last executing test programs: 2m32.989925249s ago: executing program 0 (id=52): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x3000000, 0x20040000}, 0x0) 2m32.930616334s ago: executing program 0 (id=53): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000400)='syz0\x00') ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000000010101000000000000000002800002240002801400018008000100ac1414aa08000200e00000010c0002800500010000000000"], 0x38}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m32.681124019s ago: executing program 0 (id=55): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f00001c8a00)=[{0x4000000, 0xf, &(0x7f00000000c0)=[0x4, 0x2, 0x5, 0x1000000, 0xffffffff, 0x5, 0x1, 0x4, 0x8000, 0xfff, 0x0, 0x9, 0x5, 0x6, 0x0], 0x2, 0x1}]}) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x440a, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) close_range(r1, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x8042, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x58) lseek(r7, 0xf184, 0x2) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x1ff}}, '.\x00'}) ioctl$DRM_IOCTL_DMA(r8, 0xc0406429, &(0x7f00000003c0)={0x0, 0x4, &(0x7f00000002c0)=[0x6, 0x7, 0x100, 0x401], &(0x7f0000000300)=[0x5, 0x9c, 0x8001, 0x7fff, 0x5, 0x9], 0x40, 0x1, 0x9, &(0x7f0000000340)=[0x4], &(0x7f0000000380)=[0xffff, 0x2, 0x2]}) personality(0x87bf5ac905ea0f7f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r9 = syz_usb_connect$midi(0x3, 0x48, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100140000102030109023600010182000a0904000001010320040f240303060408010004c27f10011f0905030000001006040c250108dbf6b6206fb9cd590000000000000000"], &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x0, 0x1, 0x5f, 0x40, 0x89}, 0x7c, &(0x7f0000000200)=ANY=[@ANYBLOB="050f7c000270100b141e7e0eca62898baf83ed7ddabc3beaceb175d07af3c3dc9a99b9e5d730c44a0ab25ecb27e0342f61d429b9c2781c783a6e54e5540fb8515d06226549b211972a4ab846e42248457ded4a4c36538e4e1f1db1a16a0710026bd3a5b300"/112]}) syz_usb_ep_read(r9, 0xb, 0x6c, &(0x7f0000000480)=""/108) 2m29.909258866s ago: executing program 0 (id=68): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x14) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006e090890e0878f0e1ac6e7f89b334d959b4a9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1db44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9c0587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x35e}}, 0x1006) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2m29.907304064s ago: executing program 0 (id=69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) preadv(r1, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x811f}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)}], 0x1}, 0x40080) 2m29.621195675s ago: executing program 0 (id=70): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0xa3d1f8fdbfac5952, 0x0, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f00000008c0)='uid_map\x00') write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x80e0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613041", 0x2e}], 0x1}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40805) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) 2m29.598750361s ago: executing program 32 (id=70): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0xa3d1f8fdbfac5952, 0x0, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f00000008c0)='uid_map\x00') write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x80e0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613041", 0x2e}], 0x1}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40805) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) 2m13.736817161s ago: executing program 2 (id=160): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x191001, 0x0, 0x1}, 0x18) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) write$vhost_msg_v2(r1, 0xfffffffffffffffc, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000002100), &(0x7f0000002140)=0x4) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r2, &(0x7f0000002180)={0x1a, 0x101, 0xc, 0x3, 0x2, 0x5, @multicast}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000026c0)={{r0, &(0x7f00000021c0)='-:#\x00', 0x4000, &(0x7f0000002200)={@_ha_fsid={[0xa8, 0x6]}, {0x2, 0x3ff, 0xa611, 0x5}}, 0x2, &(0x7f0000002240)={@_ha_fsid}, &(0x7f0000002280)=0x4}, 0x5, &(0x7f0000002600)=[{0x1, 0x60ec, &(0x7f00000022c0)='/selinux/avc/hash_stats\x00', &(0x7f0000002300)="06a2fb7507a46e24c9ee3c91b4271bcf7136d72370cf2c84ffc291000cb58d7e2a3cc8c86818e19e1e9f5ea3eac731acbab7a1c575d0849ab52f3aadeeb8e9bf50f2", 0x42, 0x8}, {0x2, 0x6, &(0x7f0000002380)='-{)\x00', &(0x7f00000023c0)="00d885cdb6b0d1874fe545320c3160ff3960f24bdaf665459b3851be5c273d37bcbd", 0x22, 0x30}, {0x1, 0x5f28, &(0x7f0000002400)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000002440)="8f8b64c67851c2c090d46ae220cbed2b2c", 0x11, 0x1ad6b90999f8110f}, {0x2, 0x2, &(0x7f0000002480)='\x00', &(0x7f00000024c0)="8ce8c17abf7b799fd6620065d371acaa0b0c9bfa79b30e28dda2bc1070fb3810491329a73ca9366b95045022cac2781fd4ab470524251fff06e2159e3bee07d1c0f6fa5dcb63bca4cbfa6c52627ddbe90b1c58d97d3a22da832892c05ef1ae435eb18057529d2d7664766f203bc8b25372c86bdb99720896726f4d38ee343eab9fc3bac204f6fff7421b5ea02348ad80b260f6058201844d5ab4103e0aca4326c9", 0xa1, 0x20}, {0x3, 0x8, &(0x7f0000002580)='\x00', &(0x7f00000025c0)="3e884d71e2df6171fa9549deae020f318f623ea56f71b4588cb39457e5318f8c002adee5b4c1e05455a48064a6eb64abcf5a7fd1d8e1", 0x36, 0x28}]}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000002c00)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002780)={0x42c, 0x3f4, 0x1, 0x70bd27, 0x25dfdbfc, {0x4, 0x1, 0x27, [0x165b, 0x5, 0x39, 0x7, 0x0, 0x0, 0x8, 0x8, 0x9, 0x3, 0xb, 0xa, 0x0, 0x6, 0x4, 0xa0, 0x0, 0x1ff, 0x9, 0x4, 0xd65f, 0x6, 0x101, 0x10000, 0x0, 0xbc, 0x8, 0x0, 0x56d, 0x1, 0x8, 0xe, 0x3b, 0x3, 0x4, 0xc789, 0xce, 0x6, 0x0, 0xd, 0x2000000, 0x34, 0xdd, 0x6, 0x3, 0x100, 0x9, 0x800, 0x3, 0xb2f8, 0xc, 0xfff, 0x6d5, 0xd7, 0x8000, 0x200, 0x5, 0x0, 0x4, 0x7, 0x2, 0x2, 0x8, 0x1], [0x10, 0xb2000000, 0x9, 0x9, 0x47ce392, 0x4, 0x4, 0x1, 0x10000, 0x3, 0x8e, 0x0, 0xa00000, 0x6, 0x4, 0x7, 0x7ff, 0x7, 0x1, 0x3, 0x9, 0xaea, 0xfffffe00, 0x7, 0x0, 0x800, 0xd, 0xf, 0x4, 0x598, 0xdd62, 0x1ff, 0x4, 0xdd65, 0x4dd, 0x4a0, 0x9, 0x2, 0x1e89, 0x6, 0xfff, 0xffff, 0x0, 0x80000001, 0x1, 0x2, 0xa, 0x81, 0x7, 0x6, 0x6, 0xffffffff, 0x5, 0x0, 0x3, 0x5, 0x80000001, 0x0, 0x5, 0x3, 0x400000, 0x5, 0xc, 0x9], [0x99c1, 0x1a, 0x3, 0xf, 0xa4a, 0x4, 0x0, 0x1c4c, 0x2, 0x0, 0xfff, 0x2, 0x7f, 0x1, 0x80000000, 0x200, 0x8, 0x2, 0x0, 0x9282, 0x2, 0x9, 0xe, 0x400, 0x9, 0xa3, 0x401, 0x7, 0x7, 0x40, 0x2, 0x9, 0x2, 0x100, 0x2, 0x401, 0xfffffbff, 0x579, 0x3, 0x8000, 0x30, 0x6, 0x4, 0x8, 0x7fff, 0x2, 0xba6, 0x4, 0x13, 0x586, 0x9, 0x8, 0x2, 0xc, 0x9, 0x8, 0x0, 0xd, 0x2, 0x2, 0x1, 0x3, 0x3, 0x5], [0xfffffffd, 0x9, 0x6, 0xff, 0x200, 0x1, 0x1c, 0x0, 0x8, 0x7, 0x3, 0xc4, 0x1, 0x5, 0x8000, 0x1, 0x3, 0x8, 0x0, 0xfffffffc, 0xffff, 0x6, 0x0, 0x1, 0x0, 0xd, 0x753, 0x7, 0x1, 0x10001, 0x5, 0x6, 0x9, 0x5, 0x200, 0x7ff, 0x2, 0x7, 0xb, 0xfffffffa, 0x357be6f4, 0x7, 0x3, 0x2, 0x0, 0x3, 0xe970, 0x0, 0x0, 0x1, 0x3, 0x80000000, 0xffffff13, 0x2, 0x1, 0x0, 0xd, 0x2, 0x7, 0x3, 0x9c8d, 0x5b30, 0x4, 0x8], 0xb, [')\'-\xa9\x00', '\xbb\xbb\xbb\xbb\xbb\xbb']}, ["", "", ""]}, 0x42c}}, 0x1) r4 = openat$cgroup_subtree(r0, &(0x7f0000002c40), 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000002c80)={{0x0, 0xf28, 0x4, 0xb, 0x7f, 0x895, 0x6, 0x0, 0xba91, 0x3, 0x5, 0x80000001, 0x1c000000000000, 0x0, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003d80)={r3, &(0x7f0000002d40)="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", &(0x7f0000003d40)=@tcp=r0}, 0x20) r5 = syz_open_dev$I2C(&(0x7f0000003dc0), 0x9, 0x24580) fadvise64(r5, 0x8, 0xfffffffffffffff7, 0x1) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000003e00)=0x1) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000003e40)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000003e80), 0x5, 0x80000) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000003ec0)) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000003f00)) connect$llc(r5, &(0x7f0000003f40)={0x1a, 0x302, 0x6, 0x4, 0xfb, 0x0, @local}, 0x10) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000003f80)={0xe, {0x4, 0x50, 0xc0, 0x6b, "19cb43274b2bbbe801b865efe5dadb40debc88d4f97d525380cfddc48d0ba4a16bc39281f8d778816c6214959f520d66ee2532c7f59aa0f58d84667f7862ce7ef8bc640f4d1bb11a44faaac75e5f3f367b1a1ea0ddb072c73a847d52fc766db1e81c8b4fdbc7d9168c6170"}}, 0x77) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000004100)={0xffffffffffffffff, &(0x7f0000004000)=']#{}!/:}{/+-%\x00', 0xc68080, &(0x7f0000004040)={@align=0x2, {0x7, 0x25, 0x80000000, 0x34a}}, 0x4, &(0x7f0000004080)={@_ha_fsid}, &(0x7f00000040c0)=0xfffffffb}) r7 = openat$cgroup_int(r0, &(0x7f0000004140)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) read$proc_mixer(r0, &(0x7f0000004180)=""/202, 0xca) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000004280), 0x3) r8 = signalfd(r7, &(0x7f00000042c0)={[0x8]}, 0x8) sendmsg$alg(r8, &(0x7f0000004580)={0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000004300)="7207fcb79133194f38217641bc92eed19e6c1e6d51e0bcd4c21db9b471ca6ae6f21bb07425b8eb38ae6a4888c524ddf96c7b05bfef40254317a3d845793afd8442fa487308e82879b2cb304b7b15eaade0f12fd90386fdd4cb57dd3008bf78e8947bba557dff23e6a8b49a7065932136cebcb5a731dc3a338082a707b378fe7df01e5832bc2f6b17b4037552cc10a7e5e400c048eee81c893c9e63bbf21485b5", 0xa0}, {&(0x7f00000043c0)="a907c55f6c347be2081dcf49c12354e9ba604c3177232181dbb8a87888bbd9d1d4ed31479eb3aa28a51102271dcced8eacb9e1d24c74c6237d27571a1f6eee1f6a6da3e3270a3e87cbadcb39f1db667867af1abf45a06e27eed1d709b89446a140a957649ce3adb02cc7569ebcf35aae461e73c66dd023e49f71e987526ec85f8a861c24e320eed8a2b62a305accccf6f052e240c0322bbd9b089401a287771fa62ab3d2a73cee1b59b2dc4f93249407af622d1bf06e4c6b26d8ff7b6a2542c0aed2c0ea0c21e608f874036a4046f3baf0d0981dc4c4582762aae91174324529678f4d678a0f48", 0xe7}], 0x2, &(0x7f0000004500)=[@iv={0x68, 0x117, 0x2, 0x4e, "58f1c7ca259b5d4dd5b881afeac10460816fd2416a9600a5cf5154bdcd0141da43a36f8608efeaa08a21a599da01023fd36f26a7443da40c7fcb936557f8b3d9933a1b140095b2208de9997a40b2"}], 0x68, 0x4000400}, 0x1) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f00000046c0)={&(0x7f00000045c0), 0xc, &(0x7f0000004680)={&(0x7f0000004640)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x408d2) 2m13.736419975s ago: executing program 2 (id=162): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x31cf, &(0x7f0000000040)={0x0, 0x5000, 0x400, 0x0, 0x1005}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) close(0x3) openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x11}}}, &(0x7f0000000300)) r5 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r10, 0x4014563c, &(0x7f00000000c0)={0x1, {0xf8000002, 0x8b8, 0xc4f}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e040a0404"], 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r8, r9}, 0x2d) syz_emit_ethernet(0x1122, &(0x7f0000000840)=ANY=[], 0x0) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000280)={0x426, &(0x7f0000000000)=[{0x5, '\x00', @buffer={"b91265c7150c54674cca6b6eeba94e51eaf1d16da134d7585354e10a6f56c584", 0x20}, 0xfffffffc}, {0x30, '\x00', @data=0x401, 0xda}]}) 2m13.668935539s ago: executing program 2 (id=163): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000400)={@isdn={0x22, 0x4, 0x1, 0x7, 0x1}, {&(0x7f0000000040)=""/3, 0x3}, &(0x7f0000000140), 0x67}, 0xa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0xf72cb191e650c8e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0xc, 0x4, 0x200, 0x0, {}, {0x1, 0x1, 0x0, 0x0, 0x0, 0xfe, "05000100"}, 0x0, 0x2, {}, 0x20800}) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c52400760a89e01177d3d458dd4992861acfcff00", "f4bd000000801900", [0x0, 0x31]}}) 2m12.520824004s ago: executing program 2 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x24, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}, @nested={0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f000046d000/0x4000)=nil, 0x4000}, 0x1}) syz_usb_disconnect(0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_deladdr={0x40, 0x15, 0x1, 0x70bd29, 0x25dfdbfe, {0xa, 0x20, 0x8}, [@IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x416440, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/79, 0x4f, 0x1, &(0x7f0000000200)=""/21, 0x15}, &(0x7f0000000280)=0x40) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) 2m11.747880321s ago: executing program 2 (id=193): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000eb000/0x1000)=nil, 0x1000, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf253d00000008000300", @ANYRES32=r4, @ANYBLOB="08005d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89b1, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x8, 0x8000, 0xd, 0x7fffffff, {{0x9, 0x4, 0x2, 0x1f, 0x24, 0x66, 0x0, 0x42, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, {[@timestamp={0x44, 0xc, 0xee, 0x0, 0x0, [0x4, 0x4]}, @noop, @noop]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0xd, 0xfffff801}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000010029bd7000aeea1ef8ad45ffdbdf2500000000e465279ee27adbf8950b1acec4ac8c2e2477b382b1643cf02f8d7d355da3b5985f2d8312fee29fb9d1193279f37fdbe9090e73dc2d0008733491dd2601993407151662c657d8eb2587372e7083bd6185cc67d24f65ca77b062397aa448", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000014001680100001800c00090001000000a7040000"], 0x48}, 0x1, 0x0, 0x0, 0x20044005}, 0x0) r7 = syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}}) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0xfffffffc}}) io_uring_enter(r7, 0x6, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x24, r12, 0x1, 0x4070bd29, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 2m11.670537699s ago: executing program 2 (id=195): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000a00)={{}, "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"}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x10004, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000042404001c002b80080003001900000008000100", @ANYRES32=r4, @ANYBLOB="080008000a0000000024e9543a1134f1ad0db77da155a4e8d5424b02b98ecbf307785c0113381991261034e0bfcced559249faa01ac9e5f1c2676f704c9a8f49b2fe3086fc3b76c714c4b64674c65e2a2e7a70b5838c7be028af655b3b923a6e6a367bc80ab59380f348b6a925c091cb82e22cfb725407631357af7aae3d01080df549", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) r5 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source\x00', &(0x7f00000004c0)='//1#7.0.0.1/\xcb7\xcc\b\\\xd0\xe4\x85\xaf\xbb\x97yshare\x00$kV\xd6c\xa5\x19%\xe53\xefV5q\\\xb2.\x8e\xd4\xaa\xcd\x05\xc6Z\x12\xb6R?\xee1\xc5\x80~~h\x95\xbd\xdf\xb2\xe1\x1fK>\xe2\x17\xb6F{\xb9\xd9\x00\x00\x00\x01\xf5+x\n\x1c\x06\xc9\xe1\xd9\xed\x9d3\t\xaa\x93\xcf\x1d\xb0\x02\xc3#\xd4>\x9b\x81/\x8e\v\xda\xa2\x02_\xfc\x1b\xa7\xe7\x1e\xe4w', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000006c0)='ip\x00n!\x1a\x14\xbb\'4\xe00x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7004fddbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="2a003300001c06384b0211000001080223c8948fc8c3ca835050f2ff0006b108000601010101010101000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1m56.479974193s ago: executing program 33 (id=195): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000a00)={{}, "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"}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x10004, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000042404001c002b80080003001900000008000100", @ANYRES32=r4, @ANYBLOB="080008000a0000000024e9543a1134f1ad0db77da155a4e8d5424b02b98ecbf307785c0113381991261034e0bfcced559249faa01ac9e5f1c2676f704c9a8f49b2fe3086fc3b76c714c4b64674c65e2a2e7a70b5838c7be028af655b3b923a6e6a367bc80ab59380f348b6a925c091cb82e22cfb725407631357af7aae3d01080df549", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) r5 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source\x00', &(0x7f00000004c0)='//1#7.0.0.1/\xcb7\xcc\b\\\xd0\xe4\x85\xaf\xbb\x97yshare\x00$kV\xd6c\xa5\x19%\xe53\xefV5q\\\xb2.\x8e\xd4\xaa\xcd\x05\xc6Z\x12\xb6R?\xee1\xc5\x80~~h\x95\xbd\xdf\xb2\xe1\x1fK>\xe2\x17\xb6F{\xb9\xd9\x00\x00\x00\x01\xf5+x\n\x1c\x06\xc9\xe1\xd9\xed\x9d3\t\xaa\x93\xcf\x1d\xb0\x02\xc3#\xd4>\x9b\x81/\x8e\v\xda\xa2\x02_\xfc\x1b\xa7\xe7\x1e\xe4w', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000006c0)='ip\x00n!\x1a\x14\xbb\'4\xe00x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7004fddbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="2a003300001c06384b0211000001080223c8948fc8c3ca835050f2ff0006b108000601010101010101000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1m47.101412939s ago: executing program 4 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x541b, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c561f067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x20442, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b25, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYBLOB="8b36c403dbfa2d1a85a47e374347e736b863796fe112e05445bba2a0363ca7e148483d4eded52607b5da137c22f27ea1e3f26d831b1f0bc77a08b3a1c82a9233f9ea5ddfc5eaf22092c6f0dd42e59b96f8c57cb6e21514e98e8f723e3d62214ee777635c642a7369e84c7fba6ebe6117907a6259f0fe770071ed4eda719d0d7ce0069c36eb31ba137a5bd54cdafb2598aa35590985e30ce0497252bc77a25dc5cbd213ce256d94736e8bdd9352b4f197b098df6e6c994044bdd460e887d54e8b719a4d7fd95db6d6ed593d1feea79b0c9aaef5303e2859eed358", @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060022"], 0x4c}}, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) linkat(r3, &(0x7f0000000280)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00', 0x400) ioctl$EVIOCSKEYCODE(r3, 0x40084504, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)) lseek(0xffffffffffffffff, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) setxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000500)={'L+'}, 0x16, 0x3) 1m46.971119733s ago: executing program 4 (id=335): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000003, 0x13, r3, 0xfffff000) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$msr(r4, &(0x7f0000002980)=""/102399, 0x18fff) 1m46.858489359s ago: executing program 4 (id=339): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000202020207b1af8ff00000000bfa10000000000000701000002feffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000280)='GPL\x00', 0x3}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x10a, 0x0, 0xbc}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') syz_emit_ethernet(0x444, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r4, @ANYRES32=r0, @ANYRESDEC=r2], 0x0) fchdir(r4) r5 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) close(0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x19}}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630173100000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$unix(r3, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(r10, 0x851, 0x1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r9, 0x100, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1000003e) close_range(r7, r10, 0x6d0c58b3492f93fb) r11 = dup(r2) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) 1m45.97946114s ago: executing program 4 (id=352): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="769e110000000000000000000011000000000000"], 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10122, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 1m45.909563891s ago: executing program 4 (id=354): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x3, 0x0, 0x3b, 0x719d}, {0xfff8, 0x6, 0x7, 0x2}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000500050002000000050004001b9698dc257d2dc28f8a85000000000c00078008001240fffffff9"], 0x54}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x1000, 0x40000) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000340)=""/244) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r4, 0x8b32, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x16d) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1') r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000640)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) write(r5, &(0x7f0000000100)='-192.168.1.1', 0xc) 1m45.83109081s ago: executing program 4 (id=357): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "90c7205b89c6ba79f201fb2a7ccdec3f092308bf4d1ae199", "11da928cceb7f2257669a73e935ab02244656cfe8638fefb94440b907850c38e"}}}}}}, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) ioctl$MEMGETREGIONCOUNT(r1, 0x80044d07, &(0x7f0000000000)) socket(0x10, 0x3, 0xfffffffd) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0xc000}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000380)={0x1, 0x2, 0x1, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x140, 0x0) madvise(&(0x7f00000a7000/0x4000)=nil, 0x4000, 0xe) mprotect(&(0x7f00003ab000/0x4000)=nil, 0x4000, 0x6) 1m30.839424404s ago: executing program 34 (id=357): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "90c7205b89c6ba79f201fb2a7ccdec3f092308bf4d1ae199", "11da928cceb7f2257669a73e935ab02244656cfe8638fefb94440b907850c38e"}}}}}}, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) ioctl$MEMGETREGIONCOUNT(r1, 0x80044d07, &(0x7f0000000000)) socket(0x10, 0x3, 0xfffffffd) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0xc000}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000380)={0x1, 0x2, 0x1, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x140, 0x0) madvise(&(0x7f00000a7000/0x4000)=nil, 0x4000, 0xe) mprotect(&(0x7f00003ab000/0x4000)=nil, 0x4000, 0x6) 18.800571006s ago: executing program 1 (id=925): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00'}) 18.660171904s ago: executing program 1 (id=927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000005c0)={'gre0\x00', &(0x7f00000004c0)={'ip_vti0\x00', r5, 0x7, 0x20, 0xc, 0x2, {{0x1c, 0x4, 0x3, 0x4, 0x70, 0x66, 0x0, 0x1, 0x4, 0x0, @private=0xa010100, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0xc9, 0x1, 0x7, [{@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@rand_addr=0x64010100}, {@multicast1, 0x6}]}, @timestamp={0x44, 0x10, 0x8, 0x0, 0x7, [0x0, 0x5, 0x7]}, @timestamp_prespec={0x44, 0x1c, 0xf, 0x3, 0xb, [{@broadcast, 0xb2e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@loopback, 0x6}]}, @end]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd26, 0x60000000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="77cf", 0x2}], 0x1}, 0x40080) 18.29046386s ago: executing program 1 (id=928): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000400)={0x200, 0x200, 0x20, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc04464b8, &(0x7f0000000500)={0x0, 0x200, 0x200, 0x34325258, 0x0, [r1], [0x800, 0x0, 0x1]}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_GETNSID={0x1c, 0x5a, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20008095) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) close_range(r3, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x80000) r7 = dup(r5) ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0xb001}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendto(r6, &(0x7f0000000840)="96d103a989b3cc949eca7bbea746636b5732fa7efcbb3da255398c4b593a74a4f8ae8e3ab7ebecadb627fe194d30fc", 0x2f, 0x4c000, 0x0, 0x0) recvfrom(r7, &(0x7f0000000480), 0x2e, 0x0, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0007000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 18.089480322s ago: executing program 1 (id=930): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x119) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e22, 0x0, @mcast1, 0x7}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) chdir(&(0x7f0000000140)='./file0\x00') r2 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x560c, 0x1) landlock_restrict_self(r2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r6, 0x2, 0x0) r7 = openat(r6, &(0x7f0000000040)='./file0\x00', 0xc5e3022e0c036b81, 0x100) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) pidfd_getfd(r9, r7, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004140)={0x0, 0x0, 0x0}, &(0x7f0000004180)=0xc) write$FUSE_ATTR(r10, &(0x7f00000041c0)={0x78, 0x0, r11, {0x530, 0x1ff, 0x0, {0x1, 0x32, 0x8000000000000000, 0x7ff, 0x7, 0xffffffff, 0x6, 0x6, 0x5, 0x1000, 0x100, 0x0, r12, 0x9, 0x8000}}}, 0x78) getdents(r6, 0x0, 0x58) 18.000155489s ago: executing program 1 (id=931): sendmsg(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x4, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x2, 0x81, 0x9, 0xf9a6, 0xa756a868, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xe8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x5, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x6, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x400028, 0x5, 0xd500, 0xc, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x30, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x1022}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0), 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x0, 0x3ff, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x10000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 17.749927512s ago: executing program 1 (id=935): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x20000094) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000000040)=""/124, 0x7c}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f00000005c0)=""/91, 0x5b}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0xb919}], 0x4, 0x0, 0x0) (fail_nth: 19) 17.660958906s ago: executing program 35 (id=935): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x20000094) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000000040)=""/124, 0x7c}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f00000005c0)=""/91, 0x5b}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0xb919}], 0x4, 0x0, 0x0) (fail_nth: 19) 8.650165s ago: executing program 7 (id=1020): syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.380844122s ago: executing program 7 (id=1034): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregs(0xe, r2, 0x0, &(0x7f0000000480)=""/114) syz_open_procfs(r2, &(0x7f0000000040)='net/vlan/vlan1\x00') ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x8000001, 0xff92, 0x0, 0x1, 0x10000003}]}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x604, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000181401002bbd700000000000080001000000007d04b9ee0003000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x0) 7.380698377s ago: executing program 7 (id=1035): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000000080)={0xf, {"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", 0x1000}}, 0x1006) 4.290667068s ago: executing program 7 (id=1057): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x30, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000400)='syz0\x00') ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x48, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x48}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.040572582s ago: executing program 7 (id=1059): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) fstat(r0, &(0x7f0000000240)) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x6fea, &(0x7f0000000040)={0x0, 0x5a3f, 0x2, 0x2, 0x32e}, &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000180)) io_uring_enter(r2, 0x244b, 0xd1ae, 0x0, &(0x7f00000001c0)={[0x400]}, 0x8) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="40150b00000800000000000000e4b31a4a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) syz_usb_control_io$uac1(r1, &(0x7f0000000380)={0x14, &(0x7f0000000240)={0x40, 0xa, 0xf0, {0xf0, 0xe, "67f442898defd50b5f0af16cfde58bbdbc1471cbb37a8071f7cd7b1a786e12036677db160a4eae1340667a4ca630306c4d9c2ef5f3ca0dc444ab92f50de130ee3f27ef1c62df10ca227ebc5e876fb94b7c0a055d121fbab216b3db17047acd53f0765480e321e9949bb643125502882053fb6f86b0cd7dfd9b6cac6a2b4fb773aeb11cc3260e5ccb3fe3b554d531699a3f52a9305fe396bfde7a11032ac95ee45d6c822770e1d5dd218e8c731a0bd9f6fe2be211cd2996b0861cb589e8c3b343fc116eb47bd4bb6df38103756a1927a778811b81950b1c0ff6d1f049c8014a27bce7fd60d3371aebf7e3dd3550c4"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}}, &(0x7f0000000680)={0x44, &(0x7f0000000700)={0x0, 0x14, 0xab, "3ae48d80647c6caad8383bb17413ceac2e0641e1a8a4a2a3a4b1f5bde9841a4a46299ffae8475dd1e9017d8844c181ff41441cb8d8bd25cbc23d8d199a32f476148d9bcbe27424440b2268b61e8ee1701888dc1eb696c373c6ab76c0fe7f61906c92435e4694d6345b2db7193ff29135b809f7106c3eac91b9b0997bc1660c4bb73e7cd2ab9314bbc3918d0034d74a2bd930e7ee074982e4f3ce7359f93845333196000000000000000000"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000580)={0x20, 0x81, 0x2, "feac"}, &(0x7f0000000540)={0x20, 0x82, 0x1, '~'}, &(0x7f0000000140)={0x20, 0x83, 0x3, "b08e09"}, &(0x7f0000000500)={0x20, 0x84, 0x4, "0000020f"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "1ad600"}}) 3.78131629s ago: executing program 6 (id=1064): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x6f41bcbb, @empty, 0x2}, 0x1c) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x6, 0x6, 0x6, 0x0, 0x0, [{{r0}, 0x200}, {{r0}, 0x8}, {{r0}, 0x8000000000000001}, {{r0}, 0x5}, {{r0}, 0x5}, {{r0}, 0x5}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5421, 0x0) writev(r3, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, 0x0, 0x800) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r2, &(0x7f0000000700)='h', 0x1) recvfrom(r2, &(0x7f0000000040)=""/156, 0x9c, 0x112, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000040)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010023011000000000000000000000000100", @ANYRES32=r6, @ANYBLOB="00000100", @ANYRES32=r6, @ANYBLOB], 0x33}}, 0x0) sendmsg$NFC_CMD_START_POLL(r7, 0x0, 0x0) 3.708349615s ago: executing program 6 (id=1066): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x4, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x2, 0x81, 0x9, 0xf9a6, 0xa756a868, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xe8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x5, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x6, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x400028, 0x5, 0xd500, 0xc, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x30, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x1022}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0), 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x0, 0x3ff, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x10000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.705315808s ago: executing program 3 (id=1067): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x30, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000400)='syz0\x00') ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x48, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x48}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.430426659s ago: executing program 3 (id=1068): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (async) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000010c0)={[0x8, 0x4, 0xfffffffeffffffff, 0x1, 0x739a, 0x9, 0x38, 0x4, 0x8, 0x0, 0xa981, 0x7fffffffffffffff, 0x50, 0x7fffffffffffffff, 0x100000001, 0x10], 0x6000, 0x400}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) timer_create(0x2, &(0x7f00000002c0)={0x0, 0xa, 0x2, @thr={&(0x7f0000000140)="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", &(0x7f0000000240)="f8cf234cd163cff3f15c9f"}}, &(0x7f0000000340)=0x0) timer_settime(r2, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000003c0)) (async) r3 = socket(0x2, 0x80805, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) timer_getoverrun(r2) (async) write$tun(r4, &(0x7f0000001180)=ANY=[@ANYBLOB="080008000700000000031400000045f0001400000000002f907800000000ffffffffa20022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000390780000aef7821d637615bfff208c26de4d390c0774471ed67338b248a9502a87c633aa527690b58831c21cacc27dccfe10fde4e0119ea62b9a98c6ef411404c66acd0e2d399bb7662d4816c87e23823ff2fe624d7343df366e56637f2e6885f914af27e5f174345663fb6865de15c7cfa28fc142844077bc9e6b1b5dc6dea9fc7ea93ad46ab7670b0ad8ba1437caeb87985c03c26f35e7330ea0530bf46046e9eb3f2511"], 0x36) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0xa, 0x0, &(0x7f0000000240)) (async) r6 = socket$kcm(0x2, 0xa, 0x2) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, 0x0) (async) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async) sendmsg$nl_route(r7, 0x0, 0x0) (async) syz_emit_ethernet(0x26, &(0x7f0000001000)=ANY=[@ANYBLOB="122233445566aaaaaaaaaaaa810000010800450000140000000040000000000000000000"], 0x0) pidfd_getfd(r1, r4, 0x0) 3.250228077s ago: executing program 3 (id=1071): fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = getpid() getpriority(0x0, r2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x1c3) write(r5, &(0x7f00000004c0)='44100,48000,88200,96000,176400', 0x1e) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x101042, 0x15) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xe7c) (async) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xe7c) read$FUSE(r6, &(0x7f0000002600)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe00000100000000050001000400000008000400", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000500"/20, @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYRES16=r7, @ANYRES8=r5, @ANYRESHEX=0x0], 0x20}}, 0x4000004) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x8}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff, 0x8000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x2}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x8010) sendmmsg$inet(r8, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001240)="cc5fd2518c506ebf347763559129e729164723d0e47c59f1b71a16", 0x1b}, {0x0}], 0x2}}], 0x1, 0x2084) (async) sendmmsg$inet(r8, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001240)="cc5fd2518c506ebf347763559129e729164723d0e47c59f1b71a16", 0x1b}, {0x0}], 0x2}}], 0x1, 0x2084) 3.189644654s ago: executing program 3 (id=1074): syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffffffffffff}]}]}, 0x58}}, 0x6001) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000fc0)={&(0x7f00000005c0)={0x9b0, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x994, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b7510a7219f03757d393158febeda911e710d65298637bf44513ffe975a0bc93"}, @WGPEER_A_FLAGS={0x8}]}, {0x178, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "31e89db0bb63c9af5a96b0161f258591628bade3a56bb852b744fa3c9e58d392"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010101}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe2f}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ff144545dae88dd93c68fb645516f9c16a49967e2c2f79ccef1b0dd35b7de53c"}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4d9c}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e78f503557b45eeadb75092a6212147f06a68851c5670ef8d4bd001c6d10b467"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0ef42c724c0f35d28848be7b87811bf8ecf1b684eea800761839229758aef18d"}]}, {0x4}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cdda7ce0c116ee668e79fc33a843088132368675d0a63e0637ba463fe7487d15"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @empty, 0x8c}}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "93a39e74fd10f03e0442ca9e56170f503636f4b629620e29ba88d80219f0c430"}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1000, @empty, 0x4}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @local, 0x9}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x630, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_ALLOWEDIPS={0x2d8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8cd0d3a426b21ab6a366950bff7ee335c2f7f4d859953388255b551bd09523f7"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5a866f2b5f248d30abe63e7b7534eafbb973d55551685d44e1cac74583858419"}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @local, 0x205}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}}]}]}]}, 0x9b0}}, 0x4000000) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) (async) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r3, &(0x7f0000000f00)="5bfd", 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000100003ea00010000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="00000000400000002c00128008000100677470002000028014000800000000000000000000000000000000000500050001000000"], 0x4c}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x24040000) 3.110179822s ago: executing program 5 (id=1076): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x30, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000400)='syz0\x00') ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.020613982s ago: executing program 3 (id=1077): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x0) syz_usb_disconnect(r0) r3 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT=r2], 0x0) syz_usb_control_io$printer(r3, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x3, 0xcc, {0xcc, 0x1c, "f6f9523e1a5933bcc4b93cd5b1fdd6d3b074c520bbdd4ef09e17a279b35e815372cc7a047f7e367b4e13e1544b60749e43a93bd0539b2d370699d04d5a91511f18979175f10818a39aec1c2f576b76f2a426ff901461be87f91f045e79d621a459fb93355675019cda08c8260067e260e85a8902ec76e269503fc24876b212981d6b31d20c66681fb76db44f9a517a4b2fd78b8ba346a2e71127457772def15edcf790177cd6fd7a833237153390888e2b4d657b9241d3766ccb01a9847f9ef413d08cce4e397222ccbd"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="4031200008005148bbe2b95365f0b8afe8993f5857dfea1c94a9b4536bd7cb49bf24c983a68b"], &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x0, 0x94, {0x92, "b2e255bdf3ad42880ca2c35a720dafc17d5d700ce2cc3075071ba450167cbbc7d4b74f161309eb766c5abe72688175e6b661543ed3d88b0163f0ee8a36ac3649612566937028872ec3858048cb579c29cff1155cf3a31571ed878b428393cf25a83304e0e0121188d1968fb92b92dba15050358d46ff54fc6d16b3614c0903928462678addcdf418c26f9242b185ec901b22"}}, &(0x7f0000000400)={0x20, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x9d}}) write$char_usb(r4, 0x0, 0x0) syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x80, 0x2, 0x400, 0x8, 0x0, 0x2}, {0x9, 0x5, 0x4, 0x2, 0x1af, 0x7, 0x4, 0x1}, {0x9, 0x5, 0x0, 0x3, 0x3ff, 0x7, 0x8, 0x3}}}}}}]}}, 0x0) 2.880276374s ago: executing program 5 (id=1078): mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x16b9e}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x19fcc0, &(0x7f0000000000)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x60000, 0x156) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) getdents64(r1, 0x0, 0x0) 2.879883491s ago: executing program 5 (id=1079): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000000)='ocfs2_dlmfs\x00', 0x400, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x509000, 0x0) r1 = openat(r0, &(0x7f0000000380)='./config\x00', 0x202043, 0x50) futex_waitv(&(0x7f0000000d80)=[{0x1, 0x0, 0x4}], 0x1, 0x0, 0x0, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000040)='./config\x00', 0x0, 0x18}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf256401010000000000000000000000000020010000000000000000000000000001000000004e2100020200000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe32000000fe80000000000000000000000000001f00000000000000000000000000000000fdffffffffffffffe9e000000000000001000000000000000900000000000000ffffff7f0000000043050000000000000400000000000000ffffffffffffff7ffcffffffffffffffe2eb0000000000000200000000000000000000002cbd7000003500000200040050000000000000001c00040007004e244e200000ac14142e000000000000000000000000600012"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x40400c4) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "9d5ad2", "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"}}, 0x110) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl(r1, 0x3, &(0x7f0000000100)="f20af81b7a18e0ac86a6a0a3e89182a9d85c5e07a621b97e6a4f0e445ad3a397ad68a1fea23bb688a1d6fc2a592ec598bcaf6d0e5dab9b646bfa716e30e4387810064f98990408c79858da5a03219b11b3e1b28e02dc77512d6c43b1f400871f011aa35925921b672e7cb21540516599f5656a05aca5") 2.727612305s ago: executing program 6 (id=1080): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) lseek(r1, 0x9, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 2.727150763s ago: executing program 6 (id=1081): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x2404c090) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0x40a2b9, 0x6, 0x7, 0xe1, 0x8, 0xfc000003, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x4, 0xd, 0x0, 0x0, 0x6, 0x7, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x94, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0x10000, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x5, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xff, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x80000000, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200022, 0x7f, 0x37, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x1, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x7, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x1d, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0x7fff, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0xbe0, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000008001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000380)="c4c2599e1966ba4000b002cb66b8fc00dc89b1d0d0d00000004a0066b81c018ed8c7442400bf3d0000c744240200a00000c7442406000000000f011c24ea742e00002f002e2e0f070f01c90f23c80f21f835000060000f23f8c9", 0xfffffffffffffd08}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./proc\x00', 0x6f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r9, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0xfffffedf, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES64=r6], 0xb4}}, 0x4010) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) 2.34975127s ago: executing program 6 (id=1082): r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/netfilter\x00') read$FUSE(r1, 0x0, 0x0) ioctl$COMEDI_CANCEL(0xffffffffffffffff, 0x6407) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000080)=0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x10200) pipe2$9p(&(0x7f0000000140), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno']) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f00000000c0)=0x3842fb) r4 = syz_open_dev$radio(&(0x7f00000005c0), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000380)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x5, '\x00', @ptr=0x21}}) 2.34951107s ago: executing program 6 (id=1083): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000000209010100000000000000000a0001800002001000007a3000000200100002000c000280050001002100000065b0bca7dfe4cf07906651c2e10acc19072b36b76c0c36ea2284354d495e829dbaa0f3f768586686691404ee1cdeda6eacfdda99dddacce16b33f6b7cada8f39ca01a4f52e33b08a640210a0ddf4d24596e76c1c870d42a44fa549a82106b8b1610cfb4bceac"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000400)='syz0\x00') ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x48, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0xfffffffffffffebd, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x48}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.970034585s ago: executing program 5 (id=1084): r0 = creat(&(0x7f0000000400)='./file0\x00', 0x128) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0) copy_file_range(r0, &(0x7f0000000040)=0x1, r0, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async, rerun: 32) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0xa0402) (async) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f00000000c0)=0x2, 0xfffffffffffffff8, 0x3) (async, rerun: 32) r4 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) (async) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x1c, 0x1, 0x0, 0x3, 0x0}) (async, rerun: 32) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1.910443046s ago: executing program 5 (id=1085): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0007000000000900020073797a31000000070500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.910206923s ago: executing program 5 (id=1086): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x30, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000400)='syz0\x00') ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.550604144s ago: executing program 7 (id=1087): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 18) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="77cf", 0x2}], 0x1}, 0x40080) 0s ago: executing program 3 (id=1088): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x4, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x2, 0x81, 0x9, 0xf9a6, 0xa756a868, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xe8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x5, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x6, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x400028, 0x5, 0xd500, 0xc, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x30, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x1022}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0), 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x0, 0x3ff, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x10000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): ject_r:configfs_t tclass=dir permissive=1 [ 159.653301][ T43] audit: type=1400 audit(1788930728.569:646): avc: denied { write } for pid=8704 comm="syz.6.716" name="spaces" dev="configfs" ino=34625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.654012][ T43] audit: type=1400 audit(1788930728.569:647): avc: denied { write } for pid=8704 comm="syz.6.716" name="nodes" dev="configfs" ino=36441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.851932][ T8708] jffs2: notice: (8708) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 159.913032][ T43] audit: type=1400 audit(1788930728.829:648): avc: denied { watch } for pid=8707 comm="syz.6.717" path="/55" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 159.916248][ T43] audit: type=1400 audit(1788930728.829:649): avc: denied { set_context_mgr } for pid=8707 comm="syz.6.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 159.919060][ T43] audit: type=1400 audit(1788930728.839:650): avc: denied { write } for pid=8707 comm="syz.6.717" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.919363][ T43] audit: type=1400 audit(1788930728.839:651): avc: denied { add_name } for pid=8707 comm="syz.6.717" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.919638][ T43] audit: type=1400 audit(1788930728.839:652): avc: denied { create } for pid=8707 comm="syz.6.717" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 159.925808][ T43] audit: type=1400 audit(1788930728.849:653): avc: denied { read write open } for pid=8707 comm="syz.6.717" path="/55/mnt/fillfile" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 161.524913][ T8678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.546324][ T8730] syzkaller0: entered promiscuous mode [ 161.546413][ T8730] syzkaller0: entered allmulticast mode [ 161.713282][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.726'. [ 161.924943][ T5927] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 162.074931][ T5927] usb 11-1: Using ep0 maxpacket: 16 [ 162.077353][ T5927] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 162.077410][ T5927] usb 11-1: no configurations [ 162.077430][ T5927] usb 11-1: can't read configurations, error -22 [ 162.204952][ T5927] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 162.355050][ T5927] usb 11-1: Using ep0 maxpacket: 16 [ 162.355520][ T5927] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 162.355539][ T5927] usb 11-1: no configurations [ 162.355546][ T5927] usb 11-1: can't read configurations, error -22 [ 162.355729][ T5927] usb usb11-port1: attempt power cycle [ 162.695530][ T5927] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 162.715341][ T5927] usb 11-1: Using ep0 maxpacket: 16 [ 162.717996][ T5927] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 162.718044][ T5927] usb 11-1: no configurations [ 162.718065][ T5927] usb 11-1: can't read configurations, error -22 [ 162.763377][ T64] Bluetooth: hci2: Malformed LE Event: 0x1d [ 162.854947][ T5927] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 162.876242][ T5927] usb 11-1: Using ep0 maxpacket: 16 [ 162.876724][ T5927] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 162.876754][ T5927] usb 11-1: no configurations [ 162.876761][ T5927] usb 11-1: can't read configurations, error -22 [ 162.877119][ T5927] usb usb11-port1: unable to enumerate USB device [ 163.024952][ T30] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 163.195746][ T30] usb 6-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 163.197082][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.197116][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 163.197137][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 163.197155][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 163.197172][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 163.199357][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.199374][ T30] usb 6-1: Product: syz [ 163.199387][ T30] usb 6-1: Manufacturer: syz [ 163.199400][ T30] usb 6-1: SerialNumber: syz [ 163.202571][ T8750] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 163.202719][ T8750] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 163.202851][ T8750] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 163.205794][ T30] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected [ 163.206057][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 163.208082][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 163.208164][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 163.208241][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 163.211850][ T30] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 163.511832][ T30] usb 6-1: USB disconnect, device number 19 [ 163.517295][ T30] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 163.517808][ T30] keyspan 6-1:1.0: device disconnected [ 163.601437][ T8761] xt_bpf: check failed: parse error [ 163.715655][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 164.732868][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 164.732989][ T43] audit: type=1400 audit(1788930733.649:656): avc: denied { getattr } for pid=8772 comm="syz.6.737" path="/59/mnt/trace_marker" dev="tracefs" ino=6319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 164.734288][ T43] audit: type=1400 audit(1788930733.649:657): avc: denied { ioctl } for pid=8772 comm="syz.6.737" path="/59/mnt/trace_marker" dev="tracefs" ino=6319 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 164.831121][ T8779] usb usb8: usbfs: process 8779 (syz.6.740) did not claim interface 0 before use [ 164.895813][ T8783] netlink: 28 bytes leftover after parsing attributes in process `syz.6.742'. [ 164.895898][ T8783] netlink: 'syz.6.742': attribute type 7 has an invalid length. [ 164.895950][ T8783] netlink: 'syz.6.742': attribute type 8 has an invalid length. [ 164.895960][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.742'. [ 164.899053][ T8783] ip6gretap0: entered promiscuous mode [ 164.902940][ T8783] ip6gretap0: left promiscuous mode [ 164.947000][ T8784] netlink: 32 bytes leftover after parsing attributes in process `syz.6.742'. [ 165.034039][ T8786] syzkaller1: entered promiscuous mode [ 165.034109][ T8786] syzkaller1: entered allmulticast mode [ 165.105015][ T8788] Bluetooth: hci0: Frame reassembly failed (-90) [ 165.395938][ T9] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 165.545026][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 165.546082][ T9] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 165.547666][ T9] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 165.547694][ T9] usb 11-1: can't read configurations, error -61 [ 165.675083][ T9] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 165.824983][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 165.825550][ T9] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 165.827002][ T9] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 165.827019][ T9] usb 11-1: can't read configurations, error -61 [ 165.827191][ T9] usb usb11-port1: attempt power cycle [ 165.917985][ T8755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.008183][ T8801] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.746'. [ 166.008234][ T8801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.746'. [ 166.164928][ T9] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 166.185340][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 166.185815][ T9] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 166.186938][ T9] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 166.186955][ T9] usb 11-1: can't read configurations, error -61 [ 166.264954][ T30] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 166.314942][ T9] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 166.335409][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 166.335991][ T9] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 166.337108][ T9] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 166.337124][ T9] usb 11-1: can't read configurations, error -61 [ 166.337311][ T9] usb usb11-port1: unable to enumerate USB device [ 166.414932][ T30] usb 10-1: Using ep0 maxpacket: 16 [ 166.417071][ T30] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 166.420807][ T30] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.424310][ T30] usb 10-1: config 0 interface 0 has no altsetting 0 [ 166.427966][ T30] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.430747][ T30] usb 10-1: Product: syz [ 166.430756][ T30] usb 10-1: Manufacturer: syz [ 166.430764][ T30] usb 10-1: SerialNumber: syz [ 166.436537][ T30] usb 10-1: config 0 descriptor?? [ 166.642388][ C1] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 166.646174][ T30] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input42 [ 166.653513][ T30] imon:send_packet: packet tx failed (-71) [ 166.664910][ T30] imon 10-1:0.0: panel buttons/knobs setup failed [ 166.704912][ T30] rc_core: IR keymap rc-imon-pad not found [ 166.704954][ T30] Registered IR keymap rc-empty [ 166.705026][ T30] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 166.705036][ T30] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 166.705564][ T30] imon:send_packet: packet tx failed (-71) [ 166.724961][ T30] imon 10-1:0.0: remote input dev register failed [ 166.725126][ T30] imon 10-1:0.0: imon_init_intf0: rc device setup failed [ 166.732164][ T30] imon 10-1:0.0: unable to initialize intf0, err 0 [ 166.732262][ T30] imon:imon_probe: failed to initialize context! [ 166.732273][ T30] imon 10-1:0.0: unable to register, err -19 [ 166.733911][ T30] usb 10-1: USB disconnect, device number 19 [ 166.890943][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 166.892017][ T43] audit: type=1400 audit(1788930735.809:658): avc: denied { read } for pid=8810 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.893179][ T43] audit: type=1400 audit(1788930735.809:659): avc: denied { read write } for pid=8810 comm="syz.3.751" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 166.893509][ T43] audit: type=1400 audit(1788930735.809:660): avc: denied { open } for pid=8810 comm="syz.3.751" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 166.919017][ T73] hid-generic 0005:0009:0306.0007: hidraw1: BLUETOOTH HID v0.03 Device [syz0] on syz0 [ 167.135150][ T5728] Bluetooth: hci0: command 0x1003 tx timeout [ 167.137999][ T64] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 167.145030][ T30] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 167.211174][ T8817] FAULT_INJECTION: forcing a failure. [ 167.211174][ T8817] name failslab, interval 1, probability 0, space 0, times 0 [ 167.211265][ T8817] CPU: 0 UID: 0 PID: 8817 Comm: syz.1.753 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.211305][ T8817] Tainted: [L]=SOFTLOCKUP [ 167.211313][ T8817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.211323][ T8817] Call Trace: [ 167.211330][ T8817] [ 167.211339][ T8817] dump_stack_lvl+0x100/0x190 [ 167.211366][ T8817] should_fail_ex.cold+0x5/0xa [ 167.211393][ T8817] should_failslab+0xc2/0x120 [ 167.211424][ T8817] kmem_cache_alloc_noprof+0x92/0x6a0 [ 167.211450][ T8817] ? skb_clone+0x190/0x400 [ 167.211479][ T8817] skb_clone+0x190/0x400 [ 167.211500][ T8817] netlink_broadcast_filtered+0xb22/0xf20 [ 167.211541][ T8817] netlink_broadcast+0x39/0x50 [ 167.211569][ T8817] kobject_uevent_env+0xcdd/0x18b0 [ 167.211597][ T8817] ? lockdep_init_map_type+0x5c/0x250 [ 167.211622][ T8817] swnode_register+0x55d/0x750 [ 167.211655][ T8817] fwnode_create_software_node+0x1c8/0x3f0 [ 167.211685][ T8817] device_create_managed_software_node+0x103/0x270 [ 167.211708][ T8817] iommufd_test+0x3007/0x6600 [ 167.211731][ T8817] ? __lock_acquire+0x5c0/0x1f40 [ 167.211750][ T8817] ? __lock_acquire+0x5c0/0x1f40 [ 167.211769][ T8817] ? __pfx_iommufd_test+0x10/0x10 [ 167.211785][ T8817] ? tomoyo_path_number_perm+0x188/0x580 [ 167.211817][ T8817] ? lock_acquire+0x1d1/0x380 [ 167.211835][ T8817] ? __might_fault+0xc5/0x140 [ 167.211859][ T8817] ? find_held_lock+0x2b/0x80 [ 167.211881][ T8817] ? __might_fault+0xc5/0x140 [ 167.211916][ T8817] iommufd_fops_ioctl+0x358/0x520 [ 167.211939][ T8817] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 167.211956][ T8817] ? __fget_files+0x34/0x3d0 [ 167.211989][ T8817] ? selinux_file_ioctl+0x13b/0x290 [ 167.212006][ T8817] ? selinux_file_ioctl+0xb6/0x290 [ 167.212024][ T8817] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 167.212046][ T8817] __x64_sys_ioctl+0x18e/0x210 [ 167.212066][ T8817] do_syscall_64+0x123/0x790 [ 167.212091][ T8817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.212109][ T8817] RIP: 0033:0x7f3cc219e159 [ 167.212125][ T8817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.212140][ T8817] RSP: 002b:00007f3cc2fc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.212160][ T8817] RAX: ffffffffffffffda RBX: 00007f3cc2425fa0 RCX: 00007f3cc219e159 [ 167.212171][ T8817] RDX: 0000200000000140 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 167.212183][ T8817] RBP: 00007f3cc223503b R08: 0000000000000000 R09: 0000000000000000 [ 167.212194][ T8817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.212203][ T8817] R13: 00007f3cc2426038 R14: 00007f3cc2425fa0 R15: 00007ffd33533428 [ 167.212227][ T8817] [ 167.213964][ T8817] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 167.295138][ T30] usb 10-1: Using ep0 maxpacket: 16 [ 167.295604][ T30] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 167.296388][ T30] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.296403][ T30] usb 10-1: config 0 interface 0 has no altsetting 0 [ 167.297912][ T30] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.297924][ T30] usb 10-1: Product: syz [ 167.297931][ T30] usb 10-1: Manufacturer: syz [ 167.297938][ T30] usb 10-1: SerialNumber: syz [ 167.299273][ T30] usb 10-1: config 0 descriptor?? [ 167.302016][ T8822] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 167.388958][ T5776] nci: nci_ntf_packet: unknown ntf opcode 0x61e [ 167.503698][ T30] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input44 [ 167.764918][ T30] rc_core: IR keymap rc-imon-pad not found [ 167.765005][ T30] Registered IR keymap rc-empty [ 167.765066][ T30] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 167.765076][ T30] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 167.918292][ T30] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 167.926395][ T8836] FAULT_INJECTION: forcing a failure. [ 167.926395][ T8836] name failslab, interval 1, probability 0, space 0, times 0 [ 167.926465][ T8836] CPU: 3 UID: 0 PID: 8836 Comm: syz.3.758 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.926491][ T8836] Tainted: [L]=SOFTLOCKUP [ 167.926496][ T8836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.926502][ T8836] Call Trace: [ 167.926507][ T8836] [ 167.926511][ T8836] dump_stack_lvl+0x100/0x190 [ 167.926531][ T8836] should_fail_ex.cold+0x5/0xa [ 167.926548][ T8836] should_failslab+0xc2/0x120 [ 167.926562][ T8836] __kmalloc_cache_noprof+0x91/0x6d0 [ 167.926579][ T8836] ? configfs_write_iter+0x388/0x4e0 [ 167.926586][ T30] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input45 [ 167.926598][ T8836] configfs_write_iter+0x388/0x4e0 [ 167.926616][ T8836] vfs_write+0x6af/0x1050 [ 167.926628][ T8836] ? __pfx_configfs_write_iter+0x10/0x10 [ 167.926646][ T8836] ? __pfx_vfs_write+0x10/0x10 [ 167.926655][ T8836] ? find_held_lock+0x2b/0x80 [ 167.926680][ T8836] ksys_write+0x12a/0x250 [ 167.926691][ T8836] ? __pfx_ksys_write+0x10/0x10 [ 167.926706][ T8836] do_syscall_64+0x123/0x790 [ 167.926721][ T8836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.926734][ T8836] RIP: 0033:0x7fe48079e159 [ 167.926743][ T8836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.926753][ T8836] RSP: 002b:00007fe4816b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.926765][ T8836] RAX: ffffffffffffffda RBX: 00007fe480a25fa0 RCX: 00007fe48079e159 [ 167.926772][ T8836] RDX: 0000000000000110 RSI: 0000200000000180 RDI: 0000000000000003 [ 167.926778][ T8836] RBP: 00007fe4816b4090 R08: 0000000000000000 R09: 0000000000000000 [ 167.926785][ T8836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.926791][ T8836] R13: 00007fe480a26038 R14: 00007fe480a25fa0 R15: 00007ffcacc219f8 [ 167.926805][ T8836] [ 167.929259][ T30] imon 10-1:0.0: iMON device (15c2:0045, intf0) on usb<10:20> initialized [ 168.018734][ T8839] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.759'. [ 168.018781][ T8839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.759'. [ 168.020774][ T43] audit: type=1400 audit(1788930736.939:661): avc: denied { mounton } for pid=8837 comm="syz.3.759" path="/206/config/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction" dev="configfs" ino=37291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 168.103540][ C1] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 168.103876][ T30] usb 10-1: USB disconnect, device number 20 [ 168.564942][ T73] usb 11-1: new full-speed USB device number 28 using dummy_hcd [ 168.635035][ T8851] FAULT_INJECTION: forcing a failure. [ 168.635035][ T8851] name failslab, interval 1, probability 0, space 0, times 0 [ 168.635082][ T8851] CPU: 3 UID: 0 PID: 8851 Comm: syz.5.762 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.635109][ T8851] Tainted: [L]=SOFTLOCKUP [ 168.635114][ T8851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.635121][ T8851] Call Trace: [ 168.635126][ T8851] [ 168.635130][ T8851] dump_stack_lvl+0x100/0x190 [ 168.635150][ T8851] should_fail_ex.cold+0x5/0xa [ 168.635167][ T8851] should_failslab+0xc2/0x120 [ 168.635182][ T8851] kmem_cache_alloc_noprof+0x92/0x6a0 [ 168.635194][ T8851] ? do_getname+0x35/0x390 [ 168.635213][ T8851] do_getname+0x35/0x390 [ 168.635229][ T8851] do_sys_openat2+0xc7/0x1e0 [ 168.635244][ T8851] ? __pfx_do_sys_openat2+0x10/0x10 [ 168.635258][ T8851] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.635277][ T8851] __x64_sys_openat+0x12d/0x210 [ 168.635291][ T8851] ? __pfx___x64_sys_openat+0x10/0x10 [ 168.635312][ T8851] do_syscall_64+0x123/0x790 [ 168.635326][ T8851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.635337][ T8851] RIP: 0033:0x7ff59059e159 [ 168.635346][ T8851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.635357][ T8851] RSP: 002b:00007ff591512028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 168.635369][ T8851] RAX: ffffffffffffffda RBX: 00007ff590825fa0 RCX: 00007ff59059e159 [ 168.635377][ T8851] RDX: 0000000000080000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 168.635384][ T8851] RBP: 00007ff59063503b R08: 0000000000000000 R09: 0000000000000000 [ 168.635390][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.635397][ T8851] R13: 00007ff590826038 R14: 00007ff590825fa0 R15: 00007ffc77302638 [ 168.635410][ T8851] [ 168.725767][ T73] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.730874][ T73] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 168.735683][ T73] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.735706][ T73] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.735742][ T73] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.750902][ T73] usb 11-1: config 0 descriptor?? [ 168.874034][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'. [ 168.889456][ T8854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.898908][ T8854] macvlan2: entered promiscuous mode [ 168.900769][ T8854] macvlan2: entered allmulticast mode [ 168.903596][ T8854] bond1: entered promiscuous mode [ 168.905905][ T8854] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 168.909786][ T8854] bond1: left promiscuous mode [ 169.449898][ T73] usbhid 11-1:0.0: can't add hid device: -71 [ 169.449995][ T73] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 169.451181][ T73] usb 11-1: USB disconnect, device number 28 [ 170.184256][ T8867] FAULT_INJECTION: forcing a failure. [ 170.184256][ T8867] name failslab, interval 1, probability 0, space 0, times 0 [ 170.184339][ T8867] CPU: 1 UID: 0 PID: 8867 Comm: syz.6.774 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.184370][ T8867] Tainted: [L]=SOFTLOCKUP [ 170.184375][ T8867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.184382][ T8867] Call Trace: [ 170.184386][ T8867] [ 170.184391][ T8867] dump_stack_lvl+0x100/0x190 [ 170.184411][ T8867] should_fail_ex.cold+0x5/0xa [ 170.184428][ T8867] should_failslab+0xc2/0x120 [ 170.184441][ T8867] kmem_cache_alloc_noprof+0x92/0x6a0 [ 170.184454][ T8867] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 170.184472][ T8867] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 170.184492][ T8867] mmu_topup_memory_caches+0x25/0x170 [ 170.184505][ T8867] kvm_mmu_load+0xe8/0x2580 [ 170.184517][ T8867] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 170.184534][ T8867] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 170.184552][ T8867] ? __pfx_kvm_mmu_load+0x10/0x10 [ 170.184563][ T8867] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 170.184575][ T8867] ? kvm_check_and_inject_events+0x896/0x1050 [ 170.184589][ T8867] vcpu_run+0x395d/0x5e80 [ 170.184601][ T8867] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 170.184622][ T8867] ? __pfx_vcpu_run+0x10/0x10 [ 170.184636][ T8867] ? lock_acquire+0x1d1/0x380 [ 170.184648][ T8867] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 170.184662][ T8867] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 170.184678][ T8867] ? __local_bh_enable_ip+0xa5/0x120 [ 170.184692][ T8867] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 170.184705][ T8867] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 170.184722][ T8867] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 170.184735][ T8867] ? lock_acquire+0x1d1/0x380 [ 170.184746][ T8867] ? do_raw_write_lock+0x11e/0x260 [ 170.184759][ T8867] ? find_held_lock+0x2b/0x80 [ 170.184774][ T8867] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 170.184788][ T8867] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 170.184805][ T8867] kvm_vcpu_ioctl+0x730/0x1700 [ 170.184821][ T8867] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 170.184847][ T8867] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 170.184864][ T8867] ? do_vfs_ioctl+0x226/0x13e0 [ 170.184876][ T8867] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 170.184885][ T8867] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 170.184898][ T8867] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 170.184912][ T8867] ? __fget_files+0x34/0x3d0 [ 170.184931][ T8867] ? selinux_file_ioctl+0x13b/0x290 [ 170.184940][ T8867] ? selinux_file_ioctl+0xb6/0x290 [ 170.184952][ T8867] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 170.184967][ T8867] __x64_sys_ioctl+0x18e/0x210 [ 170.184979][ T8867] do_syscall_64+0x123/0x790 [ 170.184994][ T8867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.185005][ T8867] RIP: 0033:0x7fb5f139e159 [ 170.185015][ T8867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.185025][ T8867] RSP: 002b:00007fb5f22ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.185036][ T8867] RAX: ffffffffffffffda RBX: 00007fb5f1625fa0 RCX: 00007fb5f139e159 [ 170.185043][ T8867] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 170.185049][ T8867] RBP: 00007fb5f22ef090 R08: 0000000000000000 R09: 0000000000000000 [ 170.185056][ T8867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.185062][ T8867] R13: 00007fb5f1626038 R14: 00007fb5f1625fa0 R15: 00007ffcf855ddf8 [ 170.185076][ T8867] [ 170.332707][ T8827] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.424920][ T8880] netlink: 48 bytes leftover after parsing attributes in process `syz.6.769'. [ 170.433049][ T8885] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 170.479013][ T43] audit: type=1400 audit(1788930739.399:662): avc: denied { execute } for pid=8887 comm="syz.1.771" name="file1" dev="tmpfs" ino=1197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.479381][ T8888] process 'syz.1.771' launched '/dev/fd/5/./file1' with NULL argv: empty string added [ 170.479540][ T43] audit: type=1400 audit(1788930739.399:663): avc: denied { execute_no_trans } for pid=8887 comm="syz.1.771" path="/223/file1" dev="tmpfs" ino=1197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.482726][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.771'. [ 170.524535][ T43] audit: type=1400 audit(1788930739.439:664): avc: denied { listen } for pid=8890 comm="syz.1.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 170.524621][ T43] audit: type=1400 audit(1788930739.439:665): avc: denied { listen } for pid=8890 comm="syz.1.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 170.527830][ T8891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.772'. [ 170.570511][ T8895] FAULT_INJECTION: forcing a failure. [ 170.570511][ T8895] name failslab, interval 1, probability 0, space 0, times 0 [ 170.570606][ T8895] CPU: 1 UID: 0 PID: 8895 Comm: syz.6.773 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.570630][ T8895] Tainted: [L]=SOFTLOCKUP [ 170.570638][ T8895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.570664][ T8895] Call Trace: [ 170.570671][ T8895] [ 170.570678][ T8895] dump_stack_lvl+0x100/0x190 [ 170.570708][ T8895] should_fail_ex.cold+0x5/0xa [ 170.570741][ T8895] should_failslab+0xc2/0x120 [ 170.570763][ T8895] kmem_cache_alloc_noprof+0x92/0x6a0 [ 170.570783][ T8895] ? skb_clone+0x190/0x400 [ 170.570806][ T8895] skb_clone+0x190/0x400 [ 170.570825][ T8895] netlink_broadcast_filtered+0xb22/0xf20 [ 170.570875][ T8895] netlink_broadcast+0x39/0x50 [ 170.570903][ T8895] kobject_uevent_env+0xcdd/0x18b0 [ 170.570926][ T8895] ? lockdep_init_map_type+0x5c/0x250 [ 170.570951][ T8895] swnode_register+0x55d/0x750 [ 170.570983][ T8895] fwnode_create_software_node+0x1c8/0x3f0 [ 170.571013][ T8895] device_create_managed_software_node+0x103/0x270 [ 170.571035][ T8895] iommufd_test+0x3007/0x6600 [ 170.571056][ T8895] ? __lock_acquire+0x5c0/0x1f40 [ 170.571076][ T8895] ? __lock_acquire+0x5c0/0x1f40 [ 170.571094][ T8895] ? __pfx_iommufd_test+0x10/0x10 [ 170.571111][ T8895] ? tomoyo_path_number_perm+0x188/0x580 [ 170.571144][ T8895] ? lock_acquire+0x1d1/0x380 [ 170.571160][ T8895] ? __might_fault+0xc5/0x140 [ 170.571186][ T8895] ? find_held_lock+0x2b/0x80 [ 170.571209][ T8895] ? __might_fault+0xc5/0x140 [ 170.571244][ T8895] iommufd_fops_ioctl+0x358/0x520 [ 170.571268][ T8895] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 170.571286][ T8895] ? __fget_files+0x34/0x3d0 [ 170.571319][ T8895] ? selinux_file_ioctl+0x13b/0x290 [ 170.571335][ T8895] ? selinux_file_ioctl+0xb6/0x290 [ 170.571353][ T8895] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 170.571375][ T8895] __x64_sys_ioctl+0x18e/0x210 [ 170.571395][ T8895] do_syscall_64+0x123/0x790 [ 170.571419][ T8895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.571437][ T8895] RIP: 0033:0x7fb5f139e159 [ 170.571452][ T8895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.571468][ T8895] RSP: 002b:00007fb5f22ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.571485][ T8895] RAX: ffffffffffffffda RBX: 00007fb5f1625fa0 RCX: 00007fb5f139e159 [ 170.571496][ T8895] RDX: 0000200000000140 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 170.571507][ T8895] RBP: 00007fb5f22ef090 R08: 0000000000000000 R09: 0000000000000000 [ 170.571517][ T8895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.571527][ T8895] R13: 00007fb5f1626038 R14: 00007fb5f1625fa0 R15: 00007ffcf855ddf8 [ 170.571553][ T8895] [ 170.578443][ T8895] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 170.614939][ T6226] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 170.723756][ T5776] nci: nci_ntf_packet: unknown ntf opcode 0x61e [ 170.787265][ T6226] usb 8-1: Using ep0 maxpacket: 16 [ 170.788089][ T6226] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 170.790053][ T6226] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 170.790081][ T6226] usb 8-1: can't read configurations, error -61 [ 170.819470][ T8911] FAULT_INJECTION: forcing a failure. [ 170.819470][ T8911] name failslab, interval 1, probability 0, space 0, times 0 [ 170.819531][ T8911] CPU: 1 UID: 0 PID: 8911 Comm: syz.1.781 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.819558][ T8911] Tainted: [L]=SOFTLOCKUP [ 170.819563][ T8911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.819569][ T8911] Call Trace: [ 170.819574][ T8911] [ 170.819578][ T8911] dump_stack_lvl+0x100/0x190 [ 170.819597][ T8911] should_fail_ex.cold+0x5/0xa [ 170.819613][ T8911] should_failslab+0xc2/0x120 [ 170.819628][ T8911] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 170.819640][ T8911] ? __alloc_skb+0x140/0x710 [ 170.819654][ T8911] __alloc_skb+0x140/0x710 [ 170.819663][ T8911] ? __alloc_skb+0x5b7/0x710 [ 170.819673][ T8911] ? __pfx___alloc_skb+0x10/0x10 [ 170.819684][ T8911] ? if_nlmsg_size+0x4b/0xdc0 [ 170.819699][ T8911] rtmsg_ifinfo_build_skb+0x81/0x260 [ 170.819717][ T8911] rtmsg_ifinfo+0xa4/0x1b0 [ 170.819733][ T8911] netif_close_many+0x3ca/0x810 [ 170.819750][ T8911] ? __pfx_netif_close_many+0x10/0x10 [ 170.819765][ T8911] ? netif_close_many_and_unlock+0x1af/0x270 [ 170.819783][ T8911] unregister_netdevice_many_notify+0x840/0x2150 [ 170.819797][ T8911] ? __mutex_lock+0x26c/0x1bd0 [ 170.819813][ T8911] ? __lock_acquire+0x5c0/0x1f40 [ 170.819826][ T8911] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 170.819838][ T8911] ? __pfx___mutex_lock+0x10/0x10 [ 170.819859][ T8911] unregister_netdevice_queue+0x30b/0x3c0 [ 170.819871][ T8911] ? rtnl_net_dev_lock+0x137/0x360 [ 170.819888][ T8911] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 170.819902][ T8911] ? rtnl_net_dev_lock+0x28/0x360 [ 170.819918][ T8911] ? rtnl_net_dev_lock+0x146/0x360 [ 170.819933][ T8911] ? rtnl_lock+0x9/0x20 [ 170.819947][ T8911] ? rtnl_net_dev_lock+0x1fe/0x360 [ 170.819965][ T8911] unregister_netdev+0x1f/0x60 [ 170.819982][ T8911] slip_close+0x16a/0x1d0 [ 170.819993][ T8911] ? __pfx_slip_close+0x10/0x10 [ 170.820004][ T8911] tty_ldisc_close+0x114/0x1a0 [ 170.820024][ T8911] tty_ldisc_kill+0x8e/0x150 [ 170.820046][ T8911] tty_ldisc_hangup+0x3b4/0x6e0 [ 170.820072][ T8911] __tty_hangup.part.0+0x3b8/0x7c0 [ 170.820094][ T8911] tty_vhangup+0x21/0x30 [ 170.820111][ T8911] pty_close+0x3a7/0x500 [ 170.820132][ T8911] ? __pfx_pty_close+0x10/0x10 [ 170.820153][ T8911] tty_release+0x40e/0x1300 [ 170.820171][ T8911] ? ima_file_free+0xc6/0x340 [ 170.820199][ T8911] ? __pfx_tty_release+0x10/0x10 [ 170.820230][ T8911] __fput+0x3ff/0xb50 [ 170.820259][ T8911] fput_close_sync+0x118/0x250 [ 170.820281][ T8911] ? __pfx_fput_close_sync+0x10/0x10 [ 170.820310][ T8911] __x64_sys_close+0x8b/0x120 [ 170.820334][ T8911] do_syscall_64+0x123/0x790 [ 170.820359][ T8911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.820377][ T8911] RIP: 0033:0x7f3cc219e159 [ 170.820393][ T8911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.820409][ T8911] RSP: 002b:00007f3cc2fc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 170.820427][ T8911] RAX: ffffffffffffffda RBX: 00007f3cc2425fa0 RCX: 00007f3cc219e159 [ 170.820438][ T8911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 170.820448][ T8911] RBP: 00007f3cc2fc2090 R08: 0000000000000000 R09: 0000000000000000 [ 170.820459][ T8911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.820469][ T8911] R13: 00007f3cc2426038 R14: 00007f3cc2425fa0 R15: 00007ffd33533428 [ 170.820493][ T8911] [ 170.917218][ T6226] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 171.066784][ T6226] usb 8-1: Using ep0 maxpacket: 16 [ 171.072845][ T6226] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 171.078126][ T6226] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 171.078196][ T6226] usb 8-1: can't read configurations, error -61 [ 171.078476][ T6226] usb usb8-port1: attempt power cycle [ 171.087259][ T8919] netlink: 104 bytes leftover after parsing attributes in process `syz.1.785'. [ 171.146472][ T8932] openvswitch: netlink: Message has 12 unknown bytes. [ 171.414952][ T6226] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 171.439277][ T6226] usb 8-1: Using ep0 maxpacket: 16 [ 171.442025][ T6226] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 171.446281][ T6226] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 171.446340][ T6226] usb 8-1: can't read configurations, error -61 [ 171.574950][ T6226] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 171.595390][ T6226] usb 8-1: Using ep0 maxpacket: 16 [ 171.596064][ T6226] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 171.598462][ T6226] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 171.598492][ T6226] usb 8-1: can't read configurations, error -61 [ 171.598786][ T6226] usb usb8-port1: unable to enumerate USB device [ 172.055140][ T42] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 172.184954][ T42] usb 10-1: device descriptor read/64, error -71 [ 172.424929][ T42] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 172.555019][ T42] usb 10-1: device descriptor read/64, error -71 [ 172.668080][ T42] usb usb10-port1: attempt power cycle [ 173.004958][ T42] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 173.025620][ T42] usb 10-1: device descriptor read/8, error -71 [ 173.264932][ T42] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 173.285700][ T42] usb 10-1: device descriptor read/8, error -71 [ 173.395131][ T42] usb usb10-port1: unable to enumerate USB device [ 173.544335][ T8943] FAULT_INJECTION: forcing a failure. [ 173.544335][ T8943] name failslab, interval 1, probability 0, space 0, times 0 [ 173.544388][ T8943] CPU: 3 UID: 0 PID: 8943 Comm: syz.3.791 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.544414][ T8943] Tainted: [L]=SOFTLOCKUP [ 173.544419][ T8943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.544426][ T8943] Call Trace: [ 173.544430][ T8943] [ 173.544434][ T8943] dump_stack_lvl+0x100/0x190 [ 173.544454][ T8943] should_fail_ex.cold+0x5/0xa [ 173.544471][ T8943] should_failslab+0xc2/0x120 [ 173.544485][ T8943] kmem_cache_alloc_noprof+0x92/0x6a0 [ 173.544497][ T8943] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 173.544517][ T8943] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 173.544536][ T8943] mmu_topup_memory_caches+0x25/0x170 [ 173.544549][ T8943] kvm_mmu_load+0xe8/0x2580 [ 173.544562][ T8943] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 173.544578][ T8943] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 173.544596][ T8943] ? __pfx_kvm_mmu_load+0x10/0x10 [ 173.544607][ T8943] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 173.544619][ T8943] ? kvm_check_and_inject_events+0x896/0x1050 [ 173.544634][ T8943] vcpu_run+0x395d/0x5e80 [ 173.544647][ T8943] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 173.544667][ T8943] ? __pfx_vcpu_run+0x10/0x10 [ 173.544682][ T8943] ? lock_acquire+0x1d1/0x380 [ 173.544693][ T8943] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 173.544708][ T8943] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 173.544724][ T8943] ? __local_bh_enable_ip+0xa5/0x120 [ 173.544738][ T8943] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 173.544751][ T8943] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 173.544768][ T8943] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 173.544781][ T8943] ? lock_acquire+0x1d1/0x380 [ 173.544792][ T8943] ? do_raw_write_lock+0x11e/0x260 [ 173.544806][ T8943] ? find_held_lock+0x2b/0x80 [ 173.544821][ T8943] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 173.544837][ T8943] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 173.544868][ T8943] kvm_vcpu_ioctl+0x730/0x1700 [ 173.544884][ T8943] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 173.544900][ T8943] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.544913][ T8943] ? do_vfs_ioctl+0x226/0x13e0 [ 173.544924][ T8943] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 173.544934][ T8943] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 173.544948][ T8943] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 173.544962][ T8943] ? __fget_files+0x34/0x3d0 [ 173.544982][ T8943] ? selinux_file_ioctl+0x13b/0x290 [ 173.544992][ T8943] ? selinux_file_ioctl+0xb6/0x290 [ 173.545003][ T8943] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 173.545019][ T8943] __x64_sys_ioctl+0x18e/0x210 [ 173.545030][ T8943] do_syscall_64+0x123/0x790 [ 173.545045][ T8943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.545057][ T8943] RIP: 0033:0x7fe48079e159 [ 173.545066][ T8943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.545076][ T8943] RSP: 002b:00007fe4816b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.545087][ T8943] RAX: ffffffffffffffda RBX: 00007fe480a25fa0 RCX: 00007fe48079e159 [ 173.545094][ T8943] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 173.545100][ T8943] RBP: 00007fe4816b4090 R08: 0000000000000000 R09: 0000000000000000 [ 173.545107][ T8943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.545113][ T8943] R13: 00007fe480a26038 R14: 00007fe480a25fa0 R15: 00007ffcacc219f8 [ 173.545127][ T8943] [ 173.662711][ T8901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.741510][ T8951] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 173.766074][ T43] audit: type=1400 audit(1788930742.689:666): avc: denied { create } for pid=8952 comm="syz.6.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 173.773956][ T8954] rnbd_client L127: Can't parse path i: -93 [ 173.775011][ T43] audit: type=1400 audit(1788930742.689:667): avc: denied { write } for pid=8952 comm="syz.6.795" path="socket:[38193]" dev="sockfs" ino=38193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 173.830925][ T8963] FAULT_INJECTION: forcing a failure. [ 173.830925][ T8963] name failslab, interval 1, probability 0, space 0, times 0 [ 173.830999][ T8963] CPU: 0 UID: 0 PID: 8963 Comm: syz.6.797 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.831026][ T8963] Tainted: [L]=SOFTLOCKUP [ 173.831031][ T8963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.831038][ T8963] Call Trace: [ 173.831042][ T8963] [ 173.831047][ T8963] dump_stack_lvl+0x100/0x190 [ 173.831067][ T8963] should_fail_ex.cold+0x5/0xa [ 173.831083][ T8963] should_failslab+0xc2/0x120 [ 173.831097][ T8963] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 173.831110][ T8963] ? __alloc_skb+0x140/0x710 [ 173.831124][ T8963] __alloc_skb+0x140/0x710 [ 173.831133][ T8963] ? __alloc_skb+0x5b7/0x710 [ 173.831144][ T8963] ? __pfx___alloc_skb+0x10/0x10 [ 173.831154][ T8963] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 173.831170][ T8963] netlink_dump+0x194/0xd00 [ 173.831187][ T8963] ? rcu_is_watching+0x13/0xc0 [ 173.831201][ T8963] ? cap_capable+0x107/0x430 [ 173.831217][ T8963] ? __pfx_netlink_dump+0x10/0x10 [ 173.831238][ T8963] ? __inet_diag_dump_start+0x3cb/0x8f0 [ 173.831254][ T8963] __netlink_dump_start+0x6d6/0x990 [ 173.831273][ T8963] inet_diag_rcv_msg_compat+0x275/0x2d0 [ 173.831285][ T8963] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 173.831298][ T8963] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 173.831309][ T8963] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 173.831320][ T8963] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 173.831333][ T8963] ? sock_diag_rcv_msg+0x33d/0x7a0 [ 173.831344][ T8963] ? sock_diag_rcv_msg+0x33d/0x7a0 [ 173.831357][ T8963] sock_diag_rcv_msg+0x375/0x7a0 [ 173.831370][ T8963] netlink_rcv_skb+0x159/0x420 [ 173.831380][ T8963] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 173.831392][ T8963] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 173.831408][ T8963] ? netlink_deliver_tap+0x1ae/0xcc0 [ 173.831427][ T8963] netlink_unicast+0x585/0x850 [ 173.831440][ T8963] ? __pfx_netlink_unicast+0x10/0x10 [ 173.831454][ T8963] netlink_sendmsg+0x8b0/0xda0 [ 173.831467][ T8963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.831479][ T8963] ? selinux_socket_sendmsg+0x198/0x2f0 [ 173.831499][ T8963] ____sys_sendmsg+0xa4d/0xbe0 [ 173.831513][ T8963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.831525][ T8963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.831543][ T8963] ? lock_acquire+0x1d1/0x380 [ 173.831554][ T8963] ? get_pid_task+0x2a/0x250 [ 173.831570][ T8963] ___sys_sendmsg+0x190/0x1e0 [ 173.831586][ T8963] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.831602][ T8963] ? get_pid_task+0x106/0x250 [ 173.831622][ T8963] ? find_held_lock+0x2b/0x80 [ 173.831646][ T8963] __sys_sendmsg+0x160/0x210 [ 173.831658][ T8963] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.831678][ T8963] do_syscall_64+0x123/0x790 [ 173.831693][ T8963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.831704][ T8963] RIP: 0033:0x7fb5f139e159 [ 173.831714][ T8963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.831725][ T8963] RSP: 002b:00007fb5f22ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.831737][ T8963] RAX: ffffffffffffffda RBX: 00007fb5f1625fa0 RCX: 00007fb5f139e159 [ 173.831744][ T8963] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 000000000000000b [ 173.831750][ T8963] RBP: 00007fb5f22ef090 R08: 0000000000000000 R09: 0000000000000000 [ 173.831756][ T8963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.831762][ T8963] R13: 00007fb5f1626038 R14: 00007fb5f1625fa0 R15: 00007ffcf855ddf8 [ 173.831777][ T8963] [ 174.175114][ T6226] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 174.344979][ T6226] usb 11-1: Using ep0 maxpacket: 16 [ 174.345681][ T6226] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 174.346967][ T6226] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 174.346983][ T6226] usb 11-1: can't read configurations, error -61 [ 174.494952][ T6226] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 174.644973][ T6226] usb 11-1: Using ep0 maxpacket: 16 [ 174.645480][ T6226] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 174.646608][ T6226] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 174.646625][ T6226] usb 11-1: can't read configurations, error -61 [ 174.646828][ T6226] usb usb11-port1: attempt power cycle [ 174.994944][ T6226] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 175.015818][ T6226] usb 11-1: Using ep0 maxpacket: 16 [ 175.016281][ T6226] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 175.017384][ T6226] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 175.017401][ T6226] usb 11-1: can't read configurations, error -61 [ 175.145039][ T6226] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 175.165394][ T6226] usb 11-1: Using ep0 maxpacket: 16 [ 175.165851][ T6226] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 175.166954][ T6226] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 175.166971][ T6226] usb 11-1: can't read configurations, error -61 [ 175.167096][ T6226] usb usb11-port1: unable to enumerate USB device [ 176.976326][ T43] audit: type=1400 audit(1788930745.899:668): avc: denied { block_suspend } for pid=8972 comm="syz.5.800" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.983313][ T8973] netlink: 36 bytes leftover after parsing attributes in process `syz.5.800'. [ 177.027539][ T8976] ip_tables: iptables: counters copy to user failed while replacing table [ 177.080074][ T8982] openvswitch: netlink: Message has 12 unknown bytes. [ 177.089202][ T43] audit: type=1400 audit(1788930746.009:669): avc: denied { map } for pid=8980 comm="syz.5.803" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 177.159903][ T8985] netlink: 52 bytes leftover after parsing attributes in process `syz.5.803'. [ 177.176880][ T8989] overlayfs: overlapping lowerdir path [ 177.229320][ T8989] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.229419][ T8989] bridge0: port 2(bridge_slave_1) entered listening state [ 177.229526][ T8989] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.229566][ T8989] bridge0: port 1(bridge_slave_0) entered listening state [ 177.411285][ T8997] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 177.560805][ T9001] 9pnet_virtio: no channels available for device 127.0.0.1 [ 178.332681][ T43] audit: type=1400 audit(1788930747.249:670): avc: denied { watch watch_reads } for pid=9010 comm="syz.3.814" path="/215/net_prio.prioidx" dev="tmpfs" ino=1174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 178.717551][ T9008] netlink: 204 bytes leftover after parsing attributes in process `syz.6.813'. [ 178.823081][ T9021] FAULT_INJECTION: forcing a failure. [ 178.823081][ T9021] name failslab, interval 1, probability 0, space 0, times 0 [ 178.823139][ T9021] CPU: 1 UID: 0 PID: 9021 Comm: syz.5.818 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.823174][ T9021] Tainted: [L]=SOFTLOCKUP [ 178.823182][ T9021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.823193][ T9021] Call Trace: [ 178.823198][ T9021] [ 178.823204][ T9021] dump_stack_lvl+0x100/0x190 [ 178.823235][ T9021] should_fail_ex.cold+0x5/0xa [ 178.823260][ T9021] should_failslab+0xc2/0x120 [ 178.823281][ T9021] __kvmalloc_node_noprof+0x113/0x9b0 [ 178.823303][ T9021] ? bucket_table_alloc.isra.0+0x88/0x460 [ 178.823332][ T9021] bucket_table_alloc.isra.0+0x88/0x460 [ 178.823357][ T9021] __rhashtable_init_noprof+0x43a/0x890 [ 178.823384][ T9021] __rhltable_init_noprof+0x28/0x70 [ 178.823410][ T9021] nf_tables_newtable+0xf70/0x1a90 [ 178.823436][ T9021] ? __pfx_nf_tables_newtable+0x10/0x10 [ 178.823455][ T9021] ? net_generic+0x25/0x2a0 [ 178.823480][ T9021] ? __nla_parse+0x40/0x60 [ 178.823507][ T9021] nfnetlink_rcv_batch+0x1410/0x2880 [ 178.823541][ T9021] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 178.823567][ T9021] ? lock_acquire+0x1d1/0x380 [ 178.823584][ T9021] ? avc_has_perm_noaudit+0x56/0x3b0 [ 178.823616][ T9021] ? avc_has_perm_noaudit+0x145/0x3b0 [ 178.823660][ T9021] ? __nla_parse+0x40/0x60 [ 178.823686][ T9021] nfnetlink_rcv+0x3bd/0x440 [ 178.823708][ T9021] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 178.823735][ T9021] netlink_unicast+0x585/0x850 [ 178.823756][ T9021] ? __pfx_netlink_unicast+0x10/0x10 [ 178.823780][ T9021] netlink_sendmsg+0x8b0/0xda0 [ 178.823801][ T9021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.823820][ T9021] ? selinux_socket_sendmsg+0x198/0x2f0 [ 178.823858][ T9021] ____sys_sendmsg+0xa4d/0xbe0 [ 178.823879][ T9021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.823898][ T9021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.823926][ T9021] ? lock_acquire+0x1d1/0x380 [ 178.823943][ T9021] ? get_pid_task+0x2a/0x250 [ 178.823967][ T9021] ___sys_sendmsg+0x190/0x1e0 [ 178.823992][ T9021] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.824015][ T9021] ? get_pid_task+0x106/0x250 [ 178.824046][ T9021] ? find_held_lock+0x2b/0x80 [ 178.824085][ T9021] __sys_sendmsg+0x160/0x210 [ 178.824105][ T9021] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.824136][ T9021] do_syscall_64+0x123/0x790 [ 178.824161][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.824179][ T9021] RIP: 0033:0x7ff59059e159 [ 178.824195][ T9021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.824209][ T9021] RSP: 002b:00007ff591512028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.824228][ T9021] RAX: ffffffffffffffda RBX: 00007ff590825fa0 RCX: 00007ff59059e159 [ 178.824238][ T9021] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 178.824248][ T9021] RBP: 00007ff591512090 R08: 0000000000000000 R09: 0000000000000000 [ 178.824259][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.824269][ T9021] R13: 00007ff590826038 R14: 00007ff590825fa0 R15: 00007ffc77302638 [ 178.824293][ T9021] [ 178.824385][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.818'. [ 178.826028][ T9022] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 178.841183][ T43] audit: type=1400 audit(1788930747.759:671): avc: denied { read } for pid=9020 comm="syz.3.819" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 179.030709][ T6226] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 179.194986][ T6226] usb 11-1: Using ep0 maxpacket: 16 [ 179.195855][ T6226] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 179.196516][ T6226] usb 11-1: config 0 has no interfaces? [ 179.198645][ T6226] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.198664][ T6226] usb 11-1: Product: syz [ 179.198677][ T6226] usb 11-1: Manufacturer: syz [ 179.198689][ T6226] usb 11-1: SerialNumber: syz [ 179.204151][ T6226] usb 11-1: config 0 descriptor?? [ 179.259340][ T9039] netlink: 104 bytes leftover after parsing attributes in process `syz.5.822'. [ 179.291097][ T43] audit: type=1400 audit(1788930748.209:672): avc: denied { shutdown } for pid=9040 comm="syz.5.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.352174][ T69] IPVS: starting estimator thread 0... [ 179.465963][ T9045] IPVS: using max 43 ests per chain, 103200 per kthread [ 179.511488][ T9] usb 11-1: USB disconnect, device number 33 [ 179.521742][ T9043] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 179.524517][ C0] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 179.687937][ T9053] bond0: invalid ARP target specified [ 179.776949][ T43] audit: type=1400 audit(1788930748.699:673): avc: denied { map } for pid=9054 comm="syz.1.827" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 179.988746][ T9063] bond0: entered promiscuous mode [ 179.990629][ T9063] bond_slave_0: entered promiscuous mode [ 179.990780][ T9063] bond_slave_1: entered promiscuous mode [ 180.010906][ T43] audit: type=1400 audit(1788930748.929:674): avc: denied { ioctl } for pid=9062 comm="syz.1.829" path="socket:[41127]" dev="sockfs" ino=41127 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 180.650151][ T43] audit: type=1400 audit(1788930749.569:675): avc: denied { write } for pid=9100 comm="syz.5.840" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 180.650578][ T43] audit: type=1400 audit(1788930749.569:676): avc: denied { open } for pid=9100 comm="syz.5.840" path="/121/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 180.654491][ T43] audit: type=1400 audit(1788930749.569:677): avc: denied { mounton } for pid=9100 comm="syz.5.840" path="/121/dev" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 180.767523][ T9] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 180.924993][ T6226] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 180.935289][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 180.935922][ T9] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 180.936503][ T9] usb 8-1: config 0 has no interfaces? [ 180.939250][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.939269][ T9] usb 8-1: Product: syz [ 180.939281][ T9] usb 8-1: Manufacturer: syz [ 180.939293][ T9] usb 8-1: SerialNumber: syz [ 180.947106][ T9] usb 8-1: config 0 descriptor?? [ 181.087649][ T6226] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 181.092316][ T6226] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.092391][ T6226] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 181.104146][ T6226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.104209][ T6226] usb 6-1: Product: syz [ 181.104287][ T6226] usb 6-1: Manufacturer: syz [ 181.104302][ T6226] usb 6-1: SerialNumber: syz [ 181.119634][ T6226] usb 6-1: NFC: intf ffff88802c7f2000 id ffffffff8fe8e940 [ 181.139677][ T6226] nfcmrvl 6-1:1.0: NFC: registered with nci successfully [ 181.159150][ T9] usb 8-1: USB disconnect, device number 36 [ 181.289654][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.844'. [ 181.320486][ T5776] nfcmrvl 6-1:1.0: NFC: send entry, len 4 [ 181.320677][ T5776] usb 6-1: NFC: urb ffff88802bed5f00 submission failed (90) [ 181.424606][ T9138] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 181.683310][ T9150] Invalid logical block size (33554432) [ 181.713085][ T9152] FAULT_INJECTION: forcing a failure. [ 181.713085][ T9152] name failslab, interval 1, probability 0, space 0, times 0 [ 181.713138][ T9152] CPU: 1 UID: 0 PID: 9152 Comm: syz.3.850 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.713165][ T9152] Tainted: [L]=SOFTLOCKUP [ 181.713170][ T9152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.713176][ T9152] Call Trace: [ 181.713181][ T9152] [ 181.713195][ T9152] dump_stack_lvl+0x100/0x190 [ 181.713223][ T9152] should_fail_ex.cold+0x5/0xa [ 181.713239][ T9152] should_failslab+0xc2/0x120 [ 181.713257][ T9152] kmem_cache_alloc_noprof+0x92/0x6a0 [ 181.713268][ T9152] ? lockdep_init_map_type+0x5c/0x250 [ 181.713280][ T9152] ? copy_process+0x47c7/0x8370 [ 181.713296][ T9152] copy_process+0x47c7/0x8370 [ 181.713316][ T9152] ? __pfx_copy_process+0x10/0x10 [ 181.713329][ T9152] ? futex_wake+0x4ea/0x5e0 [ 181.713352][ T9152] kernel_clone+0x176/0x9d0 [ 181.713365][ T9152] ? __pfx_kernel_clone+0x10/0x10 [ 181.713384][ T9152] __do_sys_clone+0xd9/0x120 [ 181.713396][ T9152] ? __pfx___do_sys_clone+0x10/0x10 [ 181.713408][ T9152] ? find_held_lock+0x2b/0x80 [ 181.713433][ T9152] do_syscall_64+0x123/0x790 [ 181.713451][ T9152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.713462][ T9152] RIP: 0033:0x7fe48079e159 [ 181.713472][ T9152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.713482][ T9152] RSP: 002b:00007fe4816b3fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 181.713493][ T9152] RAX: ffffffffffffffda RBX: 00007fe480a25fa0 RCX: 00007fe48079e159 [ 181.713500][ T9152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020002000 [ 181.713507][ T9152] RBP: 00007fe48083503b R08: 0000000000000000 R09: 0000000000000000 [ 181.713513][ T9152] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 181.713519][ T9152] R13: 00007fe480a26038 R14: 00007fe480a25fa0 R15: 00007ffcacc219f8 [ 181.713534][ T9152] [ 181.826851][ T9160] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 183.085076][ T6068] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 183.234957][ T6068] usb 8-1: Using ep0 maxpacket: 16 [ 183.235689][ T6068] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 183.236193][ T6068] usb 8-1: config 0 has no interfaces? [ 183.237966][ T6068] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.237979][ T6068] usb 8-1: Product: syz [ 183.237986][ T6068] usb 8-1: Manufacturer: syz [ 183.237994][ T6068] usb 8-1: SerialNumber: syz [ 183.240751][ T6068] usb 8-1: config 0 descriptor?? [ 183.450097][ T6068] usb 8-1: USB disconnect, device number 37 [ 183.652682][ T9106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.667424][ T9] usb 6-1: USB disconnect, device number 20 [ 183.668515][ T9] usb 6-1: NFC: intf ffff88802c7f2000 [ 183.731568][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 183.731730][ T43] audit: type=1400 audit(1788930752.649:680): avc: denied { read } for pid=9181 comm="syz.6.860" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 183.732048][ T43] audit: type=1400 audit(1788930752.649:681): avc: denied { open } for pid=9181 comm="syz.6.860" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 183.732330][ T43] audit: type=1400 audit(1788930752.649:682): avc: denied { ioctl } for pid=9181 comm="syz.6.860" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xaf22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 183.787808][ T9186] FAULT_INJECTION: forcing a failure. [ 183.787808][ T9186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.787898][ T9186] CPU: 0 UID: 0 PID: 9186 Comm: syz.1.861 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.787936][ T9186] Tainted: [L]=SOFTLOCKUP [ 183.787943][ T9186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.787954][ T9186] Call Trace: [ 183.787960][ T9186] [ 183.787967][ T9186] dump_stack_lvl+0x100/0x190 [ 183.788008][ T9186] should_fail_ex.cold+0x5/0xa [ 183.788033][ T9186] _copy_from_user+0x2e/0xd0 [ 183.788068][ T9186] copy_msghdr_from_user+0x9f/0x4c0 [ 183.788099][ T9186] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 183.788130][ T9186] ? lock_acquire+0x1d1/0x380 [ 183.788149][ T9186] ? get_pid_task+0x2a/0x250 [ 183.788175][ T9186] ___sys_sendmsg+0x106/0x1e0 [ 183.788201][ T9186] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.788225][ T9186] ? get_pid_task+0x106/0x250 [ 183.788257][ T9186] ? find_held_lock+0x2b/0x80 [ 183.788296][ T9186] __sys_sendmsg+0x160/0x210 [ 183.788316][ T9186] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.788348][ T9186] do_syscall_64+0x123/0x790 [ 183.788377][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.788396][ T9186] RIP: 0033:0x7f3cc219e159 [ 183.788411][ T9186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.788427][ T9186] RSP: 002b:00007f3cc2fc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.788444][ T9186] RAX: ffffffffffffffda RBX: 00007f3cc2425fa0 RCX: 00007f3cc219e159 [ 183.788457][ T9186] RDX: 0000000000014014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 183.788470][ T9186] RBP: 00007f3cc2fc2090 R08: 0000000000000000 R09: 0000000000000000 [ 183.788481][ T9186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.788491][ T9186] R13: 00007f3cc2426038 R14: 00007f3cc2425fa0 R15: 00007ffd33533428 [ 183.788516][ T9186] [ 183.877759][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.865'. [ 183.877792][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.865'. [ 183.900604][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.865'. [ 183.900856][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.865'. [ 183.952589][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.865'. [ 183.952653][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.865'. [ 184.077762][ T9208] xt_cgroup: no path or classid specified [ 184.080168][ T43] audit: type=1400 audit(1788930752.999:683): avc: denied { getopt } for pid=9206 comm="syz.6.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 184.081105][ T43] audit: type=1400 audit(1788930752.999:684): avc: denied { create } for pid=9206 comm="syz.6.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 184.081651][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.867'. [ 184.095958][ T9208] bond2: entered promiscuous mode [ 184.095972][ T9208] bond2: entered allmulticast mode [ 184.099045][ T9208] bond0: option ad_select: unable to set because the bond device is up [ 184.146710][ T9222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.868'. [ 184.148330][ T43] audit: type=1400 audit(1788930753.069:685): avc: denied { create } for pid=9221 comm="syz.6.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 184.474953][ T73] usb 11-1: new high-speed USB device number 34 using dummy_hcd [ 184.597298][ T43] audit: type=1400 audit(1788930753.519:686): avc: denied { write } for pid=9242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.627234][ T73] usb 11-1: Using ep0 maxpacket: 16 [ 184.628868][ T73] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 184.630032][ T73] usb 11-1: config 0 has no interfaces? [ 184.633103][ T73] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.633115][ T73] usb 11-1: Product: syz [ 184.633122][ T73] usb 11-1: Manufacturer: syz [ 184.633129][ T73] usb 11-1: SerialNumber: syz [ 184.634591][ T73] usb 11-1: config 0 descriptor?? [ 184.690668][ T43] audit: type=1400 audit(1788930753.609:687): avc: denied { write } for pid=9245 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.744177][ T64] Bluetooth: hci4: unexpected event for opcode 0x0c58 [ 184.839511][ T73] usb 11-1: USB disconnect, device number 34 [ 185.078721][ T9257] Bluetooth: MGMT ver 1.23 [ 185.080650][ T9257] netlink: 'syz.3.881': attribute type 10 has an invalid length. [ 185.092037][ T9257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.099897][ T9257] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 185.113655][ T9257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.119961][ T9257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.127084][ T9257] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 185.132927][ T9257] bond0 (unregistering): Released all slaves [ 185.270547][ T9261] FAULT_INJECTION: forcing a failure. [ 185.270547][ T9261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.270618][ T9261] CPU: 3 UID: 0 PID: 9261 Comm: syz.1.883 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.270654][ T9261] Tainted: [L]=SOFTLOCKUP [ 185.270661][ T9261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.270671][ T9261] Call Trace: [ 185.270677][ T9261] [ 185.270684][ T9261] dump_stack_lvl+0x100/0x190 [ 185.270723][ T9261] should_fail_ex.cold+0x5/0xa [ 185.270742][ T9261] _copy_to_iter+0x1f3/0x1720 [ 185.270767][ T9261] ? unwind_next_frame+0xbd/0x2090 [ 185.270790][ T9261] ? __pfx__copy_to_iter+0x10/0x10 [ 185.270814][ T9261] ? down_read+0x13b/0x4c0 [ 185.270840][ T9261] ? proc_reg_read_iter+0x11b/0x310 [ 185.270879][ T9261] ? __pfx_down_read+0x10/0x10 [ 185.270908][ T9261] read_kcore_iter+0x941/0x1800 [ 185.270926][ T9261] ? is_bpf_text_address+0x94/0x1a0 [ 185.270954][ T9261] ? __pfx_read_kcore_iter+0x10/0x10 [ 185.270970][ T9261] ? _parse_integer_limit+0x1ac/0x220 [ 185.270988][ T9261] ? _kstrtoull+0x144/0x200 [ 185.271006][ T9261] ? __pfx__kstrtoull+0x10/0x10 [ 185.271027][ T9261] ? lock_acquire+0x1d1/0x380 [ 185.271044][ T9261] ? __might_fault+0xc5/0x140 [ 185.271066][ T9261] ? look_up_lock_class+0x64/0x120 [ 185.271087][ T9261] ? register_lock_class+0x3f/0x7b0 [ 185.271104][ T9261] ? __lock_acquire+0x5c0/0x1f40 [ 185.271127][ T9261] ? __lock_acquire+0x5c0/0x1f40 [ 185.271145][ T9261] ? lock_acquire+0x1d1/0x380 [ 185.271160][ T9261] ? get_pid_task+0x2a/0x250 [ 185.271186][ T9261] ? lock_acquire+0x1d1/0x380 [ 185.271202][ T9261] ? fdget_pos+0x2aa/0x380 [ 185.271225][ T9261] ? avc_policy_seqno+0x9/0x20 [ 185.271245][ T9261] ? selinux_file_permission+0x8f/0x6d0 [ 185.271269][ T9261] ? proc_reg_read_iter+0x11b/0x310 [ 185.271295][ T9261] proc_reg_read_iter+0x11b/0x310 [ 185.271318][ T9261] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 185.271342][ T9261] vfs_read+0x82e/0xb40 [ 185.271360][ T9261] ? __fget_files+0x34/0x3d0 [ 185.271378][ T9261] ? __pfx_vfs_read+0x10/0x10 [ 185.271392][ T9261] ? find_held_lock+0x2b/0x80 [ 185.271431][ T9261] ksys_read+0x12a/0x250 [ 185.271447][ T9261] ? __pfx_ksys_read+0x10/0x10 [ 185.271471][ T9261] do_syscall_64+0x123/0x790 [ 185.271495][ T9261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.271508][ T9261] RIP: 0033:0x7f3cc219e159 [ 185.271518][ T9261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.271528][ T9261] RSP: 002b:00007f3cc2fc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.271539][ T9261] RAX: ffffffffffffffda RBX: 00007f3cc2425fa0 RCX: 00007f3cc219e159 [ 185.271546][ T9261] RDX: 0000000000018fff RSI: 0000200000002980 RDI: 0000000000000006 [ 185.271553][ T9261] RBP: 00007f3cc2fc2090 R08: 0000000000000000 R09: 0000000000000000 [ 185.271559][ T9261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.271565][ T9261] R13: 00007f3cc2426038 R14: 00007f3cc2425fa0 R15: 00007ffd33533428 [ 185.271580][ T9261] [ 185.609831][ T9275] bond0: (slave batadv0): Releasing backup interface [ 185.613489][ T9275] bridge_slave_0: left allmulticast mode [ 185.613511][ T9275] bridge_slave_0: left promiscuous mode [ 185.616212][ T9275] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.627319][ T9275] bridge_slave_1: left allmulticast mode [ 185.627370][ T9275] bridge_slave_1: left promiscuous mode [ 185.627516][ T9275] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.640245][ T9275] bond0: (slave bond_slave_0): Releasing backup interface [ 185.645846][ T9275] bond0: (slave bond_slave_1): Releasing backup interface [ 185.653614][ T9275] team0: Port device team_slave_0 removed [ 185.664647][ T9275] team0: Port device team_slave_1 removed [ 185.666715][ T9275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.666734][ T9275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.667935][ T9275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.667945][ T9275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.670493][ T9275] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 185.682840][ T9279] team0: Mode changed to "loadbalance" [ 185.691089][ T9275] netlink: 68 bytes leftover after parsing attributes in process `syz.5.887'. [ 185.758517][ T43] audit: type=1400 audit(1788930754.679:688): avc: denied { mounton } for pid=9274 comm="syz.5.887" path="/proc/388/task" dev="proc" ino=44059 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 185.833569][ T43] audit: type=1400 audit(1788930754.749:689): avc: denied { write } for pid=9293 comm="syz.3.893" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 186.144993][ T5603] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 186.304951][ T5603] usb 6-1: Using ep0 maxpacket: 16 [ 186.307194][ T5603] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 186.307901][ T9311] loop5: detected capacity change from 0 to 7 [ 186.308125][ T5603] usb 6-1: config 0 has no interfaces? [ 186.308820][ T9311] Dev loop5: unable to read RDB block 7 [ 186.308841][ T9311] loop5: AHDI p1 p3 p4 [ 186.308856][ T9311] loop5: partition table partially beyond EOD, truncated [ 186.309002][ T9311] loop5: p1 size 100663296 extends beyond EOD, truncated [ 186.309767][ T5603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.309780][ T5603] usb 6-1: Product: syz [ 186.309788][ T5603] usb 6-1: Manufacturer: syz [ 186.309796][ T5603] usb 6-1: SerialNumber: syz [ 186.311952][ T9311] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 186.313187][ T5603] usb 6-1: config 0 descriptor?? [ 186.322572][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.900'. [ 186.346525][ T9311] Dev loop5: unable to read RDB block 7 [ 186.346600][ T9311] loop5: AHDI p1 p3 p4 [ 186.346623][ T9311] loop5: partition table partially beyond EOD, truncated [ 186.346778][ T9311] loop5: p1 size 100663296 extends beyond EOD, truncated [ 186.350032][ T9311] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 186.359485][ T9313] bond1: entered promiscuous mode [ 186.367362][ T9313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.379680][ T9313] bond1: (slave ipip0): refused to change device type [ 186.514092][ T9323] FAULT_INJECTION: forcing a failure. [ 186.514092][ T9323] name failslab, interval 1, probability 0, space 0, times 0 [ 186.514169][ T9323] CPU: 2 UID: 0 PID: 9323 Comm: syz.6.903 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.514206][ T9323] Tainted: [L]=SOFTLOCKUP [ 186.514213][ T9323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.514224][ T9323] Call Trace: [ 186.514256][ T9323] [ 186.514264][ T9323] dump_stack_lvl+0x100/0x190 [ 186.514306][ T9323] should_fail_ex.cold+0x5/0xa [ 186.514331][ T9323] should_failslab+0xc2/0x120 [ 186.514360][ T9323] kmem_cache_alloc_noprof+0x92/0x6a0 [ 186.514378][ T9323] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 186.514406][ T9323] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 186.514437][ T9323] mmu_topup_memory_caches+0x25/0x170 [ 186.514459][ T9323] kvm_mmu_load+0xe8/0x2580 [ 186.514480][ T9323] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 186.514506][ T9323] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 186.514534][ T9323] ? __pfx_kvm_mmu_load+0x10/0x10 [ 186.514553][ T9323] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 186.514572][ T9323] ? kvm_check_and_inject_events+0x896/0x1050 [ 186.514595][ T9323] vcpu_run+0x395d/0x5e80 [ 186.514615][ T9323] ? mark_held_locks+0x40/0x70 [ 186.514644][ T9323] ? __pfx_vcpu_run+0x10/0x10 [ 186.514667][ T9323] ? lock_acquire+0x1d1/0x380 [ 186.514685][ T9323] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 186.514723][ T9323] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 186.514746][ T9323] ? __local_bh_enable_ip+0xa5/0x120 [ 186.514768][ T9323] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 186.514789][ T9323] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 186.514814][ T9323] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 186.514835][ T9323] ? lock_acquire+0x1d1/0x380 [ 186.514853][ T9323] ? do_raw_write_lock+0x11e/0x260 [ 186.514873][ T9323] ? find_held_lock+0x2b/0x80 [ 186.514901][ T9323] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 186.514923][ T9323] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 186.514950][ T9323] kvm_vcpu_ioctl+0x730/0x1700 [ 186.514976][ T9323] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 186.515000][ T9323] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.515020][ T9323] ? do_vfs_ioctl+0x226/0x13e0 [ 186.515039][ T9323] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 186.515053][ T9323] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 186.515075][ T9323] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 186.515097][ T9323] ? __fget_files+0x34/0x3d0 [ 186.515127][ T9323] ? selinux_file_ioctl+0x13b/0x290 [ 186.515144][ T9323] ? selinux_file_ioctl+0xb6/0x290 [ 186.515161][ T9323] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 186.515186][ T9323] __x64_sys_ioctl+0x18e/0x210 [ 186.515205][ T9323] do_syscall_64+0x123/0x790 [ 186.515234][ T9323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.515254][ T9323] RIP: 0033:0x7fb5f139e159 [ 186.515270][ T9323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.515286][ T9323] RSP: 002b:00007fb5f22ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.515304][ T9323] RAX: ffffffffffffffda RBX: 00007fb5f1625fa0 RCX: 00007fb5f139e159 [ 186.515315][ T9323] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 186.515324][ T9323] RBP: 00007fb5f22ef090 R08: 0000000000000000 R09: 0000000000000000 [ 186.515336][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.515345][ T9323] R13: 00007fb5f1626038 R14: 00007fb5f1625fa0 R15: 00007ffcf855ddf8 [ 186.515369][ T9323] [ 186.662498][ T5927] usb 6-1: USB disconnect, device number 21 [ 187.856038][ T5715] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 188.005181][ T5715] usb 8-1: Using ep0 maxpacket: 16 [ 188.012728][ T5715] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 188.018959][ T5715] usb 8-1: config 0 has no interfaces? [ 188.023097][ T5715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.023150][ T5715] usb 8-1: Product: syz [ 188.023181][ T5715] usb 8-1: Manufacturer: syz [ 188.023211][ T5715] usb 8-1: SerialNumber: syz [ 188.034188][ T5715] usb 8-1: config 0 descriptor?? [ 188.349362][ T5134] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 188.349430][ T5134] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 188.349464][ T5134] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 188.349508][ T5134] loop0: [ 188.367932][ T5603] usb 8-1: USB disconnect, device number 38 [ 188.585035][ T6068] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 188.735734][ T6068] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 188.738578][ T6068] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 188.738599][ T6068] usb 10-1: config 1 has no interface number 0 [ 188.741540][ T6068] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.741559][ T6068] usb 10-1: Product: syz [ 188.741571][ T6068] usb 10-1: Manufacturer: syz [ 188.741583][ T6068] usb 10-1: SerialNumber: syz [ 188.767832][ T6068] usb 10-1: 3:1 : does not exist [ 188.767904][ T6068] usb 10-1: 3:2 : does not exist [ 188.809277][ T9472] /dev/sg0: Can't lookup blockdev [ 188.810880][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 188.810894][ T43] audit: type=1400 audit(1788930757.729:694): avc: denied { accept } for pid=9470 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.813203][ T43] audit: type=1400 audit(1788930757.729:695): avc: denied { ioctl } for pid=9470 comm="syz.1.928" path="socket:[44605]" dev="sockfs" ino=44605 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.845548][ T43] audit: type=1400 audit(1788930757.769:696): avc: denied { write } for pid=9470 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.957321][ T9485] netlink: 'syz.1.930': attribute type 4 has an invalid length. [ 189.013978][ T9480] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20003 [ 189.020663][ T43] audit: type=1400 audit(1788930757.939:697): avc: denied { name_bind } for pid=9479 comm="syz.3.929" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 189.129895][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 189.137418][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 189.318379][ T5776] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.428336][ T5776] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.521867][ T5728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.522595][ T6068] usb 10-1: USB disconnect, device number 25 [ 189.529879][ T5728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.531446][ T5776] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.532844][ T5728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.536446][ T5728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.537185][ T5728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.643250][ T5776] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.792843][ T5776] bridge_slave_1: left allmulticast mode [ 189.792890][ T5776] bridge_slave_1: left promiscuous mode [ 189.793050][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.799914][ T5776] bridge_slave_0: left allmulticast mode [ 189.799958][ T5776] bridge_slave_0: left promiscuous mode [ 189.800114][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.923639][ T5776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.927173][ T5776] bond_slave_0: left promiscuous mode [ 189.929731][ T5776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.932813][ T5776] bond_slave_1: left promiscuous mode [ 189.934087][ T5776] bond0 (unregistering): Released all slaves [ 189.975048][ T73] usb 11-1: new high-speed USB device number 35 using dummy_hcd [ 190.125159][ T73] usb 11-1: Using ep0 maxpacket: 16 [ 190.128061][ T73] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 190.135005][ T73] usb 11-1: config 0 has no interfaces? [ 190.139479][ T73] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.139531][ T73] usb 11-1: Product: syz [ 190.139540][ T73] usb 11-1: Manufacturer: syz [ 190.139547][ T73] usb 11-1: SerialNumber: syz [ 190.141350][ T73] usb 11-1: config 0 descriptor?? [ 190.168900][ T9499] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.169029][ T9499] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.169254][ T9499] bridge_slave_0: entered allmulticast mode [ 190.169969][ T9499] bridge_slave_0: entered promiscuous mode [ 190.171422][ T9499] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.171460][ T9499] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.171515][ T9499] bridge_slave_1: entered allmulticast mode [ 190.172245][ T9499] bridge_slave_1: entered promiscuous mode [ 190.192431][ T9499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.197900][ T9499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.248621][ T9499] team0: Port device team_slave_0 added [ 190.258157][ T9499] team0: Port device team_slave_1 added [ 190.309463][ T9499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.309536][ T9499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.309748][ T9499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.311153][ T9499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.311165][ T9499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.311185][ T9499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.350838][ T9499] hsr_slave_0: entered promiscuous mode [ 190.351687][ T9499] hsr_slave_1: entered promiscuous mode [ 190.352310][ T9499] debugfs: 'hsr0' already exists in 'hsr' [ 190.352327][ T9499] Cannot create hsr debugfs directory [ 190.409977][ T5776] hsr_slave_0: left promiscuous mode [ 190.417492][ T5776] hsr_slave_1: left promiscuous mode [ 190.419054][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.419101][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.420243][ T9] usb 11-1: USB disconnect, device number 35 [ 190.423332][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.423349][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.433659][ T5776] veth1_macvtap: left promiscuous mode [ 190.433760][ T5776] veth0_macvtap: left promiscuous mode [ 190.433881][ T5776] veth1_vlan: left promiscuous mode [ 190.433930][ T5776] veth0_vlan: left promiscuous mode [ 190.639202][ T5776] team0 (unregistering): Port device team_slave_1 removed [ 190.644218][ T5776] team0 (unregistering): Port device team_slave_0 removed [ 190.920510][ T9499] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 190.924741][ T9499] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.928826][ T9499] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 190.936992][ T9499] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.938572][ T9499] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 190.952945][ T9499] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.956649][ T9499] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 190.960460][ T9499] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.035437][ T9499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.046305][ T9499] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.050746][ T9394] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.050880][ T9394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.056432][ T9394] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.056560][ T9394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.074776][ T9543] binder: BINDER_SET_CONTEXT_MGR already set [ 191.074934][ T9543] binder: 9542:9543 ioctl 4018620d 200000000040 returned -16 [ 191.398517][ T9499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.400055][ T9566] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 191.592248][ T9499] veth0_vlan: entered promiscuous mode [ 191.598727][ T9499] veth1_vlan: entered promiscuous mode [ 191.615912][ T64] Bluetooth: hci0: command tx timeout [ 191.618373][ T9499] veth0_macvtap: entered promiscuous mode [ 191.623123][ T9499] veth1_macvtap: entered promiscuous mode [ 191.633184][ T9499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.638520][ T9499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.707529][ T9371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.707607][ T9371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.740021][ T9377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.740065][ T9377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.755667][ T6999] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.775837][ T6999] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.776114][ T6999] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.776347][ T6999] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.833000][ T9589] Bluetooth: MGMT ver 1.23 [ 191.848466][ T43] audit: type=1400 audit(1788930760.769:698): avc: denied { write } for pid=9592 comm="syz.6.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.908351][ T9595] selinux_netlink_send: 23 callbacks suppressed [ 191.908458][ T9595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9595 comm=syz.6.952 [ 191.908530][ T9595] netlink: 71 bytes leftover after parsing attributes in process `syz.6.952'. [ 191.911578][ T9595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9595 comm=syz.6.952 [ 192.194083][ T9605] bridge0: port 3(ipvlan2) entered blocking state [ 192.194182][ T9605] bridge0: port 3(ipvlan2) entered disabled state [ 192.194264][ T9605] ipvlan2: entered allmulticast mode [ 192.194274][ T9605] bridge0: entered allmulticast mode [ 192.197419][ T9605] ipvlan2: left allmulticast mode [ 192.197436][ T9605] bridge0: left allmulticast mode [ 192.295086][ T851] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 192.409949][ T43] audit: type=1400 audit(1788930761.329:699): avc: denied { relabelfrom } for pid=9609 comm="syz.3.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 192.420518][ T43] audit: type=1400 audit(1788930761.339:700): avc: denied { relabelto } for pid=9609 comm="syz.3.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 192.465004][ T851] usb 10-1: Using ep0 maxpacket: 16 [ 192.465624][ T851] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 192.466127][ T851] usb 10-1: config 0 has no interfaces? [ 192.470510][ T851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.470530][ T851] usb 10-1: Product: syz [ 192.470542][ T851] usb 10-1: Manufacturer: syz [ 192.470554][ T851] usb 10-1: SerialNumber: syz [ 192.481513][ T851] usb 10-1: config 0 descriptor?? [ 192.786149][ T9] usb 10-1: USB disconnect, device number 26 [ 192.799712][ T9618] CIFS: Attempting to mount //127.0.0.1/share [ 193.087974][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.960'. [ 193.272080][ T9635] FAULT_INJECTION: forcing a failure. [ 193.272080][ T9635] name failslab, interval 1, probability 0, space 0, times 0 [ 193.272135][ T9635] CPU: 0 UID: 0 PID: 9635 Comm: syz.7.962 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.272162][ T9635] Tainted: [L]=SOFTLOCKUP [ 193.272167][ T9635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.272173][ T9635] Call Trace: [ 193.272182][ T9635] [ 193.272186][ T9635] dump_stack_lvl+0x100/0x190 [ 193.272212][ T9635] should_fail_ex.cold+0x5/0xa [ 193.272229][ T9635] should_failslab+0xc2/0x120 [ 193.272247][ T9635] __kmalloc_noprof+0xfc/0x840 [ 193.272263][ T9635] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 193.272294][ T9635] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 193.272316][ T9635] genl_family_rcv_msg_doit+0xc7/0x300 [ 193.272337][ T9635] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 193.272365][ T9635] ? bpf_lsm_capable+0x9/0x10 [ 193.272389][ T9635] ? security_capable+0x80/0x260 [ 193.272417][ T9635] genl_rcv_msg+0x560/0x800 [ 193.272440][ T9635] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.272458][ T9635] ? __lock_acquire+0x5c0/0x1f40 [ 193.272469][ T9635] ? __pfx_ieee802154_llsec_add_seclevel+0x10/0x10 [ 193.272491][ T9635] ? __lock_acquire+0x5c0/0x1f40 [ 193.272505][ T9635] netlink_rcv_skb+0x159/0x420 [ 193.272515][ T9635] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.272528][ T9635] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.272544][ T9635] ? netlink_deliver_tap+0x1ae/0xcc0 [ 193.272563][ T9635] genl_rcv+0x28/0x40 [ 193.272573][ T9635] netlink_unicast+0x585/0x850 [ 193.272585][ T9635] ? __pfx_netlink_unicast+0x10/0x10 [ 193.272600][ T9635] netlink_sendmsg+0x8b0/0xda0 [ 193.272613][ T9635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.272624][ T9635] ? selinux_socket_sendmsg+0x198/0x2f0 [ 193.272645][ T9635] ____sys_sendmsg+0xa4d/0xbe0 [ 193.272659][ T9635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.272670][ T9635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.272688][ T9635] ? lock_acquire+0x1d1/0x380 [ 193.272699][ T9635] ? get_pid_task+0x2a/0x250 [ 193.272715][ T9635] ___sys_sendmsg+0x190/0x1e0 [ 193.272731][ T9635] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.272746][ T9635] ? get_pid_task+0x106/0x250 [ 193.272766][ T9635] ? find_held_lock+0x2b/0x80 [ 193.272800][ T9635] __sys_sendmsg+0x160/0x210 [ 193.272813][ T9635] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.272832][ T9635] do_syscall_64+0x123/0x790 [ 193.272847][ T9635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.272859][ T9635] RIP: 0033:0x7fef4479e159 [ 193.272869][ T9635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.272879][ T9635] RSP: 002b:00007fef45678028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.272894][ T9635] RAX: ffffffffffffffda RBX: 00007fef44a25fa0 RCX: 00007fef4479e159 [ 193.272901][ T9635] RDX: 0000000000008000 RSI: 0000200000000940 RDI: 0000000000000005 [ 193.272908][ T9635] RBP: 00007fef45678090 R08: 0000000000000000 R09: 0000000000000000 [ 193.272915][ T9635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.272921][ T9635] R13: 00007fef44a26038 R14: 00007fef44a25fa0 R15: 00007ffe444451a8 [ 193.272935][ T9635] [ 193.324227][ T9637] netlink: 60 bytes leftover after parsing attributes in process `syz.7.963'. [ 193.393858][ T43] audit: type=1400 audit(1788930762.309:701): avc: denied { setattr } for pid=9638 comm="syz.5.964" name="/" dev="9p" ino=74470817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.616310][ T9] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 193.632963][ T9618] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 193.637177][ T9618] CIFS: VFS: cifs_mount failed w/return code = -11 [ 193.691809][ T64] Bluetooth: hci3: unexpected subevent 0x19 length: 24 < 28 [ 193.695054][ T64] Bluetooth: hci0: command tx timeout [ 193.785305][ T9] usb 12-1: Using ep0 maxpacket: 32 [ 193.791392][ T9] usb 12-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 193.795426][ T9] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.798894][ T9] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.802147][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.808227][ T9] usb 12-1: config 0 descriptor?? [ 193.829419][ T9650] v: renamed from veth0_vlan (while UP) [ 193.849156][ T9650] overlayfs: missing 'workdir' [ 193.962366][ T9652] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 194.030546][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.031069][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.095056][ T1279] usb 10-1: new low-speed USB device number 27 using dummy_hcd [ 194.220832][ T9] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 194.247087][ T1279] usb 10-1: Invalid ep0 maxpacket: 64 [ 194.377237][ T1279] usb 10-1: new low-speed USB device number 28 using dummy_hcd [ 194.393014][ C3] vxcan1: j1939_tp_rxtimer: 0xffff8880562ef000: rx timeout, send abort [ 194.479375][ T5715] usb 12-1: USB disconnect, device number 2 [ 194.525000][ T1279] usb 10-1: Invalid ep0 maxpacket: 64 [ 194.527539][ T1279] usb usb10-port1: attempt power cycle [ 194.876656][ T1279] usb 10-1: new low-speed USB device number 29 using dummy_hcd [ 194.894697][ C3] vxcan1: j1939_tp_rxtimer: 0xffff8880562ef000: abort rx timeout. Force session deactivation [ 194.895978][ T1279] usb 10-1: Invalid ep0 maxpacket: 64 [ 195.035139][ T1279] usb 10-1: new low-speed USB device number 30 using dummy_hcd [ 195.069040][ T1279] usb 10-1: Invalid ep0 maxpacket: 64 [ 195.069329][ T1279] usb usb10-port1: unable to enumerate USB device [ 195.255032][ T42] usb 11-1: new high-speed USB device number 36 using dummy_hcd [ 195.405075][ T42] usb 11-1: Using ep0 maxpacket: 16 [ 195.408477][ T42] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 195.413023][ T42] usb 11-1: config 0 has no interfaces? [ 195.419432][ T42] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.419519][ T42] usb 11-1: Product: syz [ 195.419550][ T42] usb 11-1: Manufacturer: syz [ 195.419581][ T42] usb 11-1: SerialNumber: syz [ 195.433479][ T42] usb 11-1: config 0 descriptor?? [ 195.451418][ T9686] binder: 9685:9686 ioctl 80049367 200000001240 returned -22 [ 195.616850][ T43] audit: type=1400 audit(1788930764.539:702): avc: denied { bind } for pid=9692 comm="syz.7.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.619469][ T9693] netlink: 48 bytes leftover after parsing attributes in process `syz.7.984'. [ 195.622370][ T9694] netlink: 48 bytes leftover after parsing attributes in process `syz.7.984'. [ 195.785008][ T64] Bluetooth: hci0: command tx timeout [ 195.805997][ T9] usb 11-1: USB disconnect, device number 36 [ 195.868161][ T43] audit: type=1400 audit(1788930764.789:703): avc: denied { wake_alarm } for pid=9707 comm="syz.7.987" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.873726][ T9708] netlink: 40 bytes leftover after parsing attributes in process `syz.7.987'. [ 196.128103][ T9716] syzkaller1: entered promiscuous mode [ 196.128162][ T9716] syzkaller1: entered allmulticast mode [ 196.337517][ T9721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.992'. [ 196.341906][ T9724] FAULT_INJECTION: forcing a failure. [ 196.341906][ T9724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.344423][ T9724] CPU: 0 UID: 0 PID: 9724 Comm: syz.6.993 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.344444][ T9724] Tainted: [L]=SOFTLOCKUP [ 196.344448][ T9724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.344455][ T9724] Call Trace: [ 196.344461][ T9724] [ 196.344466][ T9724] dump_stack_lvl+0x100/0x190 [ 196.344494][ T9724] should_fail_ex.cold+0x5/0xa [ 196.344510][ T9724] _copy_from_user+0x2e/0xd0 [ 196.344531][ T9724] copy_msghdr_from_user+0x9f/0x4c0 [ 196.344550][ T9724] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 196.344569][ T9724] ? lock_acquire+0x1d1/0x380 [ 196.344586][ T9724] ? get_pid_task+0x2a/0x250 [ 196.344608][ T9724] ___sys_sendmsg+0x106/0x1e0 [ 196.344633][ T9724] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.344657][ T9724] ? get_pid_task+0x106/0x250 [ 196.344679][ T9724] ? find_held_lock+0x2b/0x80 [ 196.344702][ T9724] __sys_sendmsg+0x160/0x210 [ 196.344714][ T9724] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.344734][ T9724] do_syscall_64+0x123/0x790 [ 196.344754][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.344765][ T9724] RIP: 0033:0x7fb5f139e159 [ 196.344775][ T9724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.344785][ T9724] RSP: 002b:00007fb5f22ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.344796][ T9724] RAX: ffffffffffffffda RBX: 00007fb5f1625fa0 RCX: 00007fb5f139e159 [ 196.344803][ T9724] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 196.344809][ T9724] RBP: 00007fb5f22ef090 R08: 0000000000000000 R09: 0000000000000000 [ 196.344815][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.344822][ T9724] R13: 00007fb5f1626038 R14: 00007fb5f1625fa0 R15: 00007ffcf855ddf8 [ 196.344835][ T9724] [ 196.559324][ T43] audit: type=1400 audit(1788930765.479:704): avc: denied { read } for pid=9742 comm="syz.7.1000" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 196.559552][ T43] audit: type=1400 audit(1788930765.479:705): avc: denied { open } for pid=9742 comm="syz.7.1000" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 196.599002][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'. [ 196.895547][ T1279] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 197.055067][ T1279] usb 12-1: Using ep0 maxpacket: 16 [ 197.057854][ T1279] usb 12-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 197.061792][ T1279] usb 12-1: config 0 has no interfaces? [ 197.066726][ T1279] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.069425][ T1279] usb 12-1: Product: syz [ 197.070885][ T1279] usb 12-1: Manufacturer: syz [ 197.072474][ T1279] usb 12-1: SerialNumber: syz [ 197.077124][ T1279] usb 12-1: config 0 descriptor?? [ 197.521265][ T1279] usb 12-1: USB disconnect, device number 3 [ 197.701020][ T9764] gretap0: entered promiscuous mode [ 197.703126][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1006'. [ 197.706046][ T9764] gretap0: left promiscuous mode [ 197.747225][ T43] audit: type=1800 audit(1788930766.669:706): pid=9757 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1005" name="cpuset.effective_cpus" dev="sda1" ino=2041 res=0 errno=0 [ 197.856955][ T64] Bluetooth: hci0: command tx timeout [ 198.015356][ T9773] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1009'. [ 198.085424][ T9775] SELinux: syz.5.1010 (9775) wrote to user. This is no longer supported. [ 198.093770][ T9777] netlink: 'syz.7.1011': attribute type 14 has an invalid length. [ 198.103175][ T43] audit: type=1400 audit(1788930767.019:707): avc: denied { getopt } for pid=9776 comm="syz.7.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 198.168508][ T43] audit: type=1326 audit(1788930767.089:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9778 comm="syz.7.1013" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef4479e159 code=0x0 [ 198.332408][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1012'. [ 198.379107][ T9810] FAULT_INJECTION: forcing a failure. [ 198.379107][ T9810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.379183][ T9810] CPU: 2 UID: 0 PID: 9810 Comm: syz.7.1019 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.379209][ T9810] Tainted: [L]=SOFTLOCKUP [ 198.379215][ T9810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.379226][ T9810] Call Trace: [ 198.379233][ T9810] [ 198.379239][ T9810] dump_stack_lvl+0x100/0x190 [ 198.379282][ T9810] should_fail_ex.cold+0x5/0xa [ 198.379309][ T9810] _copy_from_user+0x2e/0xd0 [ 198.379344][ T9810] copy_msghdr_from_user+0x9f/0x4c0 [ 198.379376][ T9810] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 198.379412][ T9810] ? lock_acquire+0x1d1/0x380 [ 198.379431][ T9810] ? get_pid_task+0x2a/0x250 [ 198.379456][ T9810] ___sys_sendmsg+0x106/0x1e0 [ 198.379482][ T9810] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.379507][ T9810] ? get_pid_task+0x106/0x250 [ 198.379539][ T9810] ? find_held_lock+0x2b/0x80 [ 198.379579][ T9810] __sys_sendmsg+0x160/0x210 [ 198.379599][ T9810] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.379631][ T9810] do_syscall_64+0x123/0x790 [ 198.379661][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.379679][ T9810] RIP: 0033:0x7fef4479e159 [ 198.379694][ T9810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.379711][ T9810] RSP: 002b:00007fef45678028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.379729][ T9810] RAX: ffffffffffffffda RBX: 00007fef44a25fa0 RCX: 00007fef4479e159 [ 198.379741][ T9810] RDX: 0000000000014014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 198.379751][ T9810] RBP: 00007fef45678090 R08: 0000000000000000 R09: 0000000000000000 [ 198.379762][ T9810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.379773][ T9810] R13: 00007fef44a26038 R14: 00007fef44a25fa0 R15: 00007ffe444451a8 [ 198.379797][ T9810] [ 198.610551][ T9817] netlink: 'syz.6.1022': attribute type 33 has an invalid length. [ 198.645112][ T851] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 198.670593][ T9821] tmpfs: Bad value for 'mpol' [ 198.794963][ T851] usb 12-1: Using ep0 maxpacket: 16 [ 198.795755][ T851] usb 12-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 198.796289][ T851] usb 12-1: config 0 has no interfaces? [ 198.804471][ T851] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.804492][ T851] usb 12-1: Product: syz [ 198.804505][ T851] usb 12-1: Manufacturer: syz [ 198.804518][ T851] usb 12-1: SerialNumber: syz [ 198.807033][ T851] usb 12-1: config 0 descriptor?? [ 198.859830][ T9830] block nbd5: NBD_DISCONNECT [ 199.080484][ T43] audit: type=1400 audit(1788930767.999:709): avc: denied { ioctl } for pid=9835 comm="syz.5.1030" path="socket:[50899]" dev="sockfs" ino=50899 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 199.083458][ T43] audit: type=1400 audit(1788930767.999:710): avc: denied { ioctl } for pid=9835 comm="syz.5.1030" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x564d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 199.130338][ T5715] usb 12-1: USB disconnect, device number 4 [ 199.276161][ T9840] page: refcount:5 mapcount:4 mapping:0000000000000000 index:0x7f868f54d pfn:0x48000 [ 199.276252][ T9840] flags: 0xfff00000000014(referenced|dirty|node=0|zone=1|lastcpupid=0x7ff) [ 199.276346][ T9840] raw: 00fff00000000014 0000000000000000 dead000000000122 0000000000000000 [ 199.276365][ T9840] raw: 00000007f868f54d 0000000000000000 0000000500000003 0000000000000000 [ 199.276376][ T9840] page dumped because: unmovable page [ 199.276386][ T9840] page_owner tracks the page as allocated [ 199.276393][ T9840] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 9498, tgid 9498 (syz-executor), ts 189454486514 [ 199.276422][ T9840] post_alloc_hook+0xfd/0x120 [ 199.276469][ T9840] get_page_from_freelist+0x110d/0x35d0 [ 199.276498][ T9840] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 199.276527][ T9840] alloc_pages_mpol+0x201/0x550 [ 199.276550][ T9840] alloc_pages_noprof+0x1a/0x160 [ 199.276573][ T9840] __vmalloc_node_range_noprof+0x833/0x1420 [ 199.276597][ T9840] vmalloc_user_noprof+0x9e/0xe0 [ 199.276617][ T9840] kcov_ioctl+0x4d/0x760 [ 199.276636][ T9840] __x64_sys_ioctl+0x18e/0x210 [ 199.276652][ T9840] do_syscall_64+0x123/0x790 [ 199.276679][ T9840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.276697][ T9840] page last free pid 5720 tgid 5720 ts 189366401115 stack trace: [ 199.276740][ T9840] free_pages_prepare+0x586/0xe00 [ 199.276767][ T9840] __free_contig_range_common+0x14f/0x250 [ 199.276793][ T9840] free_pages_bulk+0x12a/0x200 [ 199.276809][ T9840] vm_area_free_pages+0xb2/0x2a0 [ 199.276832][ T9840] vfree+0xf7/0x6d0 [ 199.276852][ T9840] kcov_close+0x34/0x60 [ 199.276870][ T9840] __fput+0x3ff/0xb50 [ 199.276892][ T9840] task_work_run+0x150/0x240 [ 199.276918][ T9840] do_exit+0x951/0x2ae0 [ 199.276939][ T9840] do_group_exit+0xd5/0x2a0 [ 199.276961][ T9840] __x64_sys_exit_group+0x3e/0x50 [ 199.276983][ T9840] x64_sys_call+0x1567/0x1570 [ 199.277002][ T9840] do_syscall_64+0x123/0x790 [ 199.277023][ T9840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.317903][ T43] audit: type=1326 audit(1788930768.239:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.6.1032" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5f139e159 code=0x0 [ 199.331329][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 199.655729][ T5715] usb 11-1: new low-speed USB device number 37 using dummy_hcd [ 199.673145][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1034'. [ 199.813145][ T5715] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 199.818272][ T5715] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.818344][ T5715] usb 11-1: config 0 has no interface number 0 [ 199.818401][ T5715] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 199.818424][ T5715] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 199.818454][ T5715] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.821174][ T5715] usb 11-1: config 0 descriptor?? [ 199.821902][ T9847] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 199.832123][ T5715] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 199.934084][ T9856] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 199.937040][ T9856] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 199.955011][ T9] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 200.085009][ T9] usb 12-1: device descriptor read/64, error -71 [ 200.334941][ T9] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 200.484953][ T9] usb 12-1: device descriptor read/64, error -71 [ 200.595079][ T9] usb usb12-port1: attempt power cycle [ 200.595118][ T5715] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 200.745180][ T5715] usb 8-1: Using ep0 maxpacket: 16 [ 200.745715][ T5715] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 200.746151][ T5715] usb 8-1: config 0 has no interfaces? [ 200.747702][ T5715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.747714][ T5715] usb 8-1: Product: syz [ 200.747722][ T5715] usb 8-1: Manufacturer: syz [ 200.747730][ T5715] usb 8-1: SerialNumber: syz [ 200.749254][ T5715] usb 8-1: config 0 descriptor?? [ 200.954943][ T9] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 200.975547][ T9] usb 12-1: device descriptor read/8, error -71 [ 201.019773][ T5715] usb 8-1: USB disconnect, device number 39 [ 201.234966][ T9] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 201.255648][ T9] usb 12-1: device descriptor read/8, error -71 [ 201.365995][ T9] usb usb12-port1: unable to enumerate USB device [ 201.541949][ T9886] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 201.852890][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1049'. [ 201.916636][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 201.916699][ T43] audit: type=1400 audit(1788930770.839:713): avc: denied { associate } for pid=9905 comm="syz.3.1052" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 202.285037][ T5715] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 202.335463][ T9] usb 11-1: USB disconnect, device number 37 [ 202.405797][ T9917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9917 comm=syz.6.1056 [ 202.438510][ T5715] usb 8-1: Using ep0 maxpacket: 16 [ 202.439281][ T5715] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 202.439923][ T5715] usb 8-1: config 0 has no interfaces? [ 202.441836][ T5715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.441858][ T5715] usb 8-1: Product: syz [ 202.441912][ T5715] usb 8-1: Manufacturer: syz [ 202.441927][ T5715] usb 8-1: SerialNumber: syz [ 202.444587][ T5715] usb 8-1: config 0 descriptor?? [ 202.483264][ T9918] v: renamed from veth0_vlan [ 202.719191][ T5715] usb 8-1: USB disconnect, device number 40 [ 202.952783][ T9926] syzkaller1: entered promiscuous mode [ 202.952820][ T9926] syzkaller1: entered allmulticast mode [ 203.128212][ T9934] loop5: detected capacity change from 0 to 7 [ 203.132991][ T9934] Dev loop5: unable to read RDB block 7 [ 203.135910][ T9934] loop5: AHDI p1 [ 203.135984][ T9934] loop5: partition table partially beyond EOD, truncated [ 203.136297][ T9934] FAULT_INJECTION: forcing a failure. [ 203.136297][ T9934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.136315][ T9934] CPU: 1 UID: 0 PID: 9934 Comm: syz.5.1061 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.136329][ T9934] Tainted: [L]=SOFTLOCKUP [ 203.136333][ T9934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.136339][ T9934] Call Trace: [ 203.136343][ T9934] [ 203.136347][ T9934] dump_stack_lvl+0x100/0x190 [ 203.136373][ T9934] should_fail_ex.cold+0x5/0xa [ 203.136394][ T9934] _copy_to_user+0x32/0xd0 [ 203.136416][ T9934] simple_read_from_buffer+0xcb/0x170 [ 203.136431][ T9934] proc_fail_nth_read+0x1af/0x230 [ 203.136444][ T9934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.136459][ T9934] ? rw_verify_area+0xce/0x6d0 [ 203.136474][ T9934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.136487][ T9934] vfs_read+0x1e4/0xb40 [ 203.136498][ T9934] ? lock_acquire+0x1d1/0x380 [ 203.136509][ T9934] ? __fget_files+0x34/0x3d0 [ 203.136522][ T9934] ? __pfx_vfs_read+0x10/0x10 [ 203.136531][ T9934] ? find_held_lock+0x2b/0x80 [ 203.136546][ T9934] ? __fget_files+0x215/0x3d0 [ 203.136561][ T9934] ? __fget_files+0x21f/0x3d0 [ 203.136578][ T9934] ksys_read+0x12a/0x250 [ 203.136588][ T9934] ? __pfx_ksys_read+0x10/0x10 [ 203.136602][ T9934] do_syscall_64+0x123/0x790 [ 203.136621][ T9934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.136632][ T9934] RIP: 0033:0x7ff59055e98e [ 203.136642][ T9934] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.136653][ T9934] RSP: 002b:00007ff591511fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.136663][ T9934] RAX: ffffffffffffffda RBX: 00007ff5915126c0 RCX: 00007ff59055e98e [ 203.136670][ T9934] RDX: 000000000000000f RSI: 00007ff5915120a0 RDI: 0000000000000005 [ 203.136677][ T9934] RBP: 00007ff591512090 R08: 0000000000000000 R09: 0000000000000000 [ 203.136683][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.136689][ T9934] R13: 00007ff590826038 R14: 00007ff590825fa0 R15: 00007ffc77302638 [ 203.136703][ T9934] [ 203.168162][ T9936] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 203.247099][ T43] audit: type=1400 audit(1788930772.169:714): avc: denied { nlmsg_read } for pid=9937 comm="syz.3.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.255091][ T6226] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 203.274413][ T64] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 203.285089][ T9943] binder: 9942:9943 ioctl 800c581e 200000000000 returned -22 [ 203.415569][ T6226] usb 12-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 203.419550][ T6226] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.419594][ T6226] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.433250][ T6226] as10x_usb: device has been detected [ 203.435463][ T6226] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 203.444391][ T6226] usb 12-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 203.449282][ T6226] as10x_usb: error during firmware upload part1 [ 203.451658][ T6226] Registered device Abilis Systems DVB-Titan [ 203.630266][ T43] audit: type=1400 audit(1788930772.549:715): avc: denied { ioctl } for pid=9927 comm="syz.7.1059" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.684709][ T43] audit: type=1400 audit(1788930772.599:716): avc: denied { read write } for pid=6882 comm="syz-executor" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 203.684766][ T43] audit: type=1400 audit(1788930772.599:717): avc: denied { open } for pid=6882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 203.692241][ T43] audit: type=1400 audit(1788930772.599:718): avc: denied { ioctl } for pid=6882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 203.706985][ T43] audit: type=1400 audit(1788930772.629:719): avc: denied { create } for pid=9962 comm="syz.5.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.707814][ T43] audit: type=1400 audit(1788930772.629:720): avc: denied { ioctl } for pid=9962 comm="syz.5.1069" path="socket:[51865]" dev="sockfs" ino=51865 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.708270][ T43] audit: type=1400 audit(1788930772.629:721): avc: denied { create } for pid=9962 comm="syz.5.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 203.708658][ T43] audit: type=1400 audit(1788930772.629:722): avc: denied { write } for pid=9962 comm="syz.5.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 203.832797][ T9970] FAULT_INJECTION: forcing a failure. [ 203.832797][ T9970] name failslab, interval 1, probability 0, space 0, times 0 [ 203.832859][ T9970] CPU: 2 UID: 0 PID: 9970 Comm: syz.5.1072 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.832886][ T9970] Tainted: [L]=SOFTLOCKUP [ 203.832891][ T9970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.832898][ T9970] Call Trace: [ 203.832902][ T9970] [ 203.832907][ T9970] dump_stack_lvl+0x100/0x190 [ 203.832930][ T9970] should_fail_ex.cold+0x5/0xa [ 203.832947][ T9970] should_failslab+0xc2/0x120 [ 203.832962][ T9970] __kmalloc_cache_noprof+0x91/0x6d0 [ 203.832979][ T9970] ? iommufd_test+0x2d6b/0x6600 [ 203.832994][ T9970] iommufd_test+0x2d6b/0x6600 [ 203.833007][ T9970] ? __lock_acquire+0x5c0/0x1f40 [ 203.833020][ T9970] ? __lock_acquire+0x5c0/0x1f40 [ 203.833031][ T9970] ? __pfx_iommufd_test+0x10/0x10 [ 203.833041][ T9970] ? tomoyo_path_number_perm+0x188/0x580 [ 203.833061][ T9970] ? lock_acquire+0x1d1/0x380 [ 203.833072][ T9970] ? __might_fault+0xc5/0x140 [ 203.833089][ T9970] ? find_held_lock+0x2b/0x80 [ 203.833103][ T9970] ? __might_fault+0xc5/0x140 [ 203.833124][ T9970] iommufd_fops_ioctl+0x358/0x520 [ 203.833139][ T9970] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 203.833151][ T9970] ? __fget_files+0x34/0x3d0 [ 203.833171][ T9970] ? selinux_file_ioctl+0x13b/0x290 [ 203.833182][ T9970] ? selinux_file_ioctl+0xb6/0x290 [ 203.833199][ T9970] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 203.833213][ T9970] __x64_sys_ioctl+0x18e/0x210 [ 203.833225][ T9970] do_syscall_64+0x123/0x790 [ 203.833241][ T9970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.833254][ T9970] RIP: 0033:0x7ff59059e159 [ 203.833264][ T9970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.833274][ T9970] RSP: 002b:00007ff591512028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.833286][ T9970] RAX: ffffffffffffffda RBX: 00007ff590825fa0 RCX: 00007ff59059e159 [ 203.833293][ T9970] RDX: 0000200000000140 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 203.833299][ T9970] RBP: 00007ff59063503b R08: 0000000000000000 R09: 0000000000000000 [ 203.833305][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.833311][ T9970] R13: 00007ff590826038 R14: 00007ff590825fa0 R15: 00007ffc77302638 [ 203.833325][ T9970] [ 203.888640][ T9975] FAULT_INJECTION: forcing a failure. [ 203.888640][ T9975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.888661][ T9975] CPU: 0 UID: 0 PID: 9975 Comm: syz.5.1075 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.888676][ T9975] Tainted: [L]=SOFTLOCKUP [ 203.888679][ T9975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.888685][ T9975] Call Trace: [ 203.888689][ T9975] [ 203.888693][ T9975] dump_stack_lvl+0x100/0x190 [ 203.888714][ T9975] should_fail_ex.cold+0x5/0xa [ 203.888730][ T9975] _copy_from_iter+0x1f4/0x1690 [ 203.888752][ T9975] ? __pfx__copy_from_iter+0x10/0x10 [ 203.888769][ T9975] ? kasan_save_track+0x14/0x30 [ 203.888781][ T9975] ? __kasan_kmalloc+0xaa/0xb0 [ 203.888793][ T9975] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 203.888809][ T9975] ? configfs_write_iter+0x388/0x4e0 [ 203.888833][ T9975] configfs_write_iter+0xb3/0x4e0 [ 203.888852][ T9975] vfs_write+0x6af/0x1050 [ 203.888863][ T9975] ? __pfx_configfs_write_iter+0x10/0x10 [ 203.888881][ T9975] ? __pfx_vfs_write+0x10/0x10 [ 203.888890][ T9975] ? find_held_lock+0x2b/0x80 [ 203.888915][ T9975] ksys_write+0x12a/0x250 [ 203.888943][ T9975] ? __pfx_ksys_write+0x10/0x10 [ 203.888958][ T9975] do_syscall_64+0x123/0x790 [ 203.888973][ T9975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.888985][ T9975] RIP: 0033:0x7ff59059e159 [ 203.888995][ T9975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.889006][ T9975] RSP: 002b:00007ff591512028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 203.889017][ T9975] RAX: ffffffffffffffda RBX: 00007ff590825fa0 RCX: 00007ff59059e159 [ 203.889024][ T9975] RDX: 0000000000000110 RSI: 0000200000000180 RDI: 0000000000000003 [ 203.889031][ T9975] RBP: 00007ff591512090 R08: 0000000000000000 R09: 0000000000000000 [ 203.889037][ T9975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.889044][ T9975] R13: 00007ff590826038 R14: 00007ff590825fa0 R15: 00007ffc77302638 [ 203.889058][ T9975] [ 204.157567][ T9990] erspan0: entered promiscuous mode [ 204.157621][ T9990] erspan0: entered allmulticast mode [ 204.255757][ T6226] usb 8-1: new low-speed USB device number 41 using dummy_hcd [ 204.316703][ T9995] FAULT_INJECTION: forcing a failure. [ 204.316703][ T9995] name failslab, interval 1, probability 0, space 0, times 0 [ 204.316773][ T9995] CPU: 2 UID: 0 PID: 9995 Comm: syz.6.1080 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.316801][ T9995] Tainted: [L]=SOFTLOCKUP [ 204.316807][ T9995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.316814][ T9995] Call Trace: [ 204.316818][ T9995] [ 204.316823][ T9995] dump_stack_lvl+0x100/0x190 [ 204.316850][ T9995] should_fail_ex.cold+0x5/0xa [ 204.316867][ T9995] should_failslab+0xc2/0x120 [ 204.316885][ T9995] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 204.316897][ T9995] ? find_held_lock+0x2b/0x80 [ 204.316925][ T9995] ? alloc_inode+0x183/0x250 [ 204.316938][ T9995] alloc_inode+0x183/0x250 [ 204.316948][ T9995] path_from_stashed+0x25b/0x760 [ 204.316963][ T9995] ? do_raw_spin_unlock+0x145/0x1e0 [ 204.316980][ T9995] ns_get_path+0x60/0x80 [ 204.316996][ T9995] proc_ns_get_link+0x260/0x2e0 [ 204.317011][ T9995] ? __pfx_proc_ns_get_link+0x10/0x10 [ 204.317029][ T9995] pick_link+0xd17/0x13c0 [ 204.317039][ T9995] ? rcu_is_watching+0x13/0xc0 [ 204.317053][ T9995] ? __pfx_proc_ns_get_link+0x10/0x10 [ 204.317069][ T9995] step_into_slowpath+0x9ba/0xf90 [ 204.317079][ T9995] ? proc_ns_dir_lookup+0x1da/0x390 [ 204.317096][ T9995] ? __pfx_step_into_slowpath+0x10/0x10 [ 204.317112][ T9995] path_openat+0xfab/0x2440 [ 204.317127][ T9995] ? __pfx_path_openat+0x10/0x10 [ 204.317144][ T9995] do_file_open+0x20e/0x430 [ 204.317159][ T9995] ? __pfx_do_file_open+0x10/0x10 [ 204.317181][ T9995] ? _raw_spin_unlock+0x28/0x50 [ 204.317196][ T9995] ? alloc_fd+0x471/0x7a0 [ 204.317213][ T9995] do_sys_openat2+0x10f/0x1e0 [ 204.317227][ T9995] ? __pfx_do_sys_openat2+0x10/0x10 [ 204.317246][ T9995] __x64_sys_openat+0x12d/0x210 [ 204.317261][ T9995] ? __pfx___x64_sys_openat+0x10/0x10 [ 204.317281][ T9995] do_syscall_64+0x123/0x790 [ 204.317295][ T9995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.317307][ T9995] RIP: 0033:0x7fb5f135e98e [ 204.317317][ T9995] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 204.317327][ T9995] RSP: 002b:00007fb5f22eef18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 204.317338][ T9995] RAX: ffffffffffffffda RBX: 00007fb5f22ef6c0 RCX: 00007fb5f135e98e [ 204.317345][ T9995] RDX: 0000000000000000 RSI: 00007fb5f1434776 RDI: ffffffffffffff9c [ 204.317351][ T9995] RBP: 00007fb5f143503b R08: 0000000000000000 R09: 0000000000000000 [ 204.317358][ T9995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.317364][ T9995] R13: 00007fb5f1626038 R14: 00007fb5f1625fa0 R15: 00007ffcf855ddf8 [ 204.317378][ T9995] [ 204.386324][ T6226] usb 8-1: device descriptor read/64, error -71 [ 204.634976][ T6226] usb 8-1: new low-speed USB device number 42 using dummy_hcd [ 204.688295][T10002] 9p: Bad value for 'rfdno' [ 204.765101][ T6226] usb 8-1: device descriptor read/64, error -71 [ 204.875126][ T6226] usb usb8-port1: attempt power cycle [ 204.954106][ T30] usb 12-1: USB disconnect, device number 9 [ 204.962491][ T30] Unregistered device Abilis Systems DVB-Titan [ 204.963959][ T30] as10x_usb: device has been disconnected [ 205.074245][T10011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.224957][ T6226] usb 8-1: new low-speed USB device number 43 using dummy_hcd [ 205.245374][ T6226] usb 8-1: device descriptor read/8, error -71 [ 205.495033][ T6226] usb 8-1: new low-speed USB device number 44 using dummy_hcd [ 205.517519][ T6226] usb 8-1: device descriptor read/8, error -71 [ 205.625383][ T6226] usb usb8-port1: unable to enumerate USB device [ 206.824958][ T64] Bluetooth: hci1: command 0x0401 tx timeout [ 206.825416][T10005] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 207.724376][T10005] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 207.724593][T10005] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 207.724667][T10005] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 207.737383][T10005] ------------[ cut here ]------------ [ 207.737419][T10005] refcount_t: underflow; use-after-free. [ 207.737453][T10005] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xf4/0x130, CPU#0: syz.6.1083/10005 [ 207.745740][T10005] Modules linked in: [ 207.747461][T10005] CPU: 0 UID: 0 PID: 10005 Comm: syz.6.1083 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.751904][T10005] Tainted: [L]=SOFTLOCKUP [ 207.753596][T10005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.756847][T10005] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 207.758766][T10005] Code: cc e8 e0 02 e2 fc 48 8d 3d 89 d1 25 0c 67 48 0f b9 3a e8 cf 02 e2 fc 5b 5d e9 98 68 a9 06 e8 c3 02 e2 fc 48 8d 3d 7c d1 25 0c <67> 48 0f b9 3a e8 b2 02 e2 fc 5b 5d c3 cc cc cc cc e8 a6 02 e2 fc [ 207.765154][T10005] RSP: 0018:ffffc900048ef2c8 EFLAGS: 00010287 [ 207.767700][T10005] RAX: 000000000000ba88 RBX: ffff888056a62878 RCX: ffffc900249e1000 [ 207.771007][T10005] RDX: 0000000000080000 RSI: ffffffff852a0e4d RDI: ffffffff914fdfd0 [ 207.774594][T10005] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 207.777699][T10005] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88803506f800 [ 207.781010][T10005] R13: ffff888056a62878 R14: ffffffff86697440 R15: dffffc0000000000 [ 207.784441][T10005] FS: 00007fb5f22ef6c0(0000) GS:ffff8880d5b5d000(0000) knlGS:0000000000000000 [ 207.788021][T10005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.790662][T10005] CR2: 00007fe4807eb840 CR3: 000000004edbc000 CR4: 0000000000352ef0 [ 207.793805][T10005] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 207.797043][T10005] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 207.800198][T10005] Call Trace: [ 207.801523][T10005] [ 207.802725][T10005] klist_put+0x18a/0x1d0 [ 207.804422][T10005] klist_remove+0x14c/0x2e0 [ 207.806331][T10005] ? __pfx_klist_remove+0x10/0x10 [ 207.808320][T10005] ? __pfx_kobject_move+0x10/0x10 [ 207.810343][T10005] ? kobject_put+0xb9/0x640 [ 207.812191][T10005] device_move+0x12d/0x1140 [ 207.814013][T10005] hci_conn_del_sysfs+0x86/0x1a0 [ 207.816056][T10005] hci_conn_del+0x506/0x1180 [ 207.817990][T10005] hci_abort_conn_sync+0x7d9/0xb20 [ 207.820106][T10005] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 207.822395][T10005] ? lock_acquire+0x1d1/0x380 [ 207.824279][T10005] ? hci_disconnect_all_sync.constprop.0.isra.0+0x7c/0x430 [ 207.827215][T10005] ? find_held_lock+0x2b/0x80 [ 207.829083][T10005] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 207.831957][T10005] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 207.835030][T10005] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 207.837882][T10005] hci_disconnect_all_sync.constprop.0.isra.0+0x155/0x430 [ 207.840722][T10005] ? __pfx_hci_disconnect_all_sync.constprop.0.isra.0+0x10/0x10 [ 207.843761][T10005] ? __hci_cmd_sync_status_sk+0xe4/0x190 [ 207.846068][T10005] hci_suspend_sync+0xa3d/0xc40 [ 207.848019][T10005] ? enable_work+0x24c/0x320 [ 207.849870][T10005] ? __pfx_hci_suspend_sync+0x10/0x10 [ 207.852015][T10005] ? mgmt_pending_find+0x13e/0x1a0 [ 207.854075][T10005] hci_suspend_dev+0x31d/0x540 [ 207.856253][T10005] ? __pfx_hci_suspend_dev+0x10/0x10 [ 207.858389][T10005] ? kobject_get+0xbb/0x150 [ 207.860194][T10005] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 207.862550][T10005] hci_suspend_notifier+0x21e/0x330 [ 207.864616][T10005] notifier_call_chain+0x99/0x3f0 [ 207.866716][T10005] blocking_notifier_call_chain_robust+0xc8/0x160 [ 207.869249][T10005] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 207.872004][T10005] ? pin_hibernation_swap_type+0x145/0x1a0 [ 207.874230][T10005] ? do_raw_spin_unlock+0x145/0x1e0 [ 207.877095][T10005] pm_notifier_call_chain_robust+0x27/0x60 [ 207.879337][T10005] snapshot_open+0x189/0x2b0 [ 207.881201][T10005] ? __pfx_snapshot_open+0x10/0x10 [ 207.883221][T10005] misc_open+0x26d/0x450 [ 207.885082][T10005] ? __pfx_misc_open+0x10/0x10 [ 207.886994][T10005] chrdev_open+0x234/0x6a0 [ 207.888815][T10005] ? __pfx_chrdev_open+0x10/0x10 [ 207.890797][T10005] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 207.893331][T10005] do_dentry_open+0x6ab/0x14d0 [ 207.895353][T10005] ? __pfx_chrdev_open+0x10/0x10 [ 207.897316][T10005] vfs_open+0x82/0x3f0 [ 207.898975][T10005] path_openat+0x19fa/0x2440 [ 207.900825][T10005] ? __pfx_path_openat+0x10/0x10 [ 207.902813][T10005] do_file_open+0x20e/0x430 [ 207.904624][T10005] ? __pfx_do_file_open+0x10/0x10 [ 207.906720][T10005] ? _raw_spin_unlock+0x28/0x50 [ 207.908647][T10005] ? alloc_fd+0x471/0x7a0 [ 207.910415][T10005] do_sys_openat2+0x10f/0x1e0 [ 207.912193][T10005] ? __pfx_do_sys_openat2+0x10/0x10 [ 207.914223][T10005] __x64_sys_openat+0x12d/0x210 [ 207.916178][T10005] ? __pfx___x64_sys_openat+0x10/0x10 [ 207.918312][T10005] ? selinux_file_ioctl+0xb6/0x290 [ 207.920376][T10005] do_syscall_64+0x123/0x790 [ 207.922240][T10005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.924603][T10005] RIP: 0033:0x7fb5f139e159 [ 207.926473][T10005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.934051][T10005] RSP: 002b:00007fb5f22ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 207.937479][T10005] RAX: ffffffffffffffda RBX: 00007fb5f1625fa0 RCX: 00007fb5f139e159 [ 207.940660][T10005] RDX: 0000000000000100 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 207.943790][T10005] RBP: 00007fb5f143503b R08: 0000000000000000 R09: 0000000000000000 [ 207.946993][T10005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.950141][T10005] R13: 00007fb5f1626038 R14: 00007fb5f1625fa0 R15: 00007ffcf855ddf8 [ 207.953296][T10005] [ 207.954564][T10005] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 207.957448][T10005] CPU: 0 UID: 0 PID: 10005 Comm: syz.6.1083 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.961714][T10005] Tainted: [L]=SOFTLOCKUP [ 207.963434][T10005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.967382][T10005] Call Trace: [ 207.968720][T10005] [ 207.969881][T10005] dump_stack_lvl+0x100/0x190 [ 207.971790][T10005] vpanic+0x553/0x970 [ 207.973378][T10005] ? __pfx_vpanic+0x10/0x10 [ 207.975197][T10005] panic+0xd1/0xe0 [ 207.976695][T10005] ? __pfx_panic+0x10/0x10 [ 207.978485][T10005] check_panic_on_warn.cold+0x19/0x34 [ 207.980625][T10005] ? refcount_warn_saturate+0xf4/0x130 [ 207.982797][T10005] __warn.cold+0x191/0x318 [ 207.984572][T10005] __report_bug+0x30f/0x440 [ 207.986405][T10005] ? refcount_warn_saturate+0xf4/0x130 [ 207.988573][T10005] ? __pfx___report_bug+0x10/0x10 [ 207.990636][T10005] ? kfree+0x22b/0x6d0 [ 207.991945][T10005] ? kobject_move+0x15d/0x260 [ 207.993504][T10005] ? device_move+0xa9/0x1140 [ 207.995016][T10005] ? refcount_warn_saturate+0xed/0x130 [ 207.996752][T10005] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 207.998756][T10005] report_bug_entry+0xe2/0x290 [ 208.000297][T10005] ? refcount_warn_saturate+0xf4/0x130 [ 208.002009][T10005] handle_bug+0x1cd/0x2a0 [ 208.003496][T10005] exc_invalid_op+0x17/0x50 [ 208.004927][T10005] asm_exc_invalid_op+0x1a/0x20 [ 208.006460][T10005] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 208.008398][T10005] Code: cc e8 e0 02 e2 fc 48 8d 3d 89 d1 25 0c 67 48 0f b9 3a e8 cf 02 e2 fc 5b 5d e9 98 68 a9 06 e8 c3 02 e2 fc 48 8d 3d 7c d1 25 0c <67> 48 0f b9 3a e8 b2 02 e2 fc 5b 5d c3 cc cc cc cc e8 a6 02 e2 fc [ 208.014371][T10005] RSP: 0018:ffffc900048ef2c8 EFLAGS: 00010287 [ 208.016271][T10005] RAX: 000000000000ba88 RBX: ffff888056a62878 RCX: ffffc900249e1000 [ 208.018816][T10005] RDX: 0000000000080000 RSI: ffffffff852a0e4d RDI: ffffffff914fdfd0 [ 208.021290][T10005] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 208.023820][T10005] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88803506f800 [ 208.026260][T10005] R13: ffff888056a62878 R14: ffffffff86697440 R15: dffffc0000000000 [ 208.028734][T10005] ? __pfx_klist_children_put+0x10/0x10 [ 208.030490][T10005] ? refcount_warn_saturate+0xed/0x130 [ 208.032202][T10005] ? refcount_warn_saturate+0xed/0x130 [ 208.033937][T10005] klist_put+0x18a/0x1d0 [ 208.035307][T10005] klist_remove+0x14c/0x2e0 [ 208.036736][T10005] ? __pfx_klist_remove+0x10/0x10 [ 208.038372][T10005] ? __pfx_kobject_move+0x10/0x10 [ 208.039955][T10005] ? kobject_put+0xb9/0x640 [ 208.041385][T10005] device_move+0x12d/0x1140 [ 208.042925][T10005] hci_conn_del_sysfs+0x86/0x1a0 [ 208.044485][T10005] hci_conn_del+0x506/0x1180 [ 208.045971][T10005] hci_abort_conn_sync+0x7d9/0xb20 [ 208.047601][T10005] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 208.049396][T10005] ? lock_acquire+0x1d1/0x380 [ 208.050913][T10005] ? hci_disconnect_all_sync.constprop.0.isra.0+0x7c/0x430 [ 208.053457][T10005] ? find_held_lock+0x2b/0x80 [ 208.055174][T10005] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 208.057427][T10005] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 208.059709][T10005] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 208.061957][T10005] hci_disconnect_all_sync.constprop.0.isra.0+0x155/0x430 [ 208.064207][T10005] ? __pfx_hci_disconnect_all_sync.constprop.0.isra.0+0x10/0x10 [ 208.066597][T10005] ? __hci_cmd_sync_status_sk+0xe4/0x190 [ 208.068388][T10005] hci_suspend_sync+0xa3d/0xc40 [ 208.069914][T10005] ? enable_work+0x24c/0x320 [ 208.071391][T10005] ? __pfx_hci_suspend_sync+0x10/0x10 [ 208.073101][T10005] ? mgmt_pending_find+0x13e/0x1a0 [ 208.074741][T10005] hci_suspend_dev+0x31d/0x540 [ 208.076252][T10005] ? __pfx_hci_suspend_dev+0x10/0x10 [ 208.077953][T10005] ? kobject_get+0xbb/0x150 [ 208.079422][T10005] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 208.081291][T10005] hci_suspend_notifier+0x21e/0x330 [ 208.082976][T10005] notifier_call_chain+0x99/0x3f0 [ 208.084566][T10005] blocking_notifier_call_chain_robust+0xc8/0x160 [ 208.086579][T10005] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 208.088790][T10005] ? pin_hibernation_swap_type+0x145/0x1a0 [ 208.090627][T10005] ? do_raw_spin_unlock+0x145/0x1e0 [ 208.092268][T10005] pm_notifier_call_chain_robust+0x27/0x60 [ 208.094330][T10005] snapshot_open+0x189/0x2b0 [ 208.095920][T10005] ? __pfx_snapshot_open+0x10/0x10 [ 208.097599][T10005] misc_open+0x26d/0x450 [ 208.099016][T10005] ? __pfx_misc_open+0x10/0x10 [ 208.100526][T10005] chrdev_open+0x234/0x6a0 [ 208.101938][T10005] ? __pfx_chrdev_open+0x10/0x10 [ 208.103526][T10005] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 208.105496][T10005] do_dentry_open+0x6ab/0x14d0 [ 208.107023][T10005] ? __pfx_chrdev_open+0x10/0x10 [ 208.108595][T10005] vfs_open+0x82/0x3f0 [ 208.109921][T10005] path_openat+0x19fa/0x2440 [ 208.111400][T10005] ? __pfx_path_openat+0x10/0x10 [ 208.113130][T10005] do_file_open+0x20e/0x430 [ 208.114584][T10005] ? __pfx_do_file_open+0x10/0x10 [ 208.116168][T10005] ? _raw_spin_unlock+0x28/0x50 [ 208.117726][T10005] ? alloc_fd+0x471/0x7a0 [ 208.119156][T10005] do_sys_openat2+0x10f/0x1e0 [ 208.120651][T10005] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.122309][T10005] __x64_sys_openat+0x12d/0x210 [ 208.123900][T10005] ? __pfx___x64_sys_openat+0x10/0x10 [ 208.125583][T10005] ? selinux_file_ioctl+0xb6/0x290 [ 208.127217][T10005] do_syscall_64+0x123/0x790 [ 208.128699][T10005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.130609][T10005] RIP: 0033:0x7fb5f139e159 [ 208.132020][T10005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.137987][T10005] RSP: 002b:00007fb5f22ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.140624][T10005] RAX: ffffffffffffffda RBX: 00007fb5f1625fa0 RCX: 00007fb5f139e159 [ 208.143119][T10005] RDX: 0000000000000100 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 208.145582][T10005] RBP: 00007fb5f143503b R08: 0000000000000000 R09: 0000000000000000 [ 208.148037][T10005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.150523][T10005] R13: 00007fb5f1626038 R14: 00007fb5f1625fa0 R15: 00007ffcf855ddf8 [ 208.152993][T10005] [ 208.154708][T10005] Kernel Offset: disabled [ 208.156293][T10005] Rebooting in 86400 seconds..