsetting 0
[  179.786580][   T30] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.786598][   T30] usb 13-1: Product: 罬ঠ쑦⃩૮锸橢拓�怣�괷㜈阈꙰욮�蔪稧�圴⨸蘥〧ᆩ殺ꂼ鳅꓈棅鳟��ञ�벘籹ᨛẟ嗪ꔅ㺪鱿싛㤨㱩�赦汵�踶笊
[  179.786618][   T30] usb 13-1: Manufacturer: à �
[  179.786630][   T30] usb 13-1: SerialNumber: syz
[  179.789499][T10701] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  179.790320][T10701] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  179.814855][   T44] audit: type=1400 audit(2000000365.275:2403): avc:  denied  { write } for  pid=10711 comm="syz.6.1580" name="strings" dev="configfs" ino=37582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  179.816182][   T44] audit: type=1400 audit(2000000365.295:2404): avc:  denied  { write } for  pid=10711 comm="syz.6.1580" name="c.1" dev="configfs" ino=37585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  180.090880][   T30] gspca_main: sunplus-2.14.0 probing 0733:3261
[  180.093097][   T30] gspca_sunplus: reg_r err -71
[  180.218162][T10727] Bluetooth: hci0: invalid length 0, exp 2 for type 15
[  180.246529][T10729] syzkaller0: entered promiscuous mode
[  180.246548][T10729] syzkaller0: entered allmulticast mode
[  180.430482][T10742] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1592'.
[  180.451443][ T5748] Bluetooth: hci2: command 0x1003 tx timeout
[  180.454013][ T5738] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  180.503068][T10748] Bluetooth: hci0: invalid length 0, exp 2 for type 15
[  180.581537][T10754] syzkaller0: entered promiscuous mode
[  180.581552][T10754] syzkaller0: entered allmulticast mode
[  180.641338][   T44] audit: type=1400 audit(2000000366.105:2405): avc:  denied  { write } for  pid=10759 comm="syz.6.1601" name="/" dev="9p" ino=71827645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  180.755065][ T1171] Bluetooth: hci2: Frame reassembly failed (-84)
[  181.058872][T10781] syzkaller0: entered promiscuous mode
[  181.058895][T10781] syzkaller0: entered allmulticast mode
[  181.212176][   T30] sunplus 13-1:4.111: probe with driver sunplus failed with error -71
[  181.224283][   T30] usb 13-1: USB disconnect, device number 7
[  181.254672][T10786] fuse: Bad value for 'group_id'
[  181.254684][T10786] fuse: Bad value for 'group_id'
[  181.297271][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.298029][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.298630][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  181.299530][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  181.301868][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  181.617500][T10801] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  181.753103][T10787] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.753217][T10787] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.753315][T10787] bridge_slave_0: entered allmulticast mode
[  181.754675][T10787] bridge_slave_0: entered promiscuous mode
[  181.762770][T10787] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.762844][T10787] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.762935][T10787] bridge_slave_1: entered allmulticast mode
[  181.764391][T10787] bridge_slave_1: entered promiscuous mode
[  181.790900][T10787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.793800][T10787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.815547][T10787] team0: Port device team_slave_0 added
[  181.817971][T10787] team0: Port device team_slave_1 added
[  181.840848][T10787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.840863][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.840883][T10787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.842507][T10787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.842519][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.842540][T10787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.878721][T10787] hsr_slave_0: entered promiscuous mode
[  181.879514][T10787] hsr_slave_1: entered promiscuous mode
[  181.880049][T10787] debugfs: 'hsr0' already exists in 'hsr'
[  181.880067][T10787] Cannot create hsr debugfs directory
[  182.042794][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1625'.
[  182.093097][T10828] syzkaller0: entered promiscuous mode
[  182.093118][T10828] syzkaller0: entered allmulticast mode
[  182.107111][T10829] ima: Unable to open file: / (-22)
[  182.486762][T10841] Bluetooth: MGMT ver 1.23
[  182.645108][T10845] syzkaller0: entered promiscuous mode
[  182.645129][T10845] syzkaller0: entered allmulticast mode
[  182.781293][ T5738] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  182.818222][T10851] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1637'.
[  182.853291][T10822] ima: policy update failed
[  182.853459][   T44] kauditd_printk_skb: 10 callbacks suppressed
[  182.853474][   T44] audit: type=1802 audit(2000000368.325:2416): pid=10822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.1625" res=0 errno=0
[  182.987554][T10862] syzkaller0: entered promiscuous mode
[  182.987575][T10862] syzkaller0: entered allmulticast mode
[  183.093136][T10868] netlink: 'syz.8.1644': attribute type 34 has an invalid length.
[  183.093155][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1644'.
[  183.108488][T10868] bond2: option lacp_strict: invalid value (198)
[  183.112844][T10868] bond2 (unregistering): Released all slaves
[  183.169451][   T38] Bluetooth: hci2: Frame reassembly failed (-84)
[  183.169529][   T63] Bluetooth: hci2: Frame reassembly failed (-84)
[  183.331287][ T5748] Bluetooth: hci0: command tx timeout
[  183.508791][T10887] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1652'.
[  185.024343][T10823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  185.026795][T10787] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  185.030378][T10787] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  185.030748][T10787] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  185.041674][T10787] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  185.042626][T10787] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  185.052561][T10787] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  185.053183][T10787] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  185.058253][   T44] audit: type=1400 audit(2000000370.525:2417): avc:  denied  { unmount } for  pid=7407 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  185.058500][T10787] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  185.144846][T10787] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.155183][T10787] 8021q: adding VLAN 0 to HW filter on device team0
[  185.160392][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.160505][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.170327][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.170411][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.171355][ T5748] Bluetooth: hci2: command 0x1003 tx timeout
[  185.173176][ T5738] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  185.411385][ T5738] Bluetooth: hci0: command tx timeout
[  185.520226][   T44] audit: type=1400 audit(2000000370.985:2418): avc:  denied  { write } for  pid=10930 comm="syz.7.1663" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  185.602130][T10787] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.616900][T10932] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1663'.
[  185.617326][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1663'.
[  185.824661][T10787] veth0_vlan: entered promiscuous mode
[  185.828774][T10787] veth1_vlan: entered promiscuous mode
[  185.851518][T10787] veth0_macvtap: entered promiscuous mode
[  185.855597][T10787] veth1_macvtap: entered promiscuous mode
[  185.880396][T10787] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.888621][T10787] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.942077][ T5811] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.942133][ T5811] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.961750][ T5811] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.961801][ T5811] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.985316][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.985337][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.022449][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.022469][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.027048][   T44] audit: type=1400 audit(2000000371.495:2419): avc:  denied  { write } for  pid=10787 comm="syz-executor" name="syzkaller.lJAsNZ" dev="sda1" ino=8203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  186.027250][   T44] audit: type=1400 audit(2000000371.495:2420): avc:  denied  { add_name } for  pid=10787 comm="syz-executor" name="syz-tmp" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  186.029997][   T44] audit: type=1400 audit(2000000371.495:2421): avc:  denied  { mounton } for  pid=10787 comm="syz-executor" path="/syzkaller.lJAsNZ/syz-tmp" dev="sda1" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  186.537199][   T44] audit: type=1400 audit(2000000372.005:2422): avc:  denied  { shutdown } for  pid=10989 comm="syz.9.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  186.538409][T10990] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[  186.538733][   T44] audit: type=1400 audit(2000000372.005:2423): avc:  denied  { relabelto } for  pid=10989 comm="syz.9.1682" name="5" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[  186.539222][   T44] audit: type=1400 audit(2000000372.005:2424): avc:  denied  { associate } for  pid=10989 comm="syz.9.1682" name="5" dev="tmpfs" ino=40 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0"
[  186.818420][T11000] IPVS: sh: FWM 1 0x00000001 - no destination available
[  186.819643][   T63] IPVS: starting estimator thread 0...
[  186.903682][T11006] IPVS: using max 21 ests per chain, 50400 per kthread
[  186.934326][T11012] FAULT_INJECTION: forcing a failure.
[  186.934326][T11012] name fail_futex, interval 1, probability 0, space 0, times 0
[  186.934356][T11012] CPU: 2 UID: 0 PID: 11012 Comm: syz.5.1689 Not tainted syzkaller #0 PREEMPT(full) 
[  186.934378][T11012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  186.934389][T11012] Call Trace:
[  186.934395][T11012]  <TASK>
[  186.934403][T11012]  dump_stack_lvl+0x100/0x190
[  186.934447][T11012]  should_fail_ex.cold+0x5/0xa
[  186.934474][T11012]  get_futex_key+0x1d0/0x14f0
[  186.934504][T11012]  ? __pfx_get_futex_key+0x10/0x10
[  186.934529][T11012]  ? find_held_lock+0x2b/0x80
[  186.934556][T11012]  ? futex_wake+0x4ea/0x5e0
[  186.934581][T11012]  futex_wake+0xf4/0x5e0
[  186.934598][T11012]  ? futex_wait+0x11e/0x370
[  186.934620][T11012]  ? __pfx_futex_wake+0x10/0x10
[  186.934643][T11012]  ? __lock_acquire+0x5c0/0x1f40
[  186.934664][T11012]  ? ksys_write+0x190/0x250
[  186.934690][T11012]  ? ksys_write+0x190/0x250
[  186.934714][T11012]  do_futex+0x2b2/0x440
[  186.934743][T11012]  ? __pfx_do_futex+0x10/0x10
[  186.934768][T11012]  ? lock_acquire+0x1d1/0x380
[  186.934787][T11012]  ? __fget_files+0x34/0x3d0
[  186.934814][T11012]  ? find_held_lock+0x2b/0x80
[  186.934845][T11012]  __x64_sys_futex+0x34f/0x4d0
[  186.934874][T11012]  ? __fget_files+0x21f/0x3d0
[  186.934901][T11012]  ? __pfx___x64_sys_futex+0x10/0x10
[  186.934938][T11012]  do_syscall_64+0x123/0x790
[  186.934973][T11012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.934994][T11012] RIP: 0033:0x7f833299e1d9
[  186.935009][T11012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.935027][T11012] RSP: 002b:00007f83337f90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  186.935046][T11012] RAX: ffffffffffffffda RBX: 00007f8332c25fa8 RCX: 00007f833299e1d9
[  186.935058][T11012] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8332c25fac
[  186.935069][T11012] RBP: 00007f8332c25fa0 R08: 0000000000000001 R09: 0000000000000000
[  186.935080][T11012] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  186.935091][T11012] R13: 00007f8332c26038 R14: 00007ffc955bbd40 R15: 00007ffc955bbe28
[  186.935115][T11012]  </TASK>
[  186.955427][T11014] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  187.057988][T11021] batadv_slave_1: entered promiscuous mode
[  187.058722][T11020] batadv_slave_1: left promiscuous mode
[  187.081251][T11012] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1689'.
[  187.105214][   T44] audit: type=1400 audit(2000000372.575:2425): avc:  denied  { append } for  pid=11023 comm="syz.9.1693" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  187.113486][T11026] 9p: Bad value for 'rq'
[  187.310539][T11042] FAULT_INJECTION: forcing a failure.
[  187.310539][T11042] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  187.310567][T11042] CPU: 3 UID: 0 PID: 11042 Comm: syz.5.1700 Not tainted syzkaller #0 PREEMPT(full) 
[  187.310586][T11042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  187.310595][T11042] Call Trace:
[  187.310600][T11042]  <TASK>
[  187.310607][T11042]  dump_stack_lvl+0x100/0x190
[  187.310635][T11042]  should_fail_ex.cold+0x5/0xa
[  187.310657][T11042]  _copy_from_user+0x2e/0xd0
[  187.310680][T11042]  copy_mount_options+0x76/0x190
[  187.310702][T11042]  __x64_sys_mount+0x1ab/0x310
[  187.310719][T11042]  ? __pfx___x64_sys_mount+0x10/0x10
[  187.310743][T11042]  do_syscall_64+0x123/0x790
[  187.310767][T11042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.310784][T11042] RIP: 0033:0x7f833299e1d9
[  187.310798][T11042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.310812][T11042] RSP: 002b:00007f83337f9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  187.310829][T11042] RAX: ffffffffffffffda RBX: 00007f8332c25fa0 RCX: 00007f833299e1d9
[  187.310839][T11042] RDX: 0000200000000e80 RSI: 0000200000000e40 RDI: 0000000000000000
[  187.310849][T11042] RBP: 00007f83337f9090 R08: 0000200000000ec0 R09: 0000000000000000
[  187.310859][T11042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  187.310869][T11042] R13: 00007f8332c26038 R14: 00007f8332c25fa0 R15: 00007ffc955bbe28
[  187.310890][T11042]  </TASK>
[  187.338531][T11044] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  187.491362][ T5748] Bluetooth: hci0: command tx timeout
[  187.700888][T11065] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  187.798458][T11071] FAULT_INJECTION: forcing a failure.
[  187.798458][T11071] name failslab, interval 1, probability 0, space 0, times 0
[  187.798491][T11071] CPU: 1 UID: 0 PID: 11071 Comm: syz.8.1714 Not tainted syzkaller #0 PREEMPT(full) 
[  187.798512][T11071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  187.798524][T11071] Call Trace:
[  187.798531][T11071]  <TASK>
[  187.798539][T11071]  dump_stack_lvl+0x100/0x190
[  187.798571][T11071]  should_fail_ex.cold+0x5/0xa
[  187.798594][T11071]  ? __netlink_lookup+0x652/0x900
[  187.798634][T11071]  should_failslab+0xc2/0x120
[  187.798661][T11071]  kmem_cache_alloc_noprof+0x92/0x6a0
[  187.798692][T11071]  ? skb_clone+0x190/0x400
[  187.798715][T11071]  skb_clone+0x190/0x400
[  187.798736][T11071]  netlink_deliver_tap+0xaed/0xcc0
[  187.798769][T11071]  netlink_unicast+0x62b/0x850
[  187.798801][T11071]  ? __pfx_netlink_unicast+0x10/0x10
[  187.798838][T11071]  netlink_sendmsg+0x8b0/0xda0
[  187.798871][T11071]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.798903][T11071]  ? selinux_socket_sendmsg+0x198/0x2f0
[  187.798934][T11071]  ____sys_sendmsg+0xa4d/0xbe0
[  187.798957][T11071]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.798988][T11071]  ? __pfx_____sys_sendmsg+0x10/0x10
[  187.799018][T11071]  ? lock_acquire+0x1d1/0x380
[  187.799040][T11071]  ? get_pid_task+0x2a/0x250
[  187.799070][T11071]  ___sys_sendmsg+0x190/0x1e0
[  187.799096][T11071]  ? __pfx____sys_sendmsg+0x10/0x10
[  187.799121][T11071]  ? get_pid_task+0x106/0x250
[  187.799157][T11071]  ? find_held_lock+0x2b/0x80
[  187.799202][T11071]  __sys_sendmsg+0x160/0x210
[  187.799222][T11071]  ? __pfx___sys_sendmsg+0x10/0x10
[  187.799274][T11071]  do_syscall_64+0x123/0x790
[  187.799306][T11071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.799326][T11071] RIP: 0033:0x7f47ff19e1d9
[  187.799341][T11071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.799361][T11071] RSP: 002b:00007f48000cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  187.799380][T11071] RAX: ffffffffffffffda RBX: 00007f47ff425fa0 RCX: 00007f47ff19e1d9
[  187.799392][T11071] RDX: 0000000000000804 RSI: 0000200000000340 RDI: 0000000000000003
[  187.799404][T11071] RBP: 00007f48000cf090 R08: 0000000000000000 R09: 0000000000000000
[  187.799415][T11071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  187.799426][T11071] R13: 00007f47ff426038 R14: 00007f47ff425fa0 R15: 00007ffe404ece88
[  187.799453][T11071]  </TASK>
[  187.811290][ T5738] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  188.016436][   T44] kauditd_printk_skb: 1 callbacks suppressed
[  188.016454][   T44] audit: type=1400 audit(2000000373.485:2427): avc:  denied  { listen } for  pid=11081 comm="syz.8.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  188.023897][   T44] audit: type=1400 audit(2000000373.495:2428): avc:  denied  { getopt } for  pid=11081 comm="syz.8.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  188.024744][   T44] audit: type=1400 audit(2000000373.495:2429): avc:  denied  { accept } for  pid=11081 comm="syz.8.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  188.453994][ T1166] Bluetooth: hci2: Frame reassembly failed (-84)
[  190.451262][ T5738] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  190.451300][ T5748] Bluetooth: hci2: command 0x1003 tx timeout
[  191.425514][T11098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  191.557491][T11145] loop6: detected capacity change from 0 to 1
[  191.564244][T11145] Dev loop6: unable to read RDB block 1
[  191.564272][T11145]  loop6: unable to read partition table
[  191.564412][T11145] loop6: partition table beyond EOD, truncated
[  191.564453][T11145] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  191.571285][    C1] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2
[  191.585499][   T44] audit: type=1400 audit(2000000377.055:2430): avc:  denied  { write } for  pid=11144 comm="syz.8.1742" name="usbmon9" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  192.494215][T11174] FAULT_INJECTION: forcing a failure.
[  192.494215][T11174] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  192.494246][T11174] CPU: 2 UID: 0 PID: 11174 Comm: syz.9.1752 Not tainted syzkaller #0 PREEMPT(full) 
[  192.494266][T11174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  192.494277][T11174] Call Trace:
[  192.494283][T11174]  <TASK>
[  192.494290][T11174]  dump_stack_lvl+0x100/0x190
[  192.494321][T11174]  should_fail_ex.cold+0x5/0xa
[  192.494347][T11174]  _copy_from_user+0x2e/0xd0
[  192.494374][T11174]  ____sys_sendmsg+0x1d1/0xbe0
[  192.494399][T11174]  ? __pfx_____sys_sendmsg+0x10/0x10
[  192.494458][T11174]  ? lock_acquire+0x1d1/0x380
[  192.494480][T11174]  ? get_pid_task+0x2a/0x250
[  192.494508][T11174]  ___sys_sendmsg+0x190/0x1e0
[  192.494534][T11174]  ? __pfx____sys_sendmsg+0x10/0x10
[  192.494557][T11174]  ? get_pid_task+0x106/0x250
[  192.494591][T11174]  ? find_held_lock+0x2b/0x80
[  192.494633][T11174]  __sys_sendmsg+0x160/0x210
[  192.494653][T11174]  ? __pfx___sys_sendmsg+0x10/0x10
[  192.494685][T11174]  do_syscall_64+0x123/0x790
[  192.494713][T11174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.494731][T11174] RIP: 0033:0x7fc1d899e1d9
[  192.494745][T11174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  192.494762][T11174] RSP: 002b:00007fc1d97dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  192.494778][T11174] RAX: ffffffffffffffda RBX: 00007fc1d8c25fa0 RCX: 00007fc1d899e1d9
[  192.494790][T11174] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003
[  192.494801][T11174] RBP: 00007fc1d97dc090 R08: 0000000000000000 R09: 0000000000000000
[  192.494811][T11174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  192.494822][T11174] R13: 00007fc1d8c26038 R14: 00007fc1d8c25fa0 R15: 00007ffd58b99018
[  192.494846][T11174]  </TASK>
[  192.707379][T11191] netlink: 'syz.5.1755': attribute type 10 has an invalid length.
[  192.707410][T11191] ipvlan0: entered allmulticast mode
[  192.707424][T11191] veth0_vlan: entered allmulticast mode
[  192.713443][T11191] team0: Device ipvlan0 failed to register rx_handler
[  192.908539][T11193] tmpfs: Using encoding : utf8-12.1.0
[  193.848537][T11196] netlink: 'syz.9.1758': attribute type 34 has an invalid length.
[  193.848558][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1758'.
[  194.212799][ T1440] ieee802154 phy0 wpan0: encryption failed: -22
[  194.212856][ T1440] ieee802154 phy1 wpan1: encryption failed: -22
[  194.681781][T11154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  194.795455][T11219] FAULT_INJECTION: forcing a failure.
[  194.795455][T11219] name failslab, interval 1, probability 0, space 0, times 0
[  194.795484][T11219] CPU: 3 UID: 0 PID: 11219 Comm: syz.7.1766 Not tainted syzkaller #0 PREEMPT(full) 
[  194.795505][T11219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  194.795516][T11219] Call Trace:
[  194.795523][T11219]  <TASK>
[  194.795530][T11219]  dump_stack_lvl+0x100/0x190
[  194.795561][T11219]  should_fail_ex.cold+0x5/0xa
[  194.795588][T11219]  should_failslab+0xc2/0x120
[  194.795615][T11219]  __kmalloc_cache_noprof+0x91/0x6d0
[  194.795636][T11219]  ? __request_module+0x2b7/0x6a0
[  194.795667][T11219]  __request_module+0x2b7/0x6a0
[  194.795694][T11219]  ? __pfx___request_module+0x10/0x10
[  194.795717][T11219]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  194.795753][T11219]  ? rcu_is_watching+0x13/0xc0
[  194.795778][T11219]  ? cap_capable+0x107/0x430
[  194.795809][T11219]  dev_load+0x204/0x240
[  194.795828][T11219]  dev_ioctl+0x62c/0x10e0
[  194.795849][T11219]  sock_do_ioctl+0x1a0/0x280
[  194.795873][T11219]  ? __pfx_sock_do_ioctl+0x10/0x10
[  194.795895][T11219]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  194.795924][T11219]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  194.795945][T11219]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  194.795974][T11219]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  194.796005][T11219]  sock_ioctl+0x599/0x6b0
[  194.796030][T11219]  ? __pfx_sock_ioctl+0x10/0x10
[  194.796086][T11219]  ? selinux_file_ioctl+0x13b/0x290
[  194.796113][T11219]  ? selinux_file_ioctl+0xb6/0x290
[  194.796140][T11219]  ? __pfx_sock_ioctl+0x10/0x10
[  194.796166][T11219]  __x64_sys_ioctl+0x18e/0x210
[  194.796190][T11219]  do_syscall_64+0x123/0x790
[  194.796219][T11219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.796238][T11219] RIP: 0033:0x7f062299e1d9
[  194.796253][T11219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  194.796274][T11219] RSP: 002b:00007f06238fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  194.796292][T11219] RAX: ffffffffffffffda RBX: 00007f0622c25fa0 RCX: 00007f062299e1d9
[  194.796304][T11219] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003
[  194.796314][T11219] RBP: 00007f06238fa090 R08: 0000000000000000 R09: 0000000000000000
[  194.796325][T11219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  194.796335][T11219] R13: 00007f0622c26038 R14: 00007f0622c25fa0 R15: 00007ffca9cb7dc8
[  194.796360][T11219]  </TASK>
[  195.063642][T11251] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  195.177298][T11258] sd 0:0:0:0: PR command failed: 1026
[  195.177393][T11258] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  195.177429][T11258] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  195.177721][T11258] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  195.291592][T11276] FAULT_INJECTION: forcing a failure.
[  195.291592][T11276] name failslab, interval 1, probability 0, space 0, times 0
[  195.291622][T11276] CPU: 1 UID: 0 PID: 11276 Comm: syz.9.1786 Not tainted syzkaller #0 PREEMPT(full) 
[  195.291642][T11276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  195.291653][T11276] Call Trace:
[  195.291660][T11276]  <TASK>
[  195.291666][T11276]  dump_stack_lvl+0x100/0x190
[  195.291709][T11276]  should_fail_ex.cold+0x5/0xa
[  195.291733][T11276]  should_failslab+0xc2/0x120
[  195.291764][T11276]  kmem_cache_alloc_noprof+0x92/0x6a0
[  195.291789][T11276]  ? do_getname+0x35/0x390
[  195.291813][T11276]  do_getname+0x35/0x390
[  195.291834][T11276]  user_path_at+0x26/0x60
[  195.291876][T11276]  __x64_sys_mount+0x1fb/0x310
[  195.291897][T11276]  ? __pfx___x64_sys_mount+0x10/0x10
[  195.291923][T11276]  do_syscall_64+0x123/0x790
[  195.291957][T11276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.291976][T11276] RIP: 0033:0x7fc1d899e1d9
[  195.291991][T11276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  195.292009][T11276] RSP: 002b:00007fc1d97dc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  195.292028][T11276] RAX: ffffffffffffffda RBX: 00007fc1d8c25fa0 RCX: 00007fc1d899e1d9
[  195.292040][T11276] RDX: 0000200000000e80 RSI: 0000200000000e40 RDI: 0000000000000000
[  195.292073][T11276] RBP: 00007fc1d97dc090 R08: 0000200000000ec0 R09: 0000000000000000
[  195.292085][T11276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  195.292096][T11276] R13: 00007fc1d8c26038 R14: 00007fc1d8c25fa0 R15: 00007ffd58b99018
[  195.292122][T11276]  </TASK>
[  196.568161][T11306] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  197.457628][T11310] SELinux:  truncated policydb string identifier
[  197.457672][T11310] SELinux: failed to load policy
[  197.459141][   T44] audit: type=1400 audit(2000000382.925:2431): avc:  denied  { map } for  pid=11309 comm="syz.7.1800" path="/286/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  198.016295][T11245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  198.078720][   T44] audit: type=1400 audit(2000000383.545:2432): avc:  denied  { bind } for  pid=11312 comm="syz.9.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  198.127580][T11321] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11321 comm=syz.7.1805
[  198.131716][T11324] netlink: 'syz.8.1806': attribute type 34 has an invalid length.
[  198.131733][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1806'.
[  198.149517][T11324] bond2: option lacp_strict: invalid value (198)
[  198.153841][T11324] bond2 (unregistering): Released all slaves
[  198.311297][ T5832] usb 14-1: new high-speed USB device number 2 using dummy_hcd
[  198.481829][ T5832] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  198.483022][ T5832] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.483047][ T5832] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.483065][ T5832] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  198.483096][ T5832] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.491243][ T5832] usb 14-1: config 0 descriptor??
[  198.899758][ T5832] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd
[  198.918512][ T5832] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  199.162412][   T44] audit: type=1400 audit(2000000384.635:2433): avc:  denied  { read write } for  pid=11312 comm="syz.9.1802" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  199.162680][   T44] audit: type=1400 audit(2000000384.635:2434): avc:  denied  { open } for  pid=11312 comm="syz.9.1802" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  199.164898][ T9580] usb 14-1: USB disconnect, device number 2
[  199.187461][T11360] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint
[  199.191012][T11360] pci 0000:00:1d.0: BAR 4 [io  0xc0e0-0xc0ff]
[  199.206219][T11360] pci 0000:00:1d.0: Adding to iommu group 7
[  199.216914][T11360] pci 0000:00:1d.0: BAR 4 [io  0x2000-0x201f]: assigned
[  199.288088][T11360] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 68236 usecs
[  199.350193][T11360] uhci_hcd 0000:00:1d.0: UHCI Host Controller
[  199.372346][T11360] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1
[  199.372604][T11360] uhci_hcd 0000:00:1d.0: detected 2 ports
[  199.375665][T11360] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000
[  199.380752][T11360] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03
[  199.381548][T11364] netlink: 'syz.7.1820': attribute type 34 has an invalid length.
[  199.381559][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1820'.
[  199.384802][T11360] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  199.384872][T11360] usb usb1: Product: UHCI Host Controller
[  199.384887][T11360] usb usb1: Manufacturer: Linux syzkaller uhci_hcd
[  199.384901][T11360] usb usb1: SerialNumber: 0000:00:1d.0
[  199.406222][T11364] bond2: option lacp_strict: invalid value (198)
[  199.410646][T11364] bond2 (unregistering): Released all slaves
[  199.415149][T11360] hub 1-0:1.0: USB hub found
[  199.417472][T11360] hub 1-0:1.0: 2 ports detected
[  199.566546][   T44] audit: type=1400 audit(2000000385.035:2435): avc:  denied  { read } for  pid=11367 comm="syz.7.1821" dev="nsfs" ino=4026532866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  199.566831][   T44] audit: type=1400 audit(2000000385.035:2436): avc:  denied  { open } for  pid=11367 comm="syz.7.1821" path="net:[4026532866]" dev="nsfs" ino=4026532866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  199.716439][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1822'.
[  201.293051][T11340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  201.544735][   T25] logitech-hidpp-device 0005:046D:B012.0005: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  201.599916][T11406] fido_id[11406]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  201.699865][T11418] FAULT_INJECTION: forcing a failure.
[  201.699865][T11418] name failslab, interval 1, probability 0, space 0, times 0
[  201.699888][T11418] CPU: 2 UID: 0 PID: 11418 Comm: syz.9.1841 Not tainted syzkaller #0 PREEMPT(full) 
[  201.699902][T11418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  201.699909][T11418] Call Trace:
[  201.699913][T11418]  <TASK>
[  201.699918][T11418]  dump_stack_lvl+0x100/0x190
[  201.699939][T11418]  should_fail_ex.cold+0x5/0xa
[  201.699957][T11418]  should_failslab+0xc2/0x120
[  201.699975][T11418]  __kmalloc_cache_noprof+0x91/0x6d0
[  201.699990][T11418]  ? sctp_add_bind_addr+0xae/0x3e0
[  201.700009][T11418]  sctp_add_bind_addr+0xae/0x3e0
[  201.700062][T11418]  sctp_do_bind+0x36c/0x760
[  201.700080][T11418]  sctp_bindx_add+0x99/0x200
[  201.700101][T11418]  sctp_setsockopt_bindx+0x243/0x290
[  201.700125][T11418]  sctp_setsockopt+0x1b76/0xb370
[  201.700154][T11418]  ? __pfx_sctp_setsockopt+0x10/0x10
[  201.700177][T11418]  ? __fget_files+0x215/0x3d0
[  201.700207][T11418]  ? selinux_socket_setsockopt+0x6a/0x80
[  201.700242][T11418]  ? sock_common_setsockopt+0x2e/0xf0
[  201.700257][T11418]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  201.700273][T11418]  do_sock_setsockopt+0xf3/0x1d0
[  201.700288][T11418]  __sys_setsockopt+0x195/0x220
[  201.700302][T11418]  __x64_sys_setsockopt+0xbd/0x160
[  201.700312][T11418]  ? do_syscall_64+0xae/0x790
[  201.700329][T11418]  ? lockdep_hardirqs_on+0x7d/0x110
[  201.700345][T11418]  do_syscall_64+0x123/0x790
[  201.700362][T11418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.700375][T11418] RIP: 0033:0x7fc1d899e1d9
[  201.700385][T11418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.700396][T11418] RSP: 002b:00007fc1d97dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  201.700408][T11418] RAX: ffffffffffffffda RBX: 00007fc1d8c25fa0 RCX: 00007fc1d899e1d9
[  201.700415][T11418] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003
[  201.700422][T11418] RBP: 00007fc1d97dc090 R08: 0000000000000048 R09: 0000000000000000
[  201.700429][T11418] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001
[  201.700436][T11418] R13: 00007fc1d8c26038 R14: 00007fc1d8c25fa0 R15: 00007ffd58b99018
[  201.700451][T11418]  </TASK>
[  201.753798][   T44] audit: type=1400 audit(2000000387.225:2437): avc:  denied  { create } for  pid=11419 comm="syz.8.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  201.794424][T11428] FAULT_INJECTION: forcing a failure.
[  201.794424][T11428] name failslab, interval 1, probability 0, space 0, times 0
[  201.794452][T11428] CPU: 3 UID: 0 PID: 11428 Comm: syz.7.1845 Not tainted syzkaller #0 PREEMPT(full) 
[  201.794471][T11428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  201.794482][T11428] Call Trace:
[  201.794488][T11428]  <TASK>
[  201.794495][T11428]  dump_stack_lvl+0x100/0x190
[  201.794525][T11428]  should_fail_ex.cold+0x5/0xa
[  201.794572][T11428]  should_failslab+0xc2/0x120
[  201.794599][T11428]  __kvmalloc_node_noprof+0x113/0x9b0
[  201.794624][T11428]  ? sort_subprogs_topo+0xad7/0xe50
[  201.794645][T11428]  ? bpf_compute_scc+0xf9/0xad0
[  201.794668][T11428]  bpf_compute_scc+0xf9/0xad0
[  201.794697][T11428]  bpf_check+0x7e64/0xac70
[  201.794722][T11428]  ? __css_rstat_updated+0x1ce/0x590
[  201.794744][T11428]  ? __lock_acquire+0x5c0/0x1f40
[  201.794765][T11428]  ? __pfx___css_rstat_updated+0x10/0x10
[  201.794804][T11428]  ? __pfx_bpf_check+0x10/0x10
[  201.794829][T11428]  ? lock_acquire+0x1d1/0x380
[  201.794849][T11428]  ? find_held_lock+0x2b/0x80
[  201.794874][T11428]  ? bpf_prog_load+0x1a27/0x2ab0
[  201.794903][T11428]  ? __asan_memset+0x23/0x50
[  201.794926][T11428]  ? bpf_prog_load+0x1ae1/0x2ab0
[  201.794949][T11428]  bpf_prog_load+0x1ae1/0x2ab0
[  201.794979][T11428]  ? __pfx_bpf_prog_load+0x10/0x10
[  201.795024][T11428]  __sys_bpf+0x1f46/0x4a30
[  201.795049][T11428]  ? __pfx___sys_bpf+0x10/0x10
[  201.795067][T11428]  ? find_held_lock+0x2b/0x80
[  201.795090][T11428]  ? get_pid_task+0xfc/0x250
[  201.795113][T11428]  ? get_pid_task+0xfc/0x250
[  201.795143][T11428]  ? find_held_lock+0x2b/0x80
[  201.795173][T11428]  ? rcu_read_lock_any_held+0x6a/0x90
[  201.795194][T11428]  ? find_held_lock+0x2b/0x80
[  201.795218][T11428]  ? ksys_write+0x190/0x250
[  201.795237][T11428]  ? ksys_write+0x190/0x250
[  201.795256][T11428]  ? lock_acquire+0x1d1/0x380
[  201.795292][T11428]  ? fput+0x7c/0x100
[  201.795317][T11428]  ? ksys_write+0x1ac/0x250
[  201.795339][T11428]  ? __x64_sys_bpf+0xce/0x140
[  201.795357][T11428]  __x64_sys_bpf+0xce/0x140
[  201.795377][T11428]  ? do_syscall_64+0xae/0x790
[  201.795403][T11428]  do_syscall_64+0x123/0x790
[  201.795428][T11428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.795446][T11428] RIP: 0033:0x7f062299e1d9
[  201.795461][T11428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.795478][T11428] RSP: 002b:00007f06238fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  201.795496][T11428] RAX: ffffffffffffffda RBX: 00007f0622c25fa0 RCX: 00007f062299e1d9
[  201.795508][T11428] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005
[  201.795519][T11428] RBP: 00007f06238fa090 R08: 0000000000000000 R09: 0000000000000000
[  201.795529][T11428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  201.795539][T11428] R13: 00007f0622c26038 R14: 00007f0622c25fa0 R15: 00007ffca9cb7dc8
[  201.795564][T11428]  </TASK>
[  201.916901][T11396] FAULT_INJECTION: forcing a failure.
[  201.916901][T11396] name failslab, interval 1, probability 0, space 0, times 0
[  201.916930][T11396] CPU: 3 UID: 0 PID: 11396 Comm: syz.5.1830 Not tainted syzkaller #0 PREEMPT(full) 
[  201.916953][T11396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  201.916964][T11396] Call Trace:
[  201.916972][T11396]  <TASK>
[  201.916980][T11396]  dump_stack_lvl+0x100/0x190
[  201.917014][T11396]  should_fail_ex.cold+0x5/0xa
[  201.917042][T11396]  should_failslab+0xc2/0x120
[  201.917071][T11396]  kmem_cache_alloc_noprof+0x92/0x6a0
[  201.917096][T11396]  ? __kernfs_new_node+0xd2/0xa10
[  201.917123][T11396]  __kernfs_new_node+0xd2/0xa10
[  201.917146][T11396]  ? check_prev_add+0xfe/0xe60
[  201.917169][T11396]  ? kernfs_add_one+0x214/0xaa0
[  201.917199][T11396]  ? __pfx___kernfs_new_node+0x10/0x10
[  201.917224][T11396]  ? lock_acquire+0x1d1/0x380
[  201.917245][T11396]  ? kernfs_root+0x23/0x2a0
[  201.917266][T11396]  ? find_held_lock+0x2b/0x80
[  201.917295][T11396]  ? kernfs_root+0xee/0x2a0
[  201.917312][T11396]  ? kernfs_root+0xee/0x2a0
[  201.917337][T11396]  kernfs_new_node+0x117/0x150
[  201.917366][T11396]  kernfs_create_link+0xcc/0x240
[  201.917396][T11396]  sysfs_do_create_link_sd+0x90/0x140
[  201.917417][T11396]  sysfs_create_link+0x61/0xc0
[  201.917437][T11396]  device_add+0x553/0x1970
[  201.917461][T11396]  ? __pfx_device_add+0x10/0x10
[  201.917500][T11396]  ? input_register_device+0x8e0/0xe00
[  201.917525][T11396]  ? input_register_device+0x9a9/0xe00
[  201.917548][T11396]  ? kfree+0x22b/0x6d0
[  201.917566][T11396]  ? mark_held_locks+0x40/0x70
[  201.917594][T11396]  input_register_device+0x7d2/0xe00
[  201.917618][T11396]  ? _raw_spin_unlock_irq+0x23/0x50
[  201.917647][T11396]  psmouse_attr_set_protocol+0x8f5/0x11a0
[  201.917680][T11396]  ? __pfx_psmouse_attr_set_protocol+0x10/0x10
[  201.917699][T11396]  ? mark_held_locks+0x40/0x70
[  201.917721][T11396]  ? _raw_spin_unlock_irq+0x23/0x50
[  201.917744][T11396]  ? lockdep_hardirqs_on+0x7d/0x110
[  201.917772][T11396]  ? __pfx_psmouse_attr_set_protocol+0x10/0x10
[  201.917796][T11396]  psmouse_attr_set_helper+0x2e7/0x510
[  201.917821][T11396]  ? __pfx_psmouse_attr_set_helper+0x10/0x10
[  201.917844][T11396]  dev_attr_store+0x58/0x80
[  201.917863][T11396]  ? __pfx_dev_attr_store+0x10/0x10
[  201.917883][T11396]  sysfs_kf_write+0xf2/0x150
[  201.917913][T11396]  kernfs_fop_write_iter+0x3e0/0x5f0
[  201.917937][T11396]  ? __pfx_sysfs_kf_write+0x10/0x10
[  201.917968][T11396]  vfs_write+0x6af/0x1050
[  201.917992][T11396]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  201.918020][T11396]  ? __pfx_vfs_write+0x10/0x10
[  201.918041][T11396]  ? find_held_lock+0x2b/0x80
[  201.918088][T11396]  ksys_write+0x12a/0x250
[  201.918111][T11396]  ? __pfx_ksys_write+0x10/0x10
[  201.918142][T11396]  do_syscall_64+0x123/0x790
[  201.918171][T11396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.918197][T11396] RIP: 0033:0x7f833299e1d9
[  201.918213][T11396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.918232][T11396] RSP: 002b:00007f83337f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  201.918252][T11396] RAX: ffffffffffffffda RBX: 00007f8332c25fa0 RCX: 00007f833299e1d9
[  201.918266][T11396] RDX: 0000000000000004 RSI: 0000200000000780 RDI: 0000000000000004
[  201.918278][T11396] RBP: 00007f8332a35888 R08: 0000000000000000 R09: 0000000000000000
[  201.918290][T11396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.918301][T11396] R13: 00007f8332c26038 R14: 00007f8332c25fa0 R15: 00007ffc955bbe28
[  201.918329][T11396]  </TASK>
[  201.979472][T11420] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1842'.
[  201.985787][   T44] audit: type=1400 audit(2000000387.455:2438): avc:  denied  { search } for  pid=11439 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  201.985832][   T44] audit: type=1400 audit(2000000387.455:2439): avc:  denied  { search } for  pid=11439 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  201.990428][   T44] audit: type=1400 audit(2000000387.455:2440): avc:  denied  { search } for  pid=11439 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  202.170038][T11453] FAULT_INJECTION: forcing a failure.
[  202.170038][T11453] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  202.170069][T11453] CPU: 2 UID: 0 PID: 11453 Comm: syz.7.1852 Not tainted syzkaller #0 PREEMPT(full) 
[  202.170089][T11453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  202.170100][T11453] Call Trace:
[  202.170107][T11453]  <TASK>
[  202.170114][T11453]  dump_stack_lvl+0x100/0x190
[  202.170145][T11453]  should_fail_ex.cold+0x5/0xa
[  202.170172][T11453]  ? prepare_alloc_pages+0x16d/0x5b0
[  202.170201][T11453]  should_fail_alloc_page+0xeb/0x140
[  202.170229][T11453]  prepare_alloc_pages+0x1f0/0x5b0
[  202.170278][T11453]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[  202.170304][T11453]  ? lock_acquire+0x1d1/0x380
[  202.170324][T11453]  ? is_bpf_text_address+0x25/0x1a0
[  202.170352][T11453]  ? find_held_lock+0x2b/0x80
[  202.170378][T11453]  ? is_bpf_text_address+0x8a/0x1a0
[  202.170403][T11453]  ? is_bpf_text_address+0x8a/0x1a0
[  202.170428][T11453]  ? bpf_ksym_find+0x128/0x1c0
[  202.170446][T11453]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  202.170466][T11453]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  202.170487][T11453]  ? is_bpf_text_address+0x94/0x1a0
[  202.170514][T11453]  ? __kernel_text_address+0xd/0x30
[  202.170532][T11453]  ? unwind_get_return_address+0x59/0xa0
[  202.170558][T11453]  ? arch_stack_walk+0xa6/0xf0
[  202.170592][T11453]  ? __pfx_stack_trace_save+0x10/0x10
[  202.170611][T11453]  ? stack_depot_save_flags+0x27/0x9f0
[  202.170632][T11453]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  202.170656][T11453]  ? policy_nodemask+0xed/0x4f0
[  202.170685][T11453]  alloc_pages_mpol+0x201/0x550
[  202.170713][T11453]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  202.170747][T11453]  alloc_pages_noprof+0x1a/0x160
[  202.170768][T11453]  get_free_pages_noprof+0x10/0xb0
[  202.170792][T11453]  __kasan_populate_vmalloc+0xa0/0x210
[  202.170821][T11453]  alloc_vmap_area+0x95d/0x2bb0
[  202.170852][T11453]  ? kasan_save_track+0x14/0x30
[  202.170876][T11453]  ? __kasan_kmalloc+0xaa/0xb0
[  202.170899][T11453]  ? __pfx_alloc_vmap_area+0x10/0x10
[  202.170924][T11453]  ? __pfx_stack_trace_save+0x10/0x10
[  202.170942][T11453]  ? __get_vm_area_node+0x124/0x350
[  202.170971][T11453]  __get_vm_area_node+0x1ed/0x350
[  202.171001][T11453]  __vmalloc_node_range_noprof+0x268/0x1420
[  202.171029][T11453]  ? bpf_check+0x1996/0xac70
[  202.171063][T11453]  ? bpf_check+0x1996/0xac70
[  202.171093][T11453]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  202.171125][T11453]  ? avc_has_perm_noaudit+0x145/0x470
[  202.171147][T11453]  ? bpf_check+0x1996/0xac70
[  202.171176][T11453]  __vmalloc_node_noprof+0xad/0xf0
[  202.171202][T11453]  ? bpf_check+0x1996/0xac70
[  202.171230][T11453]  __vmalloc_noprof+0xa3/0x120
[  202.171258][T11453]  ? __pfx___vmalloc_noprof+0x10/0x10
[  202.171289][T11453]  ? bpf_lsm_bpf_prog_load+0x9/0x10
[  202.171307][T11453]  ? security_bpf_prog_load+0x10f/0x2f0
[  202.171335][T11453]  bpf_check+0x1996/0xac70
[  202.171361][T11453]  ? __css_rstat_updated+0x1ce/0x590
[  202.171385][T11453]  ? __lock_acquire+0x5c0/0x1f40
[  202.171406][T11453]  ? __pfx___css_rstat_updated+0x10/0x10
[  202.171442][T11453]  ? find_held_lock+0x2b/0x80
[  202.171471][T11453]  ? __pfx_bpf_check+0x10/0x10
[  202.171497][T11453]  ? lock_acquire+0x1d1/0x380
[  202.171533][T11453]  ? bpf_prog_load+0x1a27/0x2ab0
[  202.171560][T11453]  ? find_held_lock+0x2b/0x80
[  202.171585][T11453]  ? bpf_prog_load+0x1a27/0x2ab0
[  202.171614][T11453]  ? __asan_memset+0x23/0x50
[  202.171641][T11453]  ? bpf_prog_load+0x1ae1/0x2ab0
[  202.171665][T11453]  bpf_prog_load+0x1ae1/0x2ab0
[  202.171697][T11453]  ? __pfx_bpf_prog_load+0x10/0x10
[  202.171744][T11453]  __sys_bpf+0x1f46/0x4a30
[  202.171770][T11453]  ? __pfx___sys_bpf+0x10/0x10
[  202.171790][T11453]  ? find_held_lock+0x2b/0x80
[  202.171816][T11453]  ? get_pid_task+0xfc/0x250
[  202.171839][T11453]  ? get_pid_task+0xfc/0x250
[  202.171871][T11453]  ? find_held_lock+0x2b/0x80
[  202.171903][T11453]  ? rcu_read_lock_any_held+0x6a/0x90
[  202.171920][T11453]  ? find_held_lock+0x2b/0x80
[  202.171945][T11453]  ? ksys_write+0x190/0x250
[  202.171967][T11453]  ? ksys_write+0x190/0x250
[  202.171988][T11453]  ? lock_acquire+0x1d1/0x380
[  202.172045][T11453]  ? fput+0x7c/0x100
[  202.172073][T11453]  ? ksys_write+0x1ac/0x250
[  202.172098][T11453]  ? __x64_sys_bpf+0xce/0x140
[  202.172117][T11453]  __x64_sys_bpf+0xce/0x140
[  202.172137][T11453]  ? do_syscall_64+0xae/0x790
[  202.172169][T11453]  do_syscall_64+0x123/0x790
[  202.172196][T11453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.172215][T11453] RIP: 0033:0x7f062299e1d9
[  202.172230][T11453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  202.172248][T11453] RSP: 002b:00007f06238fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  202.172266][T11453] RAX: ffffffffffffffda RBX: 00007f0622c25fa0 RCX: 00007f062299e1d9
[  202.172278][T11453] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005
[  202.172290][T11453] RBP: 00007f06238fa090 R08: 0000000000000000 R09: 0000000000000000
[  202.172301][T11453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  202.172312][T11453] R13: 00007f0622c26038 R14: 00007f0622c25fa0 R15: 00007ffca9cb7dc8
[  202.172337][T11453]  </TASK>
[  202.179867][T11453] syz.7.1852: vmalloc error: size 5440, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  202.179923][T11453] CPU: 2 UID: 0 PID: 11453 Comm: syz.7.1852 Not tainted syzkaller #0 PREEMPT(full) 
[  202.179945][T11453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  202.179955][T11453] Call Trace:
[  202.179962][T11453]  <TASK>
[  202.179969][T11453]  dump_stack_lvl+0x100/0x190
[  202.179999][T11453]  warn_alloc.cold+0x9e/0xb2
[  202.180041][T11453]  ? __pfx_warn_alloc+0x10/0x10
[  202.180063][T11453]  ? lockdep_hardirqs_on+0x7d/0x110
[  202.180091][T11453]  ? __get_vm_area_node+0x2f0/0x350
[  202.180122][T11453]  ? __get_vm_area_node+0x22b/0x350
[  202.180153][T11453]  __vmalloc_node_range_noprof+0xfa2/0x1420
[  202.180195][T11453]  ? bpf_check+0x1996/0xac70
[  202.180226][T11453]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  202.180259][T11453]  ? avc_has_perm_noaudit+0x145/0x470
[  202.180295][T11453]  ? bpf_check+0x1996/0xac70
[  202.180322][T11453]  __vmalloc_node_noprof+0xad/0xf0
[  202.180349][T11453]  ? bpf_check+0x1996/0xac70
[  202.180378][T11453]  __vmalloc_noprof+0xa3/0x120
[  202.180404][T11453]  ? __pfx___vmalloc_noprof+0x10/0x10
[  202.180435][T11453]  ? bpf_lsm_bpf_prog_load+0x9/0x10
[  202.180453][T11453]  ? security_bpf_prog_load+0x10f/0x2f0
[  202.180482][T11453]  bpf_check+0x1996/0xac70
[  202.180508][T11453]  ? __css_rstat_updated+0x1ce/0x590
[  202.180531][T11453]  ? __lock_acquire+0x5c0/0x1f40
[  202.180553][T11453]  ? __pfx___css_rstat_updated+0x10/0x10
[  202.180588][T11453]  ? find_held_lock+0x2b/0x80
[  202.180617][T11453]  ? __pfx_bpf_check+0x10/0x10
[  202.180643][T11453]  ? lock_acquire+0x1d1/0x380
[  202.180662][T11453]  ? bpf_prog_load+0x1a27/0x2ab0
[  202.180702][T11453]  ? find_held_lock+0x2b/0x80
[  202.180728][T11453]  ? bpf_prog_load+0x1a27/0x2ab0
[  202.180758][T11453]  ? __asan_memset+0x23/0x50
[  202.180783][T11453]  ? bpf_prog_load+0x1ae1/0x2ab0
[  202.180809][T11453]  bpf_prog_load+0x1ae1/0x2ab0
[  202.180840][T11453]  ? __pfx_bpf_prog_load+0x10/0x10
[  202.180888][T11453]  __sys_bpf+0x1f46/0x4a30
[  202.180915][T11453]  ? __pfx___sys_bpf+0x10/0x10
[  202.180934][T11453]  ? find_held_lock+0x2b/0x80
[  202.180960][T11453]  ? get_pid_task+0xfc/0x250
[  202.180984][T11453]  ? get_pid_task+0xfc/0x250
[  202.181015][T11453]  ? find_held_lock+0x2b/0x80
[  202.181047][T11453]  ? rcu_read_lock_any_held+0x6a/0x90
[  202.181064][T11453]  ? find_held_lock+0x2b/0x80
[  202.181090][T11453]  ? ksys_write+0x190/0x250
[  202.181110][T11453]  ? ksys_write+0x190/0x250
[  202.181131][T11453]  ? lock_acquire+0x1d1/0x380
[  202.181173][T11453]  ? fput+0x7c/0x100
[  202.181198][T11453]  ? ksys_write+0x1ac/0x250
[  202.181223][T11453]  ? __x64_sys_bpf+0xce/0x140
[  202.181241][T11453]  __x64_sys_bpf+0xce/0x140
[  202.181263][T11453]  ? do_syscall_64+0xae/0x790
[  202.181290][T11453]  do_syscall_64+0x123/0x790
[  202.181317][T11453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.181336][T11453] RIP: 0033:0x7f062299e1d9
[  202.181352][T11453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  202.181369][T11453] RSP: 002b:00007f06238fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  202.181386][T11453] RAX: ffffffffffffffda RBX: 00007f0622c25fa0 RCX: 00007f062299e1d9
[  202.181397][T11453] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005
[  202.181408][T11453] RBP: 00007f06238fa090 R08: 0000000000000000 R09: 0000000000000000
[  202.181419][T11453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  202.181430][T11453] R13: 00007f0622c26038 R14: 00007f0622c25fa0 R15: 00007ffca9cb7dc8
[  202.181454][T11453]  </TASK>
[  202.184505][T11453] Mem-Info:
[  202.184515][T11453] active_anon:10502 inactive_anon:24 isolated_anon:0
[  202.184515][T11453]  active_file:788 inactive_file:58150 isolated_file:0
[  202.184515][T11453]  unevictable:1000 dirty:362 writeback:0
[  202.184515][T11453]  slab_reclaimable:7993 slab_unreclaimable:77899
[  202.184515][T11453]  mapped:25631 shmem:1578 pagetables:1757
[  202.184515][T11453]  sec_pagetables:299 bounce:0
[  202.184515][T11453]  kernel_misc_reclaimable:0
[  202.184515][T11453]  free:425602 free_pcp:12389 free_cma:0
[  202.184558][T11453] Node 0 active_anon:42008kB inactive_anon:96kB active_file:3152kB inactive_file:232396kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:90236kB dirty:1448kB writeback:0kB shmem:4312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15424kB pagetables:6820kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  202.184604][T11453] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:12288kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  202.185598][T11453] Node 0 DMA free:11088kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:136kB local_pcp:104kB free_cma:0kB
[  202.185648][T11453] lowmem_reserve[]: 0 1204 1204 1204 1204
[  202.185679][T11453] Node 0 DMA32 free:84564kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:42008kB inactive_anon:96kB active_file:3152kB inactive_file:232396kB unevictable:2000kB writepending:1448kB zspages:184kB present:2080628kB managed:1233668kB mlocked:0kB bounce:0kB free_pcp:30820kB local_pcp:18228kB free_cma:0kB
[  202.185728][T11453] lowmem_reserve[]: 0 0 0 0 0
[  202.185757][T11453] Node 1 Normal free:1606756kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:18560kB local_pcp:6144kB free_cma:0kB
[  202.185805][T11453] lowmem_reserve[]: 0 0 0 0 0
[  202.185833][T11453] Node 0 DMA: 0*4kB 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 3*128kB (UM) 1*256kB (U) 2*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 0*4096kB = 11088kB
[  202.187054][T11453] Node 0 DMA32: 203*4kB (UME) 65*8kB (UME) 150*16kB (UME) 157*32kB (UME) 105*64kB (UME) 49*128kB (UME) 45*256kB (UME) 24*512kB (UME) 10*1024kB (M) 8*2048kB (UM) 3*4096kB (M) = 84468kB
[  202.187284][T11453] Node 1 Normal: 1*4kB (M) 2*8kB (UE) 3*16kB (UM) 7*32kB (UE) 3*64kB (U) 5*128kB (UM) 2*256kB (UE) 3*512kB (U) 2*1024kB (UE) 0*2048kB 391*4096kB (UM) = 1606756kB
[  202.187407][T11453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  202.187422][T11453] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  202.187435][T11453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  202.187448][T11453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  202.187461][T11453] 60545 total pagecache pages
[  202.187468][T11453] 2 pages in swap cache
[  202.187474][T11453] Free swap  = 124864kB
[  202.187480][T11453] Total swap = 124996kB
[  202.187487][T11453] 1048443 pages RAM
[  202.187493][T11453] 0 pages HighMem/MovableOnly
[  202.187499][T11453] 290716 pages reserved
[  202.187505][T11453] 0 pages cma reserved
[  202.461734][T11461] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  202.468739][   T44] kauditd_printk_skb: 449 callbacks suppressed
[  202.468755][   T44] audit: type=1400 audit(2000000387.945:2890): avc:  denied  { search } for  pid=11462 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  202.470725][   T44] audit: type=1400 audit(2000000387.945:2891): avc:  denied  { search } for  pid=11462 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  202.470769][   T44] audit: type=1400 audit(2000000387.945:2892): avc:  denied  { search } for  pid=11462 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  202.475251][   T44] audit: type=1400 audit(2000000387.955:2893): avc:  denied  { search } for  pid=11462 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  202.475582][   T44] audit: type=1400 audit(2000000387.955:2894): avc:  denied  { search } for  pid=11462 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  202.477426][   T44] audit: type=1400 audit(2000000387.955:2895): avc:  denied  { search } for  pid=11462 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  202.478150][   T44] audit: type=1400 audit(2000000387.955:2896): avc:  denied  { search } for  pid=11462 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  202.478410][   T44] audit: type=1400 audit(2000000387.955:2897): avc:  denied  { search } for  pid=11462 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  202.478725][   T44] audit: type=1400 audit(2000000387.955:2898): avc:  denied  { search } for  pid=11462 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  202.479103][   T44] audit: type=1400 audit(2000000387.955:2899): avc:  denied  { search } for  pid=11462 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  202.663975][T11475] sctp: [Deprecated]: syz.8.1859 (pid 11475) Use of struct sctp_assoc_value in delayed_ack socket option.
[  202.663975][T11475] Use struct sctp_sack_info instead
[  202.947781][T11494] netlink: 'syz.5.1865': attribute type 34 has an invalid length.
[  202.947801][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1865'.
[  203.087340][T11506] FAULT_INJECTION: forcing a failure.
[  203.087340][T11506] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  203.087360][T11506] CPU: 0 UID: 0 PID: 11506 Comm: syz.5.1869 Not tainted syzkaller #0 PREEMPT(full) 
[  203.087373][T11506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  203.087380][T11506] Call Trace:
[  203.087385][T11506]  <TASK>
[  203.087390][T11506]  dump_stack_lvl+0x100/0x190
[  203.087410][T11506]  should_fail_ex.cold+0x5/0xa
[  203.087426][T11506]  _copy_to_user+0x32/0xd0
[  203.087444][T11506]  simple_read_from_buffer+0xcb/0x170
[  203.087462][T11506]  proc_fail_nth_read+0x1af/0x230
[  203.087480][T11506]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  203.087498][T11506]  ? rw_verify_area+0xce/0x6d0
[  203.087510][T11506]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  203.087527][T11506]  vfs_read+0x1e4/0xb40
[  203.087554][T11506]  ? lock_acquire+0x1d1/0x380
[  203.087568][T11506]  ? __fget_files+0x34/0x3d0
[  203.087584][T11506]  ? __pfx_vfs_read+0x10/0x10
[  203.087596][T11506]  ? find_held_lock+0x2b/0x80
[  203.087613][T11506]  ? __fget_files+0x215/0x3d0
[  203.087632][T11506]  ? __fget_files+0x21f/0x3d0
[  203.087652][T11506]  ksys_read+0x12a/0x250
[  203.087666][T11506]  ? __pfx_ksys_read+0x10/0x10
[  203.087684][T11506]  do_syscall_64+0x123/0x790
[  203.087702][T11506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.087713][T11506] RIP: 0033:0x7f833295ea0e
[  203.087723][T11506] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  203.087734][T11506] RSP: 002b:00007f83337f8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  203.087745][T11506] RAX: ffffffffffffffda RBX: 00007f83337f96c0 RCX: 00007f833295ea0e
[  203.087752][T11506] RDX: 000000000000000f RSI: 00007f83337f90a0 RDI: 0000000000000004
[  203.087759][T11506] RBP: 00007f83337f9090 R08: 0000000000000000 R09: 0000000000000000
[  203.087766][T11506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  203.087772][T11506] R13: 00007f8332c26038 R14: 00007f8332c25fa0 R15: 00007ffc955bbe28
[  203.087787][T11506]  </TASK>
[  203.297020][T11482] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input13
[  203.368002][T11524] netlink: 'syz.9.1874': attribute type 34 has an invalid length.
[  203.368044][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1874'.
[  203.531295][   T25] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  203.683886][   T25] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  203.684907][   T25] usb 10-1: config 1 has an invalid interface number: 3 but max is 0
[  203.684927][   T25] usb 10-1: config 1 has no interface number 0
[  203.687017][   T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.687037][   T25] usb 10-1: Product: syz
[  203.687052][   T25] usb 10-1: Manufacturer: syz
[  203.687066][   T25] usb 10-1: SerialNumber: syz
[  203.710499][   T25] usb 10-1: 3:1 : does not exist
[  203.710521][   T25] usb 10-1: 3:2 : does not exist
[  203.836450][T11561] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  203.899732][T11515] netlink: 'syz.5.1871': attribute type 1 has an invalid length.
[  204.217085][T11557] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input14
[  204.360999][T11606] netlink: 'syz.7.1907': attribute type 34 has an invalid length.
[  204.361023][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1907'.
[  204.465917][T11613] FAULT_INJECTION: forcing a failure.
[  204.465917][T11613] name failslab, interval 1, probability 0, space 0, times 0
[  204.465950][T11613] CPU: 2 UID: 0 PID: 11613 Comm: syz.7.1910 Not tainted syzkaller #0 PREEMPT(full) 
[  204.465973][T11613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  204.465985][T11613] Call Trace:
[  204.465993][T11613]  <TASK>
[  204.466000][T11613]  dump_stack_lvl+0x100/0x190
[  204.466035][T11613]  should_fail_ex.cold+0x5/0xa
[  204.466065][T11613]  should_failslab+0xc2/0x120
[  204.466096][T11613]  kmem_cache_alloc_noprof+0x92/0x6a0
[  204.466122][T11613]  ? do_getname+0x35/0x390
[  204.466147][T11613]  do_getname+0x35/0x390
[  204.466169][T11613]  __x64_sys_mkdirat+0x78/0xc0
[  204.466199][T11613]  do_syscall_64+0x123/0x790
[  204.466230][T11613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.466249][T11613] RIP: 0033:0x7f062299e1d9
[  204.466271][T11613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.466290][T11613] RSP: 002b:00007f06238fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  204.466308][T11613] RAX: ffffffffffffffda RBX: 00007f0622c25fa0 RCX: 00007f062299e1d9
[  204.466320][T11613] RDX: 00000000000001ff RSI: 0000200000000200 RDI: ffffffffffffff9c
[  204.466330][T11613] RBP: 00007f0622a35888 R08: 0000000000000000 R09: 0000000000000000
[  204.466341][T11613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.466350][T11613] R13: 00007f0622c26038 R14: 00007f0622c25fa0 R15: 00007ffca9cb7dc8
[  204.466376][T11613]  </TASK>
[  204.791181][ T5810] usb 13-1: new high-speed USB device number 8 using dummy_hcd
[  204.941038][ T5810] usb 13-1: Using ep0 maxpacket: 16
[  204.941493][ T5810] usb 13-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  204.942292][ T5810] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  204.942308][ T5810] usb 13-1: config 0 interface 0 has no altsetting 0
[  204.943805][ T5810] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.943822][ T5810] usb 13-1: Product: syz
[  204.943834][ T5810] usb 13-1: Manufacturer: syz
[  204.943848][ T5810] usb 13-1: SerialNumber: syz
[  204.945204][ T5810] usb 13-1: config 0 descriptor??
[  205.158492][ T5810] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input16
[  205.159583][T11625] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input15
[  205.267477][T11634] netlink: 'syz.7.1918': attribute type 34 has an invalid length.
[  205.267496][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1918'.
[  205.369018][T11645] batadv0: entered allmulticast mode
[  205.418577][T11648] FAULT_INJECTION: forcing a failure.
[  205.418577][T11648] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  205.418609][T11648] CPU: 0 UID: 0 PID: 11648 Comm: syz.9.1922 Not tainted syzkaller #0 PREEMPT(full) 
[  205.418631][T11648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  205.418642][T11648] Call Trace:
[  205.418649][T11648]  <TASK>
[  205.418656][T11648]  dump_stack_lvl+0x100/0x190
[  205.418689][T11648]  should_fail_ex.cold+0x5/0xa
[  205.418711][T11648]  ? prepare_alloc_pages+0x16d/0x5b0
[  205.418741][T11648]  should_fail_alloc_page+0xeb/0x140
[  205.418771][T11648]  prepare_alloc_pages+0x1f0/0x5b0
[  205.418797][T11648]  ? lock_release+0x24d/0x310
[  205.418817][T11648]  ? bpf_ksym_find+0x128/0x1c0
[  205.418838][T11648]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[  205.418864][T11648]  ? __kernel_text_address+0xd/0x30
[  205.418883][T11648]  ? unwind_get_return_address+0x59/0xa0
[  205.418910][T11648]  ? arch_stack_walk+0xa6/0xf0
[  205.418944][T11648]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  205.418968][T11648]  ? __pfx_stack_trace_save+0x10/0x10
[  205.418994][T11648]  ? check_noncircular+0x97/0x160
[  205.419018][T11648]  ? add_lock_to_list+0x9d/0x1d0
[  205.419041][T11648]  ? check_prev_add+0x354/0xe60
[  205.419061][T11648]  ? __css_rstat_updated+0x1ce/0x590
[  205.419089][T11648]  ? __lock_acquire+0xe8b/0x1f40
[  205.419115][T11648]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  205.419141][T11648]  ? policy_nodemask+0xed/0x4f0
[  205.419178][T11648]  alloc_pages_mpol+0x201/0x550
[  205.419207][T11648]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  205.419235][T11648]  ? find_held_lock+0x2b/0x80
[  205.419261][T11648]  ? __pud_alloc+0x4f6/0x690
[  205.419307][T11648]  ? __pud_alloc+0x4f6/0x690
[  205.419335][T11648]  alloc_pages_noprof+0x1a/0x160
[  205.419355][T11648]  __pmd_alloc+0x3b/0x950
[  205.419379][T11648]  ? __pud_alloc+0x4fb/0x690
[  205.419407][T11648]  __handle_mm_fault+0xa9d/0x2f60
[  205.419431][T11648]  ? __pfx___handle_mm_fault+0x10/0x10
[  205.419447][T11648]  ? __pfx_mt_find+0x10/0x10
[  205.419492][T11648]  ? find_vma+0xbf/0x140
[  205.419514][T11648]  ? __pfx_find_vma+0x10/0x10
[  205.419540][T11648]  handle_mm_fault+0x363/0xa20
[  205.419565][T11648]  do_user_addr_fault+0x745/0x12f0
[  205.419597][T11648]  exc_page_fault+0x6f/0xd0
[  205.419623][T11648]  asm_exc_page_fault+0x26/0x30
[  205.419642][T11648] RIP: 0010:_copy_from_user+0x93/0xd0
[  205.419667][T11648] Code: c1 df fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 f9 08 54 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 <f3> a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 05 bc
[  205.419685][T11648] RSP: 0018:ffffc90003b1fd00 EFLAGS: 00050293
[  205.419702][T11648] RAX: 0000000000000001 RBX: 0000200000000100 RCX: 0000000000000005
[  205.419713][T11648] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffff88802728f9a0
[  205.419725][T11648] RBP: 0000000000000005 R08: 0000000000000001 R09: ffffed1004e51f34
[  205.419737][T11648] R10: 0000000000000004 R11: 0000000000000001 R12: 0000000000000000
[  205.419747][T11648] R13: ffff88802728f9a0 R14: ffff88802df49800 R15: ffff88802df49eb0
[  205.419776][T11648]  rxrpc_server_keyring+0x1bd/0x260
[  205.419810][T11648]  rxrpc_setsockopt+0x56f/0x820
[  205.419839][T11648]  ? __pfx_rxrpc_setsockopt+0x10/0x10
[  205.419865][T11648]  ? __fget_files+0x215/0x3d0
[  205.419895][T11648]  ? selinux_socket_setsockopt+0x6a/0x80
[  205.419921][T11648]  ? __pfx_rxrpc_setsockopt+0x10/0x10
[  205.419949][T11648]  do_sock_setsockopt+0xf3/0x1d0
[  205.419975][T11648]  __sys_setsockopt+0x195/0x220
[  205.419999][T11648]  __x64_sys_setsockopt+0xbd/0x160
[  205.420042][T11648]  ? do_syscall_64+0xae/0x790
[  205.420068][T11648]  ? lockdep_hardirqs_on+0x7d/0x110
[  205.420094][T11648]  do_syscall_64+0x123/0x790
[  205.420123][T11648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.420142][T11648] RIP: 0033:0x7fc1d899e1d9
[  205.420164][T11648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.420181][T11648] RSP: 002b:00007fc1d97dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  205.420198][T11648] RAX: ffffffffffffffda RBX: 00007fc1d8c25fa0 RCX: 00007fc1d899e1d9
[  205.420210][T11648] RDX: 0000000000000002 RSI: 0000000000000110 RDI: 0000000000000003
[  205.420221][T11648] RBP: 00007fc1d97dc090 R08: 0000000000000005 R09: 0000000000000000
[  205.420232][T11648] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  205.420243][T11648] R13: 00007fc1d8c26038 R14: 00007fc1d8c25fa0 R15: 00007ffd58b99018
[  205.420267][T11648]  </TASK>
[  205.430735][ T5810] rc_core: IR keymap rc-imon-pad not found
[  205.430745][ T5810] Registered IR keymap rc-empty
[  205.430828][ T5810] imon 13-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  205.430838][ T5810] imon 13-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  205.510476][T11652] Bluetooth: hci0: unsupported parameter 255
[  205.510497][T11652] Bluetooth: hci0: unsupported parameter 255
[  205.588086][ T5810] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0
[  205.591880][ T5810] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input17
[  205.599941][ T5810] imon 13-1:0.0: iMON device (15c2:0041, intf0) on usb<13:8> initialized
[  205.755626][T11617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.756031][T11617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.905524][T11679] Bluetooth: hci0: unsupported parameter 255
[  205.905544][T11679] Bluetooth: hci0: unsupported parameter 255
[  206.303218][T11689] netlink: 700 bytes leftover after parsing attributes in process `syz.7.1938'.
[  206.377297][   T25] usb 10-1: USB disconnect, device number 12
[  206.472140][T11694] binder: 11693:11694 ioctl c0306201 200000000240 returned -14
[  206.519071][T11694] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  206.544031][T11694] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1940'.
[  206.604261][T11699] Bluetooth: hci0: unsupported parameter 255
[  206.604283][T11699] Bluetooth: hci0: unsupported parameter 255
[  206.829400][T11709] comedi comedi0: lab-pc-1200: a I/O base address must be specified
[  206.962583][T11718] netlink: 260 bytes leftover after parsing attributes in process `syz.9.1951'.
[  206.962646][T11718] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1951'.
[  206.963829][T11718] IPv6: Can't replace route, no match found
[  206.985396][ T5738] Bluetooth: hci0: unexpected event for opcode 0x0c05
[  207.280050][T11720] netlink: 'syz.5.1952': attribute type 2 has an invalid length.
[  207.282863][T11720] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  207.285166][T11720] qnx6: wrong signature (magic) in superblock #1.
[  207.285178][T11720] qnx6: unable to read the first superblock
[  207.288241][T11720] loop2: detected capacity change from 0 to 2640
[  207.289935][T11720] Buffer I/O error on dev loop2, logical block 0, async page read
[  207.289976][T11720] Buffer I/O error on dev loop2, logical block 0, async page read
[  207.290001][T11720] Buffer I/O error on dev loop2, logical block 0, async page read
[  207.290025][T11720] Buffer I/O error on dev loop2, logical block 0, async page read
[  207.290049][T11720] Buffer I/O error on dev loop2, logical block 0, async page read
[  207.290094][T11720] Buffer I/O error on dev loop2, logical block 0, async page read
[  207.290130][T11720] Buffer I/O error on dev loop2, logical block 0, async page read
[  207.290155][T11720] Buffer I/O error on dev loop2, logical block 0, async page read
[  207.290169][T11720] ldm_validate_partition_table(): Disk read failed.
[  207.290190][T11720] Buffer I/O error on dev loop2, logical block 0, async page read
[  207.290215][T11720] Buffer I/O error on dev loop2, logical block 0, async page read
[  207.290253][T11720] Dev loop2: unable to read RDB block 0
[  207.290384][T11720]  loop2: unable to read partition table
[  207.290514][T11720] loop_reread_partitions: partition scan of loop2 (3Ÿ¾‚³˜) failed (rc=-5)
[  207.570802][    C1] imon 13-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  207.571045][ T5831] usb 13-1: USB disconnect, device number 8
[  207.604467][   T44] kauditd_printk_skb: 2041 callbacks suppressed
[  207.604484][   T44] audit: type=1400 audit(2000000393.083:4941): avc:  denied  { search } for  pid=5127 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  207.612696][T11723] Bluetooth: hci0: invalid length 0, exp 2 for type 14
[  208.009564][ T1044] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  208.165764][T11738] FAULT_INJECTION: forcing a failure.
[  208.165764][T11738] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  208.165795][T11738] CPU: 2 UID: 0 PID: 11738 Comm: syz.9.1960 Not tainted syzkaller #0 PREEMPT(full) 
[  208.165817][T11738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  208.165828][T11738] Call Trace:
[  208.165836][T11738]  <TASK>
[  208.165844][T11738]  dump_stack_lvl+0x100/0x190
[  208.165890][T11738]  should_fail_ex.cold+0x5/0xa
[  208.165913][T11738]  ? prepare_alloc_pages+0x16d/0x5b0
[  208.165949][T11738]  should_fail_alloc_page+0xeb/0x140
[  208.165980][T11738]  prepare_alloc_pages+0x1f0/0x5b0
[  208.166011][T11738]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[  208.166039][T11738]  ? __lock_acquire+0x5c0/0x1f40
[  208.166069][T11738]  ? do_raw_spin_unlock+0x145/0x1e0
[  208.166097][T11738]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  208.166129][T11738]  ? rcu_is_watching+0x13/0xc0
[  208.166158][T11738]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  208.166182][T11738]  ? hrtimer_start_range_ns_common+0x778/0x16f0
[  208.166218][T11738]  ? find_held_lock+0x2b/0x80
[  208.166246][T11738]  ? finish_task_switch.isra.0+0x2bd/0x10d0
[  208.166270][T11738]  ? finish_task_switch.isra.0+0x2bd/0x10d0
[  208.166295][T11738]  ? rcu_is_watching+0x13/0xc0
[  208.166323][T11738]  ? finish_task_switch.isra.0+0x2c2/0x10d0
[  208.166348][T11738]  ? rcu_is_watching+0x13/0xc0
[  208.166375][T11738]  ? trace_sched_exit_tp+0x120/0x160
[  208.166401][T11738]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  208.166427][T11738]  ? policy_nodemask+0xed/0x4f0
[  208.166457][T11738]  alloc_pages_mpol+0x201/0x550
[  208.166488][T11738]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  208.166520][T11738]  ? lock_acquire+0x1d1/0x380
[  208.166544][T11738]  folio_alloc_mpol_noprof+0x36/0x260
[  208.166565][T11738]  vma_alloc_folio_noprof+0xed/0x1d0
[  208.166586][T11738]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  208.166605][T11738]  ? rcu_read_unlock+0x2d/0xb0
[  208.166624][T11738]  ? rcu_read_unlock+0x2d/0xb0
[  208.166649][T11738]  do_wp_page+0x1b15/0x45c0
[  208.166682][T11738]  ? lock_acquire+0x1d1/0x380
[  208.166703][T11738]  ? __pfx_do_wp_page+0x10/0x10
[  208.166732][T11738]  ? do_raw_spin_lock+0x128/0x260
[  208.166758][T11738]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  208.166791][T11738]  __handle_mm_fault+0x1cd2/0x2f60
[  208.166814][T11738]  ? lock_vma_under_rcu+0x11d/0x590
[  208.166843][T11738]  ? __pfx___handle_mm_fault+0x10/0x10
[  208.166867][T11738]  ? lock_vma_under_rcu+0x17c/0x590
[  208.166913][T11738]  handle_mm_fault+0x363/0xa20
[  208.166937][T11738]  do_user_addr_fault+0x59c/0x12f0
[  208.166972][T11738]  exc_page_fault+0x6f/0xd0
[  208.166999][T11738]  asm_exc_page_fault+0x26/0x30
[  208.167018][T11738] RIP: 0033:0x7fc1d895dfc5
[  208.167033][T11738] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 <f0> 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00
[  208.167051][T11738] RSP: 002b:00007fc1d97dade0 EFLAGS: 00010293
[  208.167072][T11738] RAX: 0000000000000008 RBX: 00007fc1d9757e20 RCX: 0000000000000000
[  208.167084][T11738] RDX: 0000000000000000 RSI: 00007fc1d8a32fb8 RDI: 00007fc1d9757e20
[  208.167096][T11738] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005
[  208.167108][T11738] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc1d8a52df3
[  208.167121][T11738] R13: ffffffffffffffe8 R14: 0000000000000058 R15: 00007fc1d8a32fb8
[  208.167148][T11738]  </TASK>
[  208.167355][T11738] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  208.186467][ T1044] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  208.230643][ T1044] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.230670][ T1044] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.230689][ T1044] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  208.230722][ T1044] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.316365][T11749] Bluetooth: hci0: invalid length 0, exp 2 for type 14
[  208.346829][ T1044] usb 12-1: config 0 descriptor??
[  208.367669][T11752] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  208.757947][T11768] Bluetooth: hci0: invalid length 0, exp 2 for type 14
[  208.758971][ T1044] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd
[  208.796688][ T1044] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  209.016605][  T853] usb 12-1: USB disconnect, device number 3
[  209.627323][T11791] CIFS: Attempting to mount //127.0.0.1/share
[  209.627686][T11791] CIFS: VFS: Error connecting to socket. Aborting operation.
[  209.627712][T11791] CIFS: VFS: cifs_mount failed w/return code = -101
[  210.597711][   T44] audit: type=1400 audit(2000000396.074:4942): avc:  denied  { setopt } for  pid=11804 comm="syz.7.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  210.599217][   T44] audit: type=1400 audit(2000000396.084:4943): avc:  denied  { ioctl } for  pid=11804 comm="syz.7.1985" path="socket:[52239]" dev="sockfs" ino=52239 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  210.606030][   T44] audit: type=1400 audit(2000000396.084:4944): avc:  denied  { watch } for  pid=11804 comm="syz.7.1985" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=3133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  211.904589][T11778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  211.976429][T11820] ip6erspan0: entered allmulticast mode
[  212.127782][T11833] ALSA: seq fatal error: cannot create timer (-19)
[  212.666054][T11857] FAULT_INJECTION: forcing a failure.
[  212.666054][T11857] name failslab, interval 1, probability 0, space 0, times 0
[  212.666082][T11857] CPU: 1 UID: 0 PID: 11857 Comm: syz.7.2003 Not tainted syzkaller #0 PREEMPT(full) 
[  212.666102][T11857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  212.666114][T11857] Call Trace:
[  212.666122][T11857]  <TASK>
[  212.666130][T11857]  dump_stack_lvl+0x100/0x190
[  212.666162][T11857]  should_fail_ex.cold+0x5/0xa
[  212.666190][T11857]  should_failslab+0xc2/0x120
[  212.666218][T11857]  kmem_cache_alloc_noprof+0x92/0x6a0
[  212.666243][T11857]  ? skb_clone+0x190/0x400
[  212.666278][T11857]  skb_clone+0x190/0x400
[  212.666297][T11857]  nfnetlink_rcv_batch+0x1c8/0x2880
[  212.666323][T11857]  ? kmem_cache_free+0x127/0x6c0
[  212.666347][T11857]  ? __lock_acquire+0x5c0/0x1f40
[  212.666374][T11857]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  212.666400][T11857]  ? lock_acquire+0x1d1/0x380
[  212.666421][T11857]  ? avc_has_perm_noaudit+0x56/0x470
[  212.666452][T11857]  ? avc_has_perm_noaudit+0x145/0x470
[  212.666474][T11857]  ? __asan_memset+0x23/0x50
[  212.666496][T11857]  ? __nla_validate_parse+0x1e7/0x28b0
[  212.666527][T11857]  ? __pfx___nla_validate_parse+0x10/0x10
[  212.666550][T11857]  ? rcu_is_watching+0x13/0xc0
[  212.666577][T11857]  ? cap_capable+0x107/0x430
[  212.666610][T11857]  ? __nla_parse+0x40/0x60
[  212.666636][T11857]  nfnetlink_rcv+0x3bd/0x440
[  212.666657][T11857]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  212.666686][T11857]  netlink_unicast+0x585/0x850
[  212.666719][T11857]  ? __pfx_netlink_unicast+0x10/0x10
[  212.666754][T11857]  netlink_sendmsg+0x8b0/0xda0
[  212.666786][T11857]  ? __pfx_netlink_sendmsg+0x10/0x10
[  212.666816][T11857]  ? selinux_socket_sendmsg+0x198/0x2f0
[  212.666847][T11857]  ____sys_sendmsg+0xa4d/0xbe0
[  212.666869][T11857]  ? __pfx_netlink_sendmsg+0x10/0x10
[  212.666900][T11857]  ? __pfx_____sys_sendmsg+0x10/0x10
[  212.666929][T11857]  ? lock_acquire+0x1d1/0x380
[  212.666949][T11857]  ? get_pid_task+0x2a/0x250
[  212.666978][T11857]  ___sys_sendmsg+0x190/0x1e0
[  212.667004][T11857]  ? __pfx____sys_sendmsg+0x10/0x10
[  212.667028][T11857]  ? get_pid_task+0x106/0x250
[  212.667079][T11857]  ? find_held_lock+0x2b/0x80
[  212.667125][T11857]  __sys_sendmsg+0x160/0x210
[  212.667145][T11857]  ? __pfx___sys_sendmsg+0x10/0x10
[  212.667179][T11857]  do_syscall_64+0x123/0x790
[  212.667209][T11857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.667229][T11857] RIP: 0033:0x7f062299e1d9
[  212.667245][T11857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.667263][T11857] RSP: 002b:00007f06238fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  212.667281][T11857] RAX: ffffffffffffffda RBX: 00007f0622c25fa0 RCX: 00007f062299e1d9
[  212.667294][T11857] RDX: 0000000000000000 RSI: 0000200000002880 RDI: 0000000000000003
[  212.667305][T11857] RBP: 00007f06238fa090 R08: 0000000000000000 R09: 0000000000000000
[  212.667316][T11857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.667328][T11857] R13: 00007f0622c26038 R14: 00007f0622c25fa0 R15: 00007ffca9cb7dc8
[  212.667354][T11857]  </TASK>
[  212.905235][T11868] FAULT_INJECTION: forcing a failure.
[  212.905235][T11868] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  212.905265][T11868] CPU: 1 UID: 0 PID: 11868 Comm: syz.7.2007 Not tainted syzkaller #0 PREEMPT(full) 
[  212.905285][T11868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  212.905311][T11868] Call Trace:
[  212.905319][T11868]  <TASK>
[  212.905326][T11868]  dump_stack_lvl+0x100/0x190
[  212.905358][T11868]  should_fail_ex.cold+0x5/0xa
[  212.905385][T11868]  _copy_from_iter+0x1f4/0x1690
[  212.905416][T11868]  ? __asan_memset+0x23/0x50
[  212.905439][T11868]  ? __pfx__copy_from_iter+0x10/0x10
[  212.905465][T11868]  ? __pfx___alloc_skb+0x10/0x10
[  212.905482][T11868]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  212.905509][T11868]  ? sock_has_perm+0x25a/0x2f0
[  212.905532][T11868]  ? __pfx_sock_has_perm+0x10/0x10
[  212.905559][T11868]  netlink_sendmsg+0x808/0xda0
[  212.905592][T11868]  ? __pfx_netlink_sendmsg+0x10/0x10
[  212.905623][T11868]  ? selinux_socket_sendmsg+0x198/0x2f0
[  212.905652][T11868]  ____sys_sendmsg+0xa4d/0xbe0
[  212.905681][T11868]  ? __pfx_netlink_sendmsg+0x10/0x10
[  212.905710][T11868]  ? __pfx_____sys_sendmsg+0x10/0x10
[  212.905740][T11868]  ? lock_acquire+0x1d1/0x380
[  212.905760][T11868]  ? get_pid_task+0x2a/0x250
[  212.905789][T11868]  ___sys_sendmsg+0x190/0x1e0
[  212.905816][T11868]  ? __pfx____sys_sendmsg+0x10/0x10
[  212.905841][T11868]  ? get_pid_task+0x106/0x250
[  212.905876][T11868]  ? find_held_lock+0x2b/0x80
[  212.905918][T11868]  __sys_sendmsg+0x160/0x210
[  212.905938][T11868]  ? __pfx___sys_sendmsg+0x10/0x10
[  212.905971][T11868]  do_syscall_64+0x123/0x790
[  212.906000][T11868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.906020][T11868] RIP: 0033:0x7f062299e1d9
[  212.906035][T11868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.906053][T11868] RSP: 002b:00007f06238d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  212.906071][T11868] RAX: ffffffffffffffda RBX: 00007f0622c26090 RCX: 00007f062299e1d9
[  212.906083][T11868] RDX: 0000000000000040 RSI: 0000200000000440 RDI: 0000000000000003
[  212.906093][T11868] RBP: 00007f06238d9090 R08: 0000000000000000 R09: 0000000000000000
[  212.906103][T11868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.906115][T11868] R13: 00007f0622c26128 R14: 00007f0622c26090 R15: 00007ffca9cb7dc8
[  212.906137][T11868]  </TASK>
[  213.106575][T11874] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  213.106575][T11874] 
[  213.106739][T11874] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  213.106790][T11874] CIFS: Attempting to mount //172.20.20.170/share
[  213.931322][T11874] CIFS: VFS: Error connecting to socket. Aborting operation.
[  213.931355][T11874] CIFS: VFS: cifs_mount failed w/return code = -4
[  215.172200][T11842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  215.309878][T11908] FAULT_INJECTION: forcing a failure.
[  215.309878][T11908] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  215.309907][T11908] CPU: 2 UID: 0 PID: 11908 Comm: syz.7.2026 Not tainted syzkaller #0 PREEMPT(full) 
[  215.309927][T11908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  215.309938][T11908] Call Trace:
[  215.309944][T11908]  <TASK>
[  215.309952][T11908]  dump_stack_lvl+0x100/0x190
[  215.309983][T11908]  should_fail_ex.cold+0x5/0xa
[  215.310010][T11908]  _copy_from_user+0x2e/0xd0
[  215.310037][T11908]  copy_from_sockptr_offset.constprop.0+0x12c/0x150
[  215.310064][T11908]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  215.310096][T11908]  do_sock_getsockopt+0x530/0x6e0
[  215.310122][T11908]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  215.310150][T11908]  ? __fget_files+0x34/0x3d0
[  215.310177][T11908]  ? find_held_lock+0x2b/0x80
[  215.310212][T11908]  ? __fget_files+0x21f/0x3d0
[  215.310264][T11908]  __sys_getsockopt+0x148/0x260
[  215.310290][T11908]  ? __x64_sys_getsockopt+0xbd/0x160
[  215.310307][T11908]  __x64_sys_getsockopt+0xbd/0x160
[  215.310324][T11908]  ? do_syscall_64+0xae/0x790
[  215.310351][T11908]  ? lockdep_hardirqs_on+0x7d/0x110
[  215.310377][T11908]  do_syscall_64+0x123/0x790
[  215.310405][T11908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.310425][T11908] RIP: 0033:0x7f062299e1d9
[  215.310442][T11908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.310459][T11908] RSP: 002b:00007f06238fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  215.310477][T11908] RAX: ffffffffffffffda RBX: 00007f0622c25fa0 RCX: 00007f062299e1d9
[  215.310490][T11908] RDX: 0000000000000082 RSI: 000000000000010f RDI: 0000000000000003
[  215.310501][T11908] RBP: 00007f06238fa090 R08: 00002000000001c0 R09: 0000000000000000
[  215.310513][T11908] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  215.310525][T11908] R13: 00007f0622c26038 R14: 00007f0622c25fa0 R15: 00007ffca9cb7dc8
[  215.310551][T11908]  </TASK>
[  215.358135][T11912] fuse: Bad value for 'fd'
[  215.587293][   T44] audit: type=1400 audit(2000000401.067:4945): avc:  denied  { bind } for  pid=11909 comm="syz.5.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  215.608193][   T44] audit: type=1400 audit(2000000401.087:4946): avc:  denied  { read } for  pid=10787 comm="syz-executor" name="loop9" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  215.608556][   T44] audit: type=1400 audit(2000000401.087:4947): avc:  denied  { open } for  pid=10787 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  215.608842][   T44] audit: type=1400 audit(2000000401.087:4948): avc:  denied  { ioctl } for  pid=10787 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  215.828294][T11941] fuse: Bad value for 'fd'
[  215.828404][   T44] audit: type=1400 audit(2000000401.307:4949): avc:  denied  { mounton } for  pid=11940 comm="syz.9.2038" path="/117/file0" dev="tmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  216.358755][    C1] hpet: Lost 1 RTC interrupts
[  217.318168][    C1] hpet: Lost 1 RTC interrupts
[  217.548986][    C1] hpet: Lost 2 RTC interrupts
[  218.412691][T11917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  218.468836][T11954] Bluetooth: hci0: invalid length 0, exp 2 for type 12
[  218.519430][T11966] overlayfs: missing 'workdir'
[  218.551204][ T5810] libceph: mon0 (1)[c::]:6789 socket error on write
[  218.578962][T11974] fuse: Bad value for 'fd'
[  218.717724][T11990] Bluetooth: hci0: invalid length 0, exp 2 for type 12
[  218.805114][ T5810] libceph: mon0 (1)[c::]:6789 socket error on write
[  218.851047][   T44] audit: type=1400 audit(2000000404.328:4950): avc:  denied  { setopt } for  pid=11995 comm="syz.5.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  219.314833][ T5810] libceph: mon0 (1)[c::]:6789 socket error on write
[  219.350719][T11966] ceph: No mds server is up or the cluster is laggy
[  221.615736][T11977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  221.910724][   T44] audit: type=1400 audit(2000000407.389:4951): avc:  denied  { write } for  pid=12023 comm="syz.7.2068" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  222.834438][T12049] FAULT_INJECTION: forcing a failure.
[  222.834438][T12049] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  222.834460][T12049] CPU: 0 UID: 0 PID: 12049 Comm: syz.8.2076 Not tainted syzkaller #0 PREEMPT(full) 
[  222.834473][T12049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  222.834480][T12049] Call Trace:
[  222.834484][T12049]  <TASK>
[  222.834489][T12049]  dump_stack_lvl+0x100/0x190
[  222.834510][T12049]  should_fail_ex.cold+0x5/0xa
[  222.834526][T12049]  _copy_from_iter+0x1f4/0x1690
[  222.834545][T12049]  ? __asan_memset+0x23/0x50
[  222.834559][T12049]  ? __pfx__copy_from_iter+0x10/0x10
[  222.834575][T12049]  ? __pfx___alloc_skb+0x10/0x10
[  222.834585][T12049]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  222.834601][T12049]  ? sock_has_perm+0x25a/0x2f0
[  222.834615][T12049]  ? __pfx_sock_has_perm+0x10/0x10
[  222.834638][T12049]  netlink_sendmsg+0x808/0xda0
[  222.834658][T12049]  ? __pfx_netlink_sendmsg+0x10/0x10
[  222.834677][T12049]  ? selinux_socket_sendmsg+0x198/0x2f0
[  222.834695][T12049]  ____sys_sendmsg+0xa4d/0xbe0
[  222.834708][T12049]  ? __pfx_netlink_sendmsg+0x10/0x10
[  222.834727][T12049]  ? __pfx_____sys_sendmsg+0x10/0x10
[  222.834744][T12049]  ? lock_acquire+0x1d1/0x380
[  222.834757][T12049]  ? get_pid_task+0x2a/0x250
[  222.834774][T12049]  ___sys_sendmsg+0x190/0x1e0
[  222.834790][T12049]  ? __pfx____sys_sendmsg+0x10/0x10
[  222.834808][T12049]  ? get_pid_task+0x106/0x250
[  222.834838][T12049]  ? find_held_lock+0x2b/0x80
[  222.834879][T12049]  __sys_sendmsg+0x160/0x210
[  222.834900][T12049]  ? __pfx___sys_sendmsg+0x10/0x10
[  222.834931][T12049]  do_syscall_64+0x123/0x790
[  222.834950][T12049]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.834961][T12049] RIP: 0033:0x7f47ff19e1d9
[  222.834972][T12049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.834982][T12049] RSP: 002b:00007f48000ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  222.834994][T12049] RAX: ffffffffffffffda RBX: 00007f47ff426090 RCX: 00007f47ff19e1d9
[  222.835026][T12049] RDX: 0000000000000040 RSI: 0000200000000440 RDI: 0000000000000003
[  222.835033][T12049] RBP: 00007f48000ae090 R08: 0000000000000000 R09: 0000000000000000
[  222.835040][T12049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.835047][T12049] R13: 00007f47ff426128 R14: 00007f47ff426090 R15: 00007ffe404ece88
[  222.835062][T12049]  </TASK>
[  222.866199][T12050] jffs2: notice: (12050) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  222.872272][   T44] audit: type=1400 audit(2000000408.349:4952): avc:  denied  { write } for  pid=12047 comm="syz.9.2078" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  222.873092][   T44] audit: type=1400 audit(2000000408.349:4953): avc:  denied  { add_name } for  pid=12047 comm="syz.9.2078" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  222.877726][   T44] audit: type=1400 audit(2000000408.359:4954): avc:  denied  { write } for  pid=12047 comm="syz.9.2078" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  222.911807][   T44] audit: type=1400 audit(2000000408.389:4955): avc:  denied  { write } for  pid=12047 comm="syz.9.2078" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  222.911859][   T44] audit: type=1400 audit(2000000408.389:4956): avc:  denied  { write } for  pid=12047 comm="syz.9.2078" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  222.911916][   T44] audit: type=1400 audit(2000000408.389:4957): avc:  denied  { remove_name } for  pid=12047 comm="syz.9.2078" name="file0" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  222.912048][   T44] audit: type=1400 audit(2000000408.389:4958): avc:  denied  { rename } for  pid=12047 comm="syz.9.2078" name="file0" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  222.915354][T12050] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  222.915592][T12050] Cannot find add_set index 0 as target
[  222.916520][T12050] overlayfs: failed to resolve './file0': -2
[  222.919709][   T44] audit: type=1400 audit(2000000408.409:4959): avc:  denied  { write } for  pid=12047 comm="syz.9.2078" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  223.043853][ T5831] usb 12-1: new high-speed USB device number 4 using dummy_hcd
[  223.203634][ T5831] usb 12-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  223.204536][ T5831] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  223.204557][ T5831] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  223.204568][ T5831] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  223.204581][ T5831] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  223.206680][ T5831] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.206699][ T5831] usb 12-1: Product: syz
[  223.206711][ T5831] usb 12-1: Manufacturer: syz
[  223.206723][ T5831] usb 12-1: SerialNumber: syz
[  223.211339][ T5831] usb 12-1: config 0 descriptor??
[  223.420503][ T5831] adutux 12-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  223.624606][ T5810] usb 12-1: USB disconnect, device number 4
[  223.635435][T12045] overlay: Unknown parameter '/'
[  225.650247][T12032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  225.680818][   T44] audit: type=1400 audit(2000000411.149:4960): avc:  denied  { write } for  pid=10787 comm="syz-executor" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  226.012447][T12093] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2094'.
[  228.959382][T12088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  229.100157][T12118] kvm [12116]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0
[  229.155146][T12123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2104'.
[  229.186832][T12120] overlayfs: conflicting lowerdir path
[  229.409320][T12155] netlink: 'syz.8.2109': attribute type 12 has an invalid length.
[  229.409339][T12155] netlink: 'syz.8.2109': attribute type 29 has an invalid length.
[  229.409401][T12155] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2109'.
[  229.409417][T12155] netlink: 59 bytes leftover after parsing attributes in process `syz.8.2109'.
[  229.571165][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2115'.
[  229.583156][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2115'.
[  229.887837][    C1] hpet_rtc_timer_reinit: 7 callbacks suppressed
[  229.887858][    C1] hpet: Lost 1 RTC interrupts
[  230.587589][T12171] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  232.336462][T12139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  232.389224][   T44] audit: type=1326 audit(2000000417.869:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12177 comm="syz.8.2120" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47ff19e1d9 code=0x0
[  232.588357][T12197] FAULT_INJECTION: forcing a failure.
[  232.588357][T12197] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  232.588388][T12197] CPU: 1 UID: 0 PID: 12197 Comm: syz.7.2126 Not tainted syzkaller #0 PREEMPT(full) 
[  232.588410][T12197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  232.588422][T12197] Call Trace:
[  232.588429][T12197]  <TASK>
[  232.588436][T12197]  dump_stack_lvl+0x100/0x190
[  232.588476][T12197]  should_fail_ex.cold+0x5/0xa
[  232.588515][T12197]  _copy_from_user+0x2e/0xd0
[  232.588545][T12197]  __sys_bpf+0x2f5/0x4a30
[  232.588575][T12197]  ? __pfx___sys_bpf+0x10/0x10
[  232.588595][T12197]  ? find_held_lock+0x2b/0x80
[  232.588620][T12197]  ? get_pid_task+0xfc/0x250
[  232.588641][T12197]  ? get_pid_task+0xfc/0x250
[  232.588670][T12197]  ? find_held_lock+0x2b/0x80
[  232.588701][T12197]  ? rcu_read_lock_any_held+0x6a/0x90
[  232.588720][T12197]  ? find_held_lock+0x2b/0x80
[  232.588746][T12197]  ? ksys_write+0x190/0x250
[  232.588766][T12197]  ? ksys_write+0x190/0x250
[  232.588785][T12197]  ? lock_acquire+0x1d1/0x380
[  232.588819][T12197]  ? fput+0x7c/0x100
[  232.588843][T12197]  ? ksys_write+0x1ac/0x250
[  232.588883][T12197]  ? __x64_sys_bpf+0xce/0x140
[  232.588903][T12197]  __x64_sys_bpf+0xce/0x140
[  232.588923][T12197]  ? do_syscall_64+0xae/0x790
[  232.588952][T12197]  do_syscall_64+0x123/0x790
[  232.588977][T12197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.588994][T12197] RIP: 0033:0x7f062299e1d9
[  232.589010][T12197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  232.589029][T12197] RSP: 002b:00007f06238fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  232.589054][T12197] RAX: ffffffffffffffda RBX: 00007f0622c25fa0 RCX: 00007f062299e1d9
[  232.589065][T12197] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005
[  232.589075][T12197] RBP: 00007f06238fa090 R08: 0000000000000000 R09: 0000000000000000
[  232.589085][T12197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  232.589095][T12197] R13: 00007f0622c26038 R14: 00007f0622c25fa0 R15: 00007ffca9cb7dc8
[  232.589118][T12197]  </TASK>
[  232.802013][   T44] audit: type=1400 audit(2000000418.279:4969): avc:  denied  { map } for  pid=12208 comm="syz.9.2133" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  232.802201][   T44] audit: type=1400 audit(2000000418.279:4970): avc:  denied  { execute } for  pid=12208 comm="syz.9.2133" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  233.474940][T12224] binder: 12223:12224 ioctl 4018620d 0 returned -22
[  233.475685][T12224] binder: 12223:12224 ioctl c0306201 200000000240 returned -14
[  233.596381][T12232] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  233.609486][T12232] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.663398][   T44] audit: type=1326 audit(2000000419.139:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12229 comm="syz.8.2143" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47ff19e1d9 code=0x0
[  233.899468][T12246] binder: 12245:12246 ioctl 4018620d 0 returned -22
[  233.900222][T12246] binder: 12245:12246 ioctl c0306201 200000000240 returned -14
[  234.536281][   T44] audit: type=1400 audit(2000000420.019:4972): avc:  denied  { getopt } for  pid=12255 comm="syz.8.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  234.943974][T12267] binder: 12266:12267 ioctl 4018620d 0 returned -22
[  234.944716][T12267] binder: 12266:12267 ioctl c0306201 200000000240 returned -14
[  234.978561][T12257] FAULT_INJECTION: forcing a failure.
[  234.978561][T12257] name failslab, interval 1, probability 0, space 0, times 0
[  234.978594][T12257] CPU: 3 UID: 0 PID: 12257 Comm: syz.5.2153 Not tainted syzkaller #0 PREEMPT(full) 
[  234.978619][T12257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  234.978630][T12257] Call Trace:
[  234.978638][T12257]  <TASK>
[  234.978647][T12257]  dump_stack_lvl+0x100/0x190
[  234.978679][T12257]  should_fail_ex.cold+0x5/0xa
[  234.978707][T12257]  should_failslab+0xc2/0x120
[  234.978737][T12257]  kmem_cache_alloc_noprof+0x92/0x6a0
[  234.978763][T12257]  ? __kernfs_new_node+0xd2/0xa10
[  234.978791][T12257]  __kernfs_new_node+0xd2/0xa10
[  234.978819][T12257]  ? __pfx___kernfs_new_node+0x10/0x10
[  234.978845][T12257]  ? lock_acquire+0x1d1/0x380
[  234.978867][T12257]  ? kernfs_root+0x23/0x2a0
[  234.978887][T12257]  ? find_held_lock+0x2b/0x80
[  234.978916][T12257]  ? kernfs_root+0xee/0x2a0
[  234.978935][T12257]  ? kernfs_root+0xee/0x2a0
[  234.978961][T12257]  kernfs_new_node+0x117/0x150
[  234.978988][T12257]  kernfs_create_link+0xcc/0x240
[  234.979018][T12257]  sysfs_do_create_link_sd+0x90/0x140
[  234.979041][T12257]  sysfs_create_link+0x61/0xc0
[  234.979066][T12257]  device_add+0x5da/0x1970
[  234.979093][T12257]  ? __pfx_device_add+0x10/0x10
[  234.979116][T12257]  ? input_register_device+0x8e0/0xe00
[  234.979167][T12257]  ? input_register_device+0x9a9/0xe00
[  234.979189][T12257]  ? kfree+0x22b/0x6d0
[  234.979208][T12257]  ? mark_held_locks+0x40/0x70
[  234.979235][T12257]  input_register_device+0x7d2/0xe00
[  234.979259][T12257]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.979287][T12257]  psmouse_attr_set_protocol+0x8f5/0x11a0
[  234.979322][T12257]  ? __pfx_psmouse_attr_set_protocol+0x10/0x10
[  234.979344][T12257]  ? mark_held_locks+0x40/0x70
[  234.979366][T12257]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.979390][T12257]  ? lockdep_hardirqs_on+0x7d/0x110
[  234.979418][T12257]  ? __pfx_psmouse_attr_set_protocol+0x10/0x10
[  234.979442][T12257]  psmouse_attr_set_helper+0x2e7/0x510
[  234.979471][T12257]  ? __pfx_psmouse_attr_set_helper+0x10/0x10
[  234.979495][T12257]  dev_attr_store+0x58/0x80
[  234.979516][T12257]  ? __pfx_dev_attr_store+0x10/0x10
[  234.979536][T12257]  sysfs_kf_write+0xf2/0x150
[  234.979565][T12257]  kernfs_fop_write_iter+0x3e0/0x5f0
[  234.979589][T12257]  ? __pfx_sysfs_kf_write+0x10/0x10
[  234.979619][T12257]  vfs_write+0x6af/0x1050
[  234.979644][T12257]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  234.979672][T12257]  ? __pfx_vfs_write+0x10/0x10
[  234.979694][T12257]  ? find_held_lock+0x2b/0x80
[  234.979740][T12257]  ksys_write+0x12a/0x250
[  234.979763][T12257]  ? __pfx_ksys_write+0x10/0x10
[  234.979795][T12257]  do_syscall_64+0x123/0x790
[  234.979826][T12257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.979847][T12257] RIP: 0033:0x7f833299e1d9
[  234.979864][T12257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.979908][T12257] RSP: 002b:00007f83337f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  234.979928][T12257] RAX: ffffffffffffffda RBX: 00007f8332c25fa0 RCX: 00007f833299e1d9
[  234.979943][T12257] RDX: 0000000000000004 RSI: 0000200000000780 RDI: 0000000000000004
[  234.979956][T12257] RBP: 00007f8332a35888 R08: 0000000000000000 R09: 0000000000000000
[  234.979969][T12257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  234.979981][T12257] R13: 00007f8332c26038 R14: 00007f8332c25fa0 R15: 00007ffc955bbe28
[  234.980011][T12257]  </TASK>
[  235.477367][   T44] audit: type=1400 audit(2000000420.959:4973): avc:  denied  { view } for  pid=12270 comm="syz.5.2160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  235.694450][T12201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  236.029356][T12311] smc: net device lo applied user defined pnetid SYZ0
[  236.029449][T12311] smc: smcd device lo applied user defined pnetid SYZ0
[  236.036263][   T44] audit: type=1807 audit(2000000421.519:4974): action=measure res=1
[  236.036785][T12310] ima: policy update completed
[  236.037063][   T44] audit: type=1802 audit(2000000421.519:4975): pid=12310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.8.2174" res=1 errno=0
[  236.094721][ T5143] 
[  236.095716][ T5143] ======================================================
[  236.098437][ T5143] WARNING: possible circular locking dependency detected
[  236.101078][ T5143] syzkaller #0 Not tainted
[  236.102981][ T5143] ------------------------------------------------------
[  236.105716][ T5143] udevd/5143 is trying to acquire lock:
[  236.107889][ T5143] ffff888038d11cb8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270
[  236.111168][ T5143] 
[  236.111168][ T5143] but task is already holding lock:
[  236.114018][ T5143] ffff88803e3bf818 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350
[  236.118040][ T5143] 
[  236.118040][ T5143] which lock already depends on the new lock.
[  236.118040][ T5143] 
[  236.121979][ T5143] 
[  236.121979][ T5143] the existing dependency chain (in reverse order) is:
[  236.125386][ T5143] 
[  236.125386][ T5143] -> #4 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[  236.128738][ T5143]        lock_acquire+0x1d1/0x380
[  236.130687][ T5143]        __mutex_lock+0x1a4/0x1bd0
[  236.132688][ T5143]        process_measurement+0x5ab/0x2350
[  236.134910][ T5143]        ima_file_check+0xc3/0x110
[  236.136936][ T5143]        security_file_post_open+0xc4/0x210
[  236.139146][ T5143]        path_openat+0x5cd/0x2440
[  236.141222][ T5143]        do_file_open+0x20e/0x430
[  236.143324][ T5143]        file_open_name+0x1c3/0x3e0
[  236.145335][ T5143]        filp_open+0x2e/0x50
[  236.147157][ T5143]        kernel_read_file_from_path_initns+0xec/0x240
[  236.149788][ T5143]        _request_firmware+0x733/0x13c0
[  236.151944][ T5143]        request_firmware+0x35/0x50
[  236.153921][ T5143]        reg_reload_regdb+0x85/0x460
[  236.155970][ T5143]        genl_family_rcv_msg_doit+0x214/0x300
[  236.158329][ T5143]        genl_rcv_msg+0x560/0x800
[  236.160299][ T5143]        netlink_rcv_skb+0x159/0x420
[  236.162375][ T5143]        genl_rcv+0x28/0x40
[  236.164195][ T5143]        netlink_unicast+0x585/0x850
[  236.166266][ T5143]        netlink_sendmsg+0x8b0/0xda0
[  236.168438][ T5143]        ____sys_sendmsg+0xa4d/0xbe0
[  236.170535][ T5143]        ___sys_sendmsg+0x190/0x1e0
[  236.172624][ T5143]        __sys_sendmsg+0x160/0x210
[  236.174665][ T5143]        do_syscall_64+0x123/0x790
[  236.176714][ T5143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.179204][ T5143] 
[  236.179204][ T5143] -> #3 (cb_lock){++++}-{4:4}:
[  236.181920][ T5143]        lock_acquire+0x1d1/0x380
[  236.183988][ T5143]        down_read+0x99/0x4c0
[  236.185908][ T5143]        genl_release+0x7e/0x1d0
[  236.187973][ T5143]        netlink_release+0x105e/0x2000
[  236.190251][ T5143]        __sock_release+0xb3/0x260
[  236.192390][ T5143]        sock_close+0x1c/0x30
[  236.194237][ T5143]        __fput+0x400/0xb60
[  236.196064][ T5143]        fput_close_sync+0x118/0x250
[  236.198154][ T5143]        __x64_sys_close+0x8b/0x120
[  236.200295][ T5143]        do_syscall_64+0x123/0x790
[  236.202127][ T5143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.204722][ T5143] 
[  236.204722][ T5143] -> #2 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}:
[  236.208343][ T5143]        lock_acquire+0x1d1/0x380
[  236.210480][ T5143]        down_write+0x8b/0x1f0
[  236.212500][ T5143]        __sock_release+0x86/0x260
[  236.214589][ T5143]        sock_close+0x1c/0x30
[  236.216491][ T5143]        __fput+0x400/0xb60
[  236.218385][ T5143]        __fput_sync+0xd7/0x100
[  236.220421][ T5143]        nvme_tcp_alloc_queue.isra.0+0xd89/0x1630
[  236.223063][ T5143]        nvme_tcp_configure_admin_queue+0x26/0x530
[  236.225845][ T5143]        nvme_tcp_setup_ctrl+0xa4/0xa20
[  236.228148][ T5143]        nvme_tcp_create_ctrl+0x970/0xd90
[  236.229318][T12293] FAULT_INJECTION: forcing a failure.
[  236.229318][T12293] name failslab, interval 1, probability 0, space 0, times 0
[  236.229346][T12293] CPU: 3 UID: 0 PID: 12293 Comm: syz.7.2168 Not tainted syzkaller #0 PREEMPT(full) 
[  236.229369][T12293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  236.229382][T12293] Call Trace:
[  236.229389][T12293]  <TASK>
[  236.229397][T12293]  dump_stack_lvl+0x100/0x190
[  236.229498][T12293]  should_fail_ex.cold+0x5/0xa
[  236.229523][T12293]  ? kmem_cache_alloc_noprof+0x6b/0x6a0
[  236.229550][T12293]  should_failslab+0xc2/0x120
[  236.229579][T12293]  kmem_cache_alloc_noprof+0x92/0x6a0
[  236.229602][T12293]  ? __kernfs_new_node+0x2d1/0xa10
[  236.229623][T12293]  ? __kernfs_new_node+0xd2/0xa10
[  236.229645][T12293]  __kernfs_new_node+0xd2/0xa10
[  236.229664][T12293]  ? kernfs_link_sibling+0x5ec/0x850
[  236.229683][T12293]  ? rcu_is_watching+0x13/0xc0
[  236.229710][T12293]  ? __pfx___kernfs_new_node+0x10/0x10
[  236.229730][T12293]  ? rcu_is_watching+0x13/0xc0
[  236.229757][T12293]  ? rcu_is_watching+0x13/0xc0
[  236.229783][T12293]  ? kernfs_root+0xee/0x2a0
[  236.229799][T12293]  ? rcu_is_watching+0x13/0xc0
[  236.229825][T12293]  ? kernfs_root+0xee/0x2a0
[  236.229843][T12293]  ? lock_release+0x24d/0x310
[  236.229866][T12293]  kernfs_new_node+0x117/0x150
[  236.229890][T12293]  kernfs_create_link+0xcc/0x240
[  236.229917][T12293]  sysfs_do_create_link_sd+0x90/0x140
[  236.229936][T12293]  sysfs_create_link+0x61/0xc0
[  236.229953][T12293]  device_add+0x5da/0x1970
[  236.229975][T12293]  ? __pfx_device_add+0x10/0x10
[  236.229994][T12293]  ? input_register_device+0x8e0/0xe00
[  236.230036][T12293]  ? input_register_device+0x9a9/0xe00
[  236.230057][T12293]  ? kfree+0x22b/0x6d0
[  236.230074][T12293]  ? rcu_is_watching+0x13/0xc0
[  236.230104][T12293]  input_register_device+0x7d2/0xe00
[  236.230126][T12293]  ? trace_irq_enable.constprop.0+0x122/0x160
[  236.230156][T12293]  psmouse_attr_set_protocol+0x8f5/0x11a0
[  236.230181][T12293]  ? __pfx_psmouse_attr_set_protocol+0x10/0x10
[  236.230202][T12293]  ? mark_held_locks+0x40/0x70
[  236.230228][T12293]  ? _raw_spin_unlock_irq+0x23/0x50
[  236.230252][T12293]  ? lockdep_hardirqs_on+0x7d/0x110
[  236.230278][T12293]  ? __pfx_psmouse_attr_set_protocol+0x10/0x10
[  236.230301][T12293]  psmouse_attr_set_helper+0x2e7/0x510
[  236.230327][T12293]  ? __pfx_psmouse_attr_set_helper+0x10/0x10
[  236.230350][T12293]  dev_attr_store+0x58/0x80
[  236.230370][T12293]  ? __pfx_dev_attr_store+0x10/0x10
[  236.230388][T12293]  sysfs_kf_write+0xf2/0x150
[  236.230417][T12293]  kernfs_fop_write_iter+0x3e0/0x5f0
[  236.230441][T12293]  ? __pfx_sysfs_kf_write+0x10/0x10
[  236.230468][T12293]  vfs_write+0x6af/0x1050
[  236.230491][T12293]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  236.230514][T12293]  ? __pfx_vfs_write+0x10/0x10
[  236.230565][T12293]  ? find_held_lock+0x2b/0x80
[  236.230601][T12293]  ksys_write+0x12a/0x250
[  236.230624][T12293]  ? __pfx_ksys_write+0x10/0x10
[  236.230651][T12293]  do_syscall_64+0x123/0x790
[  236.230680][T12293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.230699][T12293] RIP: 0033:0x7f062299e1d9
[  236.230714][T12293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.230732][T12293] RSP: 002b:00007f06238fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  236.230751][T12293] RAX: ffffffffffffffda RBX: 00007f0622c25fa0 RCX: 00007f062299e1d9
[  236.230767][T12293] RDX: 0000000000000004 RSI: 0000200000000780 RDI: 0000000000000004
[  236.230780][T12293] RBP: 00007f0622a35888 R08: 0000000000000000 R09: 0000000000000000
[  236.230792][T12293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.230803][T12293] R13: 00007f0622c26038 R14: 00007f0622c25fa0 R15: 00007ffca9cb7dc8
[  236.230822][T12293]  </TASK>
[  236.381528][ T5143]        nvmf_dev_write+0x4ee/0xb60
[  236.383703][ T5143]        vfs_write+0x2aa/0x1050
[  236.386133][ T5143]        ksys_write+0x12a/0x250
[  236.388166][ T5143]        do_syscall_64+0x123/0x790
[  236.390546][ T5143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.393269][ T5143] 
[  236.393269][ T5143] -> #1 (nvmf_dev_mutex){+.+.}-{4:4}:
[  236.396900][ T5143]        lock_acquire+0x1d1/0x380
[  236.398994][ T5143]        __mutex_lock+0x1a4/0x1bd0
[  236.401104][ T5143]        nvmf_dev_show+0x26/0x210
[  236.403183][ T5143]        seq_read_iter+0x32f/0x1270
[  236.405440][ T5143]        seq_read+0x344/0x4d0
[  236.407403][ T5143]        vfs_read+0x1e4/0xb40
[  236.409338][ T5143]        ksys_read+0x12a/0x250
[  236.411350][ T5143]        do_syscall_64+0x123/0x790
[  236.413504][ T5143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.416137][ T5143] 
[  236.416137][ T5143] -> #0 (&p->lock){+.+.}-{4:4}:
[  236.419045][ T5143]        check_prev_add+0xeb/0xe60
[  236.421181][ T5143]        __lock_acquire+0x1528/0x1f40
[  236.423420][ T5143]        lock_acquire+0x1d1/0x380
[  236.425488][ T5143]        __mutex_lock+0x1a4/0x1bd0
[  236.427622][ T5143]        seq_read_iter+0xe1/0x1270
[  236.429536][ T5143]        kernfs_fop_read_iter+0x46c/0x610
[  236.431693][ T5143]        __kernel_read+0x397/0xad0
[  236.433887][ T5143]        integrity_kernel_read+0x7e/0xb0
[  236.436233][ T5143]        ima_calc_file_hash_tfm+0x25e/0x350
[  236.438681][ T5143]        ima_calc_file_hash+0x1e3/0x380
[  236.440993][ T5143]        ima_collect_measurement+0x94f/0xb30
[  236.443521][ T5143]        process_measurement+0xdfe/0x2350
[  236.445890][ T5143]        ima_file_check+0xc3/0x110
[  236.448042][ T5143]        security_file_post_open+0xc4/0x210
[  236.450434][ T5143]        path_openat+0x5cd/0x2440
[  236.452559][ T5143]        do_file_open+0x20e/0x430
[  236.454642][ T5143]        do_sys_openat2+0x10f/0x1e0
[  236.456640][ T5143]        __x64_sys_openat+0x12d/0x210
[  236.458861][ T5143]        do_syscall_64+0x123/0x790
[  236.461017][ T5143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.463669][ T5143] 
[  236.463669][ T5143] other info that might help us debug this:
[  236.463669][ T5143] 
[  236.467891][ T5143] Chain exists of:
[  236.467891][ T5143]   &p->lock --> cb_lock --> &ima_iint_mutex_key[depth]
[  236.467891][ T5143] 
[  236.473008][ T5143]  Possible unsafe locking scenario:
[  236.473008][ T5143] 
[  236.476007][ T5143]        CPU0                    CPU1
[  236.478154][ T5143]        ----                    ----
[  236.480359][ T5143]   lock(&ima_iint_mutex_key[depth]);
[  236.482565][ T5143]                                lock(cb_lock);
[  236.485169][ T5143]                                lock(&ima_iint_mutex_key[depth]);
[  236.488419][ T5143]   lock(&p->lock);
[  236.490028][ T5143] 
[  236.490028][ T5143]  *** DEADLOCK ***
[  236.490028][ T5143] 
[  236.493328][ T5143] locks held by udevd/5143: 1, last CPU#2:
[  236.495793][ T5143]  #0: ffff88803e3bf818 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350
[  236.500329][ T5143] 
[  236.500329][ T5143] stack backtrace:
[  236.502754][ T5143] CPU: 2 UID: 0 PID: 5143 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[  236.506347][ T5143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  236.510504][ T5143] Call Trace:
[  236.511937][ T5143]  <TASK>
[  236.513209][ T5143]  dump_stack_lvl+0x100/0x190
[  236.515214][ T5143]  print_circular_bug.cold+0x178/0x1be
[  236.517465][ T5143]  check_noncircular+0x146/0x160
[  236.519534][ T5143]  check_prev_add+0xeb/0xe60
[  236.521510][ T5143]  __lock_acquire+0x1528/0x1f40
[  236.523601][ T5143]  ? unwind_next_frame+0xbd/0x2090
[  236.525754][ T5143]  lock_acquire+0x1d1/0x380
[  236.527641][ T5143]  ? seq_read_iter+0xe1/0x1270
[  236.529649][ T5143]  ? __pfx___might_resched+0x10/0x10
[  236.531856][ T5143]  ? is_bpf_text_address+0x8a/0x1a0
[  236.534060][ T5143]  ? is_bpf_text_address+0x8a/0x1a0
[  236.536243][ T5143]  __mutex_lock+0x1a4/0x1bd0
[  236.538204][ T5143]  ? seq_read_iter+0xe1/0x1270
[  236.540256][ T5143]  ? seq_read_iter+0xe1/0x1270
[  236.542303][ T5143]  ? kernel_text_address+0x8d/0x100
[  236.544467][ T5143]  ? __kernel_text_address+0xd/0x30
[  236.546526][ T5143]  ? unwind_get_return_address+0x59/0xa0
[  236.548865][ T5143]  ? __pfx___mutex_lock+0x10/0x10
[  236.550961][ T5143]  ? stack_trace_save+0x8e/0xc0
[  236.552981][ T5143]  ? __pfx_stack_trace_save+0x10/0x10
[  236.555217][ T5143]  ? seq_read_iter+0xe1/0x1270
[  236.557223][ T5143]  seq_read_iter+0xe1/0x1270
[  236.559182][ T5143]  ? kasan_save_stack+0x30/0x50
[  236.561209][ T5143]  ? kasan_save_track+0x14/0x30
[  236.563237][ T5143]  ? __kasan_kmalloc+0xaa/0xb0
[  236.565248][ T5143]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  236.567544][ T5143]  ? ima_calc_file_hash_tfm+0x236/0x350
[  236.569863][ T5143]  ? ima_collect_measurement+0x94f/0xb30
[  236.572212][ T5143]  ? ima_file_check+0xc3/0x110
[  236.574275][ T5143]  ? security_file_post_open+0xc4/0x210
[  236.576580][ T5143]  ? do_file_open+0x20e/0x430
[  236.578558][ T5143]  ? do_sys_openat2+0x10f/0x1e0
[  236.580591][ T5143]  kernfs_fop_read_iter+0x46c/0x610
[  236.582777][ T5143]  __kernel_read+0x397/0xad0
[  236.584742][ T5143]  ? __pfx___kernel_read+0x10/0x10
[  236.586881][ T5143]  integrity_kernel_read+0x7e/0xb0
[  236.589108][ T5143]  ? __pfx_integrity_kernel_read+0x10/0x10
[  236.591512][ T5143]  ? ima_calc_file_hash_tfm+0x236/0x350
[  236.593808][ T5143]  ima_calc_file_hash_tfm+0x25e/0x350
[  236.596064][ T5143]  ? __pfx_ima_calc_file_hash_tfm+0x10/0x10
[  236.598531][ T5143]  ? ima_alloc_tfm+0x21a/0x2e0
[  236.600540][ T5143]  ? kernfs_iop_getattr+0xc4/0xf0
[  236.602640][ T5143]  ima_calc_file_hash+0x1e3/0x380
[  236.604801][ T5143]  ima_collect_measurement+0x94f/0xb30
[  236.607060][ T5143]  ? __pfx_ima_collect_measurement+0x10/0x10
[  236.609575][ T5143]  ? vfs_getxattr_alloc+0xec/0x350
[  236.611708][ T5143]  ? ima_get_hash_algo+0x241/0x400
[  236.613853][ T5143]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  236.616129][ T5143]  ? process_measurement+0xdfe/0x2350
[  236.618336][ T5143]  process_measurement+0xdfe/0x2350
[  236.620546][ T5143]  ? __pfx_process_measurement+0x10/0x10
[  236.622863][ T5143]  ? find_held_lock+0x2b/0x80
[  236.624840][ T5143]  ? kernfs_fop_open+0x887/0xd50
[  236.626820][ T5143]  ? kernfs_fop_open+0x887/0xd50
[  236.628918][ T5143]  ? kernfs_put_active+0x93/0xe0
[  236.630973][ T5143]  ? kernfs_fop_open+0x3da/0xd50
[  236.633057][ T5143]  ima_file_check+0xc3/0x110
[  236.634988][ T5143]  ? __pfx_ima_file_check+0x10/0x10
[  236.637113][ T5143]  security_file_post_open+0xc4/0x210
[  236.639278][ T5143]  path_openat+0x5cd/0x2440
[  236.641185][ T5143]  ? __pfx_path_openat+0x10/0x10
[  236.643251][ T5143]  do_file_open+0x20e/0x430
[  236.645023][ T5143]  ? __pfx_do_file_open+0x10/0x10
[  236.647070][ T5143]  ? _raw_spin_unlock+0x28/0x50
[  236.649042][ T5143]  ? alloc_fd+0x471/0x7a0
[  236.650856][ T5143]  do_sys_openat2+0x10f/0x1e0
[  236.652885][ T5143]  ? __pfx_do_sys_openat2+0x10/0x10
[  236.655037][ T5143]  ? ktime_get_ts64+0x306/0x420
[  236.657076][ T5143]  ? __x64_sys_recvmsg+0x1b9/0x260
[  236.659200][ T5143]  __x64_sys_openat+0x12d/0x210
[  236.661081][ T5143]  ? __pfx___x64_sys_openat+0x10/0x10
[  236.663100][ T5143]  do_syscall_64+0x123/0x790
[  236.665059][ T5143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.667553][ T5143] RIP: 0033:0x7ffaee6a7407
[  236.669434][ T5143] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  236.677301][ T5143] RSP: 002b:00007ffcbfb0fae0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  236.680704][ T5143] RAX: ffffffffffffffda RBX: 00007ffaeedb3880 RCX: 00007ffaee6a7407
[  236.683994][ T5143] RDX: 0000000000080000 RSI: 00007ffcbfb0fc60 RDI: ffffffffffffff9c
[  236.687236][ T5143] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000
[  236.690523][ T5143] R10: 0000000000000000 R11: 0000000000000202 R12: 000055dc243007f5
[  236.693816][ T5143] R13: 000055dc243007f5 R14: 0000000000000001 R15: 0000000000000000
[  236.697065][ T5143]  </TASK>
[  236.713376][   T44] audit: type=1800 audit(2000000422.199:4976): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=181004 res=0 errno=0
[  236.716578][   T44] audit: type=1800 audit(2000000422.199:4977): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=181014 res=0 errno=0
[  239.088690][T12316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512