last executing test programs: 6m16.111939477s ago: executing program 1 (id=1150): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0xa888, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 6m16.061186086s ago: executing program 1 (id=1152): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x891}, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {0x0}, 0x400000}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000280)=0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000020000000400000000000000070200000008001e00010000000000000000000000d577e3ac10cad591174a9197323ac67f34ec87a847d02c8f3d7c474228dddfe8bb441ad1305f1bd78c9996bd5990c9afff2116e1b78bd266c3e84310c61252b77930249734ba8787a9308c4d09ac82f42f0712f884592d7a75bb3ddb5b41bceae24ad795f6437a6f143025"], 0x24}}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000500), 0x200000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) ioctl(r7, 0x3b8e, &(0x7f0000000940)="10") write$FUSE_IOCTL(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500"/18, @ANYRES32=r9, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000ac0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r1, @ANYRESOCT, @ANYRES8=r6, @ANYBLOB="55000e0080000000ffffffffffff080211000000080211000001000000000000000000009e0c01000301680406fa0507000800060208000503028ea272060103030303037107ffff01000107487606000641000101000000080026006c0d000008000c006400000008000d000000000004002a004627d5d4f9970b7559e86be4218ee07a6ade200514d8ebf560582aaf3e30a2d4ee81be6340157466c37eea6cfadc317cefcdd4a830db905c3692639ced560f7694bd6c2496bda4c5208c8d7fad070a16b961a2bc04f6d57d6d3240dfe8be209eb81b56fcf7711592343b3ad97c99206698e0d8c8f94706b9140fc05c514657b9bb7ce8ed"], 0x90}}, 0x39db77225c63fa4c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'}) 6m15.976113095s ago: executing program 1 (id=1154): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1}, 0x6) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="2e000300010000", 0x7) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x240, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x763f}]}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b4f3d5b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4f8f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3b2f7a89}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28f4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffff80}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd28}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc4}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff8c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6c8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "c62cb7a15174371bdefb82dd4c0a081a8892e4143402cc64aaefe0bd8d8eb7f3e95e"}}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) 6m15.910878591s ago: executing program 1 (id=1155): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x400000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000140)=[r1, r1], &(0x7f0000000180)=[0x2, 0x81], 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x400000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000140)=[r1, r1], &(0x7f0000000180)=[0x2, 0x81], 0x2}) (async) 6m15.910292146s ago: executing program 1 (id=1156): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000100)='autofs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./debug\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000001540)='./debug\x00', &(0x7f0000001580)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000015c0)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x2) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x2) write$cgroup_freezer_state(r5, &(0x7f0000001600)='THAWED\x00', 0x21) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000140)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x8002, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x76) (async) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x76) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r6) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000440)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xabf, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7ea, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x8, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6, 0x1}, {0x8ce, 0x8, 0x2, 0x4, 0xb6f, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x1, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x80000003, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x5, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x1ff, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x3, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1fb, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x5, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x9}, {0x5, 0xc, 0x3, 0x80, 0x5, 0x4}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x1ffd, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x1, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0xb, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x9b, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x1, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x100}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0xc, 0x400, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x3}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x7, 0x7, 0x94, 0x3}, {0x800, 0x5, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x2, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x1, 0x8}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0x3, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0xa, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0x8, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0xee8, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3, 0x1}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r11 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001400), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r11, 0xc0184800, &(0x7f0000001440)={0x4, r10}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r11, 0xc0184800, &(0x7f0000001440)={0x4, r10}) ioctl$DMA_BUF_SET_NAME_A(r12, 0x40086203, &(0x7f0000001480)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ppoll(&(0x7f00000014c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000014c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) readlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)=""/104, 0x68) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x122, 0x0, 0x1}]}) 6m15.778658815s ago: executing program 1 (id=1157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x2}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x1ff}]}}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000380)=ANY=[], 0x32) 6m0.360407747s ago: executing program 32 (id=1157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x2}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x1ff}]}}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000380)=ANY=[], 0x32) 5m7.781797988s ago: executing program 3 (id=1890): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fdc4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$yama_ptrace_scope(r1, &(0x7f0000000040)='1\x00', 0x2) readv(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/78, 0x4e}], 0x1) 5m7.707791156s ago: executing program 3 (id=1891): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x26022, 0x0) (async) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x1, 0x100, 0x0, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x76dc) (async) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x3, 0x7, @empty, 0x1}, 0xc) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000440)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000540)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000580)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", 'k\'w~', "00e4ffff7f00"}, 0x28) (async) recvfrom(r5, &(0x7f0000003480)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000004480), r5) (async) r7 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, r4, 0x0, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) (async) r9 = accept4(r8, 0x0, 0x0, 0x800) sendto$inet(r9, &(0x7f00000001c0)='\x00', 0x1, 0x24008800, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000640)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./drv\x00') (async) r10 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./drv/bind\x00', 0x1, 0x0) write(r10, &(0x7f0000000700)='0000:00:1f.3', 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x45}, 0x1, 0x0, 0x0, 0x44048801}, 0x0) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) (async) io_uring_setup(0xb52, 0x0) 5m7.649868747s ago: executing program 3 (id=1893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000b00)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x10, &(0x7f0000003780)=ANY=[@ANYBLOB="18000000000000000000000004000000b708000000000000dbaaf8fff1000000b50800006d0800007b8af0ff000000000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000fb947ca51f1ffe8a6291937f30ea6f1da9dfb93155c942afd02790efcd5f75e8f824f36b297ab1fa5aa35d82b4b2edf7ca536068010d1cdb8c55d852e1e403d76c81176526e25518186fd1afcb7a7caf1aeba2627722a30ef04cfff67f0ed91c623421ec7f4c0facde43d618579cc04bfed2bf5ccee79ef6632056a46cde53e2d0818059a8bf993d987a90a429d8af1f9b35b23585f5181bd35e88b9bb0b7d40019c844ea19aabb5920cebb17aca75e273fe929ed16400000000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b70500000800000085000000ebee416326f0a20400000000"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f00000002c0), 0x4) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000d00)="dd9b48c9ea403a164e9f9aaea7ad3ae118cae80970bbd8cb999feff07dcba047004aa8838e68863bbdecf38e9cb31094826168a93a8a086c154b87ae9ddd914f8334", 0x42}, {&(0x7f0000000d80)}], 0x2) r6 = syz_usb_connect(0x0, 0x32, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000010c0), 0x4, 0x101802) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000001140)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) write$FUSE_INIT(r8, &(0x7f0000001340)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000000c0)={0x200001ee8000, 0x1}) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000ec0)={0x0, [{0x1, 0x588, 0x9, &(0x7f0000000500)="e97340a9c3f2dce884b248911ff2ee9648f8d857b41a1f35363b134b66648f068cd19645fcd8b4b58afda53fb001e7f27218e66aa0dd3b2f47c8db799800d616fc521dd1f8e0059f74b86d9432f0ea521db27fdc522573c1e74f26bcb786815aa86f445ad4e0d1e331772de5d4360bf5d17a99a24a1947c56bd4907e3bd6a092b21db8e16fbfc95fe758d78ed4aea8c48fb1003c74efeae1edabdee8fdf4d4e99601cd73d226ff5ffe3479536877ff9bc7"}, {0x0, 0x608, 0x77ffffff, &(0x7f0000000380)="3888fcf29a8139353c65e031ad5ef9166d27af95e3c2aa396a6b37a719109d9355dd4e54f0994766a4caf0282882385f6b61a11f9d4a777a6c34c57468e5184264a0b839598eb01c3e8d6cac4a8a3937feb7f862e86c409b933c6261e8805a87c1a73551fb778f90789e2a770068f14df207f871f846b9a3c11ece8b60c4072e7da37acf934a4bbfd3ec07002c53c18c91b1d473277dd5f3a9b9bc734939bacdeb09d8e28ad561480c547a70cdbe2105fe79ca95f305a0ead8dded216a97b5ce5b"}, {0x2, 0x240, 0x3, &(0x7f00000006c0)="b59630a7717a8449ac5191ceb2d0cb0fea270ff365e9ef75282bc42366926d6dbe0ea311ed162908bddc800507b05222cc752022d2f0efcf946589836236cdac2b992f4a5fd1dee3"}, {0x0, 0x600, 0x5, &(0x7f0000000740)="f9f35a14c68d342895e4890e0d05279d3fe7efa5e4cfd5f9758e18e29e95ae36f8fc7c6a42cb87a6ce65fd0424432c8cfde7731bc116ce07895853912d7cd6bd649bf33879bf5719f3a596dd63cbe1e443677e2312a636e06f0cf5303ca2e5c9820f9d69c0f3c74db51250ff7bea03cdae4c9173991d5f0605c040f9a0ba381c40439a48b4d140c8cf913e6fbcdb58adbb8251d0bae18a7b68418bb6841824859405069b2c3901789e8d68eac7aa47b6b54d8af51e03e3db983358183430e0b5"}, {0x0, 0x218, 0xfffffff8, &(0x7f0000000800)="6a3e6042db1162101769ccc74d9e860ab6b92a24448ffdb95c5a83dd9eae63377fdd38f7028015f34c8a921aaeac4fee291c7434023ac2fc7c89c0524fee762ba3cbb0"}, {0x2, 0x7a8, 0x964, &(0x7f0000000880)="021c71287ef17358a2fcf9d58c4d5bf2fd253693c31e3a733db2f6001e77b25d046514f9d90e9cfb4c0a6d6a8a01f0269344e41431d7fa23f8c1852a4db0ee015f36c291bb6fbd590cdbaa60341db37502502b242f3bb3376e34817b87b8e5942c676e6786ea0249399e94716d8b84daf237d339a683b5f56dd30431f327ef16631a54f1d34d484a71021992b98b1f7566178d8c76fee2e5dcc3966c19c8afcfd9c559301c1e3f69c3b7c8a033856bf5bd726741bacb406d48eb4613a38da3f92e2de4ea449bedca14d4a219f6d874da2f23be5a93ad61fb6eb57c9b85a2169206521b5d4c8d8f88ee1dbefca9a571d10a64a9ab3c"}, {0x6, 0x18, 0x2, &(0x7f0000000980)="a62d5f"}, {0x2, 0x338, 0x6, &(0x7f00000009c0)="1e470883b3eeced8c7364b8c1470def734af73cab8f12b1f634fb75dab999ee68c373e28f8652e4c8ea60e395ab5159e9e1eb1379f3f92538269c242d2b361abfa4ca88e71063bde3d9a7f7facfb1120294ee2824701d051c2f7e7039a075b9757d3c7711f420c"}, {0x1, 0x150, 0x1f20, &(0x7f0000000a40)="e10e0ec3f62e043fe9262af637f2aa3292d6e66c95b2b29d8712eba3b63b9f6fc878089ad440a412fdb5"}, {0x1, 0x7d0, 0x3, &(0x7f0000003900)="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"}, {0x0, 0x320, 0xfffffff7, &(0x7f0000000b80)="0a543a4970ac7276cb17fada83830348ef795f0ecfb9eff057b0ed519ec3d8a5c3260a7a5dac351d2524a2edbcc492d3542a2c27849c80d392c4eeb86719b0431ef30a7cb8edae7f862376d222fbd2db521c2ee6442aa49e9aeaaded37941d96998c4b7d"}, {0x1, 0x1a0, 0x0, &(0x7f0000000c00)="263b82c0cae67994098ade332cb68b8b2898ae20720edf3382491cf12bca7b292f98d80fb9e6d1545e5f6f07449cdc2c03904fdd"}, {0x3, 0x498, 0x1, &(0x7f0000000c40)="a827d7ba93fc04998fc874a2c4210013f7f1266f70dc81649282c4978415dfd7162ca1129bc76ce54d9e79338d0a9b63490969ed71e0d876503835eb3e809b7a4589aeada87ac64b736aced458c89f43727298cdef68778373d0886ed1c6e8f32f40d71847d6b682d856fcf1e6f25ee8baad368e90720031431da335c258dc24e5907aef42d6b6317936708fff1856ab256fd3"}, {0x5, 0x6c8, 0x0, &(0x7f00000014c0)="7653979e9f38010bb5d84e0902be4ef43df8b9a6ca04701b61aa0202691307f67cea08d224adc0e802462ba26f73ab0e89c9d040eee6f11502083e1f09bd1442224a9472570bf0342cd299425a26c4708ba4d1b388888df7719104d1f86decefceede6ea72b84507b8c3121bd363f2e0d9bba722da905df8bab1d864acb0d422dc322abf159cd97e2c92de8f2326510f65b7d332423619c1f4b34d13be011907f5951f56dfdbff754c4b39e8a777de4812cb9b48311a48994e2d7ef169b778d70225e39d5ed76a0b52c50d0f88e37f6766a7392fa3d85ccd5b"}, {0x2, 0x320, 0x2f, &(0x7f0000000a80)="3772756f475888c8e1060f00cbc7d574823bc086b380e13c728f21c21f4a5631916a68c380dd0315a5af72eeecb0b135bc9c3ea714202ddc39774e1be1c815b12abdad8228e4fbf0187132fcefc41df2fe4c21b15971f5e668255027e7ee83a6d5ddbb2f"}, {0x3, 0x340, 0x7fffffff, &(0x7f0000000e40)="360c9f375b81d022b63ee44fc5e3147aeceb147b125ffe4fcde64f5c1fab16e092bb0bd71463bccf4d219c84c8dda6ccbcc717a477c007aff7ff66832fb69127e807602be2cc758efb69bbf941a60091cf17d200261a73c0da85d87b85f0e455c5ea5ef07b88b052"}]}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000100)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r9}) socket(0x23, 0x2, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) 5m6.238308469s ago: executing program 3 (id=1911): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$UHID_INPUT2(r2, &(0x7f0000000240)={0xc, {0xfe5e, "eef0e781244807c78edb979c07bb5fbffc8adcd61a666a6badfa2697e04211986a3ff409491437a241e06c52bda7b6adcfdea7090f8f08219fe4c6fc0dcc1d77ebd24548f22c447d044d6bc6cd1e23c40525175d9b6194250ebd94a6ecec74fd6d"}}, 0x6) sendfile(r1, r0, 0x0, 0x7ffff000) 5m6.131787394s ago: executing program 3 (id=1912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000840)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000008c0)={0x2, 0x0, [{0x400000b0, 0x0, 0x1}, {0x400000b1, 0x0, 0x4000000000000008}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m5.800742358s ago: executing program 3 (id=1917): setns(0xc9, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) write(r0, &(0x7f0000000280)="97", 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1700000070000100000000000000000007"], 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x6, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@map=r1, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000480), &(0x7f00000004c0)=@tcp=r0}, 0x20) recvfrom(r0, &(0x7f0000000500)=""/230, 0xe6, 0x10000, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x24}}, 0x0) 5m5.751634509s ago: executing program 33 (id=1917): setns(0xc9, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) write(r0, &(0x7f0000000280)="97", 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1700000070000100000000000000000007"], 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x6, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@map=r1, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000480), &(0x7f00000004c0)=@tcp=r0}, 0x20) recvfrom(r0, &(0x7f0000000500)=""/230, 0xe6, 0x10000, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x24}}, 0x0) 1m12.219194474s ago: executing program 0 (id=4129): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0xfffffffd}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7fe8, @ipv4={'\x00', '\xff\xff', @local}, 0x9, 0xfffffffd}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000001d00)={&(0x7f0000001cc0)=[{&(0x7f00000000c0)="60e45ad726f28a5a", 0x8}, {&(0x7f0000000180)="db412c080547410ffc5c8ca667812925ac06a0ea2ac3e0402dd10886014033748fe1665534f657d0dd5e27e38a02253e9da9d1c08fa0a1b2ec977852b24b912e23fdfd857cc3b15610a3652754bf25decfae21e207f25954de32db87b134b85cbaaba4ed9a0b10dbe1e40019b92a", 0x6e}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="027a428fc391339fedabb936c7503dd71d6c38936309640f4ccdf88764fedef24980fb62de6680b54988a9aa6846e662ef269aedc1720447e9dace0e625c16c56a50466d32f2f28e815a2765e56aa680073d1da1ed7e1d0a4481a1691baebd139ec1f8d19eb9b630ac1dda5a4bd1588ffe55a0f2d3b9ffe9491827ee49778e5dea556c11b9b8b3f538ba36eac06ee8d29728898822c9404431689ad9bde9cc0d2fd035add5249f2ca90e88cee3cf28e20e058a7ccf45bd1432d8aaf4aa4d11aef1836cc4343a3e2c71671997524fa33389a762f2743a59fbc0", 0xd9}], 0x4, 0x5, 0x0, 0x5, 0x7, 0xfff, 0x6, 0x101}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000100)={0x58, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "f7f8e05e18006b5c49148e65e7766136"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8f52}, @NL80211_ATTR_PMK={0x14, 0xfe, "5c244acbe777ae00f8ffff1f7597206c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}}, 0x0) 1m12.074885663s ago: executing program 0 (id=4132): syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0xe8302, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./debugfs\x00', &(0x7f0000000b00)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./debugfs/dri/1/Virtual-1/edid_override\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0) write(r1, &(0x7f0000000b80)="00ffffffffff", 0x6) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', r4}) add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000500)="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", 0x559, r3) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x7, 0x4, 0x8, 0xffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0xffffffffffffffed, 0x100000000, 0x0, 0xffffffffffffffff, 0x2000100001, 0x0, 0x2004c8, 0x7, 0x4, 0x1, 0x7, 0x8000, 0x5, 0x0, 0x0, 0xffffffffffffffff], 0x8000000, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000480)={0x20003, 0x0, {[0x9, 0xc9, 0xf3, 0xc0, 0x7, 0xab, 0xd0f0, 0x2]}}) add_key$fscrypt_v1(&(0x7f0000000bc0), &(0x7f0000000c00)={'fscrypt:', @desc1}, &(0x7f0000000c40)={0x0, "4fdcbbfc9882e3f3b58da4403d7a6aa6bb8d563aa6be93f94b5ba10586eeaadf14d3cf5eb4073cee5b5d4e610508e8ca4959b3f633d1adead68eb2a82ff061c9", 0x2c}, 0x48, r4) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m11.980252084s ago: executing program 5 (id=4134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x20, 0xfffffffc, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x2}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m11.870430861s ago: executing program 5 (id=4135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}}, 0x0) (fail_nth: 4) 1m11.870090196s ago: executing program 0 (id=4136): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xff, 0x200000) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) (async) r7 = syz_usb_connect(0x5, 0x58, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000540)={0x24, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r7, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00031500000002"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000680)={0x40, 0x8, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r7, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000780)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000840)=0x1b) (async) read(r9, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000008c0), 0x8000, 0x0) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000880), 0x220000, 0x0) read$char_usb(r8, &(0x7f00000007c0)=""/99, 0x63) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r2, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x3d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x810) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900feefa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16], 0x84}}, 0x20008040) 1m11.738288976s ago: executing program 5 (id=4137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, 0x0, 0x0) 1m11.683619105s ago: executing program 5 (id=4139): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) timer_create(0xb, 0x0, &(0x7f0000000140)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000500)='ocfs2_dlmfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000400)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3c5093, 0x0) umount2(&(0x7f0000000300)='./file0/file0\x00', 0x0) 1m11.590806379s ago: executing program 5 (id=4140): r0 = socket(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000540)='\xbc(\xcf\xf3*S:\x90\x8b5\xc39@\xb8}\x86q\x00\x00\x00\x00\x05\x00\x00\x00\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}}, 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x40051) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = socket(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/bridge0/bridge/max_age\x00', 0x2, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='1\x00\x00\x00'], 0x24) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000600)={0x3, 0xbde, 0x0, &(0x7f0000000640)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000700)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000740)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000500)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f}, 0x94) sendfile(r1, r6, 0x0, 0x7fffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}}, 0x84) ioctl$VHOST_VDPA_GET_AS_NUM(r8, 0x8004af7a, &(0x7f0000000380)) 1m11.400809913s ago: executing program 5 (id=4142): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x200002, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x80002, 0x29) write(r0, &(0x7f0000000240)='7', 0x1) pipe2$9p(0x0, 0x80080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) madvise(&(0x7f0000bde000/0x4000)=nil, 0x4000, 0x1) 1m11.280371375s ago: executing program 34 (id=4142): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x200002, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x80002, 0x29) write(r0, &(0x7f0000000240)='7', 0x1) pipe2$9p(0x0, 0x80080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) madvise(&(0x7f0000bde000/0x4000)=nil, 0x4000, 0x1) 1m11.23085451s ago: executing program 2 (id=4144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r5, 0x0, 0x18, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 1m10.96080578s ago: executing program 2 (id=4145): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000004c0)={0x0, &(0x7f0000000280)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x38, 0x9, 0x0, 0xfff, 0xffffffffffffffff, 0x17, 0x8000, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x8, 0x2, 0x8, 0x0, 0x2, 0xffffffffdffffffd, 0x4], 0x0, 0x18db97}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @pic={0xe0, 0xe, 0x4, 0xfe, 0x1b, 0x6, 0xc8, 0xd, 0x9c, 0x5, 0x7, 0x2, 0xb, 0x40, 0x1, 0x1}}) 1m10.640389209s ago: executing program 2 (id=4146): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x66) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000006c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0506580c"], 0x8) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$eventfd(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="bc01000013000101000000000000000064010102000000000000000000000000640101020000000000000000000000000100000d4e2200090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000640)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {0xfff9, 0x0, 0x7, 0x9b99}, 0x25, [0x6, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x9, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000100, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x7ff], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x80c, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd84, 0x4, 0x7f, 0x80000000, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x7, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001180)="64000000100001060000000000000000000000003f0000000000000000000000100003007665746830", 0x29}], 0x1}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x5a9040, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f00000012c0)={0x2, 0x0, [{0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}]}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000001340)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000001440)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) 1m10.260730221s ago: executing program 0 (id=4147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, 0x0, 0x0) 1m10.188916756s ago: executing program 0 (id=4149): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x40042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./debug\x00', &(0x7f00000007c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./debug/lru_gen\x00', 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='smaps_rollup\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xc, &(0x7f0000000500)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040c00078008000800000000890500010006000000050005000200000012000300686173683a6e65742c706f72740000000900020073797a30000000000500050000000000"], 0x58}}, 0x0) syz_clone3(&(0x7f00000005c0)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = semget$private(0x0, 0x4000000009, 0xa0) semctl$GETPID(r3, 0x3, 0xb, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x1, &(0x7f0000000280)=0xf, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xffffffe0, 0x0, 0x1}, 0x48) 1m10.108919511s ago: executing program 0 (id=4150): r0 = syz_open_procfs(0x0, &(0x7f0000002740)='net/rpc\x00') r1 = openat(r0, &(0x7f0000002800)='nfsd.fh/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000002840)=' ocalhost 1 \\x00000001 2000000000 /\n', 0x24) 1m9.036376637s ago: executing program 2 (id=4167): mkdirat(0xffffffffffffff9c, &(0x7f0000005bc0)='./file0\x00', 0x0) mount$bind(&(0x7f0000005c00)='.\x00', &(0x7f0000005c40)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000005c80)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000005cc0)='./file0/../file0\x00', &(0x7f0000005d00)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000005d40)='./file0\x00', &(0x7f0000005d80)='./file0\x00', 0x0, 0x3c5093, 0x0) umount2(&(0x7f0000005dc0)='./file0/file0\x00', 0x0) (async) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0xff) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000049c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500), 0x1000000, &(0x7f0000005880)=ANY=[@ANYBLOB="66643d7ba404c1a6ac190764f09d9d", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r2, &(0x7f00000005c0)="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", 0x2000, &(0x7f00000025c0)={&(0x7f0000002680)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff87199bf0dde5, 0xdd1, 0x4005, 0xf, 0x800, 0x0, 0x0, 0x2, 0xb3a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002700)='./file0\x00', &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) syz_fuse_handle_req(r2, &(0x7f00000027c0)="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", 0x2000, &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004880)={0x78, 0x0, 0x1, {0x7, 0x1, 0x0, {0x5, 0x1, 0xe418000000, 0x80000003, 0x4, 0x1, 0x9e9, 0xfffffffe, 0xb876, 0x8000, 0x7893b06e, 0xffffffffffffffff, r4, 0x3d, 0x1, 0xff0f}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'veth0\x00', 0x0}) mount$afs(&(0x7f0000005ac0)=@cell={0x25, '', 'syz0'}, &(0x7f0000005b00)='./file0\x00', &(0x7f0000005b40), 0x2001000, &(0x7f0000005b80)={[{@flock_write}, {@flock_openafs}, {@flock_strict}], [{@hash}]}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000005900)={&(0x7f0000005940)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa4}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005a00)={0x0, 0x0, &(0x7f0000005a40)={&(0x7f0000005a80)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) connect$inet6(r0, &(0x7f0000004900)={0xa, 0x3, 0x400, @mcast2, 0x9}, 0x1c) (async) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) 1m8.933882841s ago: executing program 2 (id=4170): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000240)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000280)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000002c0)=0x4) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="c0214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) 1m8.604238298s ago: executing program 2 (id=4173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="f4000900", 0x4}], 0x1}, 0x0) 1m8.437645001s ago: executing program 35 (id=4173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="f4000900", 0x4}], 0x1}, 0x0) 55.114849303s ago: executing program 36 (id=4150): r0 = syz_open_procfs(0x0, &(0x7f0000002740)='net/rpc\x00') r1 = openat(r0, &(0x7f0000002800)='nfsd.fh/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000002840)=' ocalhost 1 \\x00000001 2000000000 /\n', 0x24) 43.339589562s ago: executing program 6 (id=4445): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x78, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c) syz_emit_ethernet(0x1042, &(0x7f0000000340)=ANY=[@ANYBLOB="fffffffff4ffc7621d26f0c186dd6a000000100c1101fe80000000000000000000000000000fff0200000000000000000000000000014e214e2010"], 0x0) 43.339039153s ago: executing program 6 (id=4446): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001b40)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="00001a0000000000000e0200005adc1895b16fc6762d0f8b624e029683d40419f8abf4a6131f3893d44ddd800cdc56f502a841518019a0c3121292363e1477447ea12544533e755c154ae3164a9e58f52c20ccea72434c31c5db0ab905e7add805b3b3d3dc159e5fb8590d7452f84bff02d9e94939e79f7aa6ce8104a2d9", @ANYRES64=0x0], 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=ANY=[@ANYBLOB="6400a300", @ANYRES16=r2, @ANYBLOB="17090010000000000000010000000500070000000000080009000200000008000a0000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb0500220001000000"], 0x64}}, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000001540)={0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x71}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000001640)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x42}, {@private=0xa010100, 0x15, 0x0, 0x1}}, 0x44) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f00000016c0)={0x2, 0x15, @loopback}, 0x10) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000013c0)={0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000002500010328bd6e06fedbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000010) (async) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48dfffa600000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r8 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000014c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r10, &(0x7f0000001540), 0x318, 0x0) recvmmsg(r9, &(0x7f0000001580), 0x10106, 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f00000015c0)={0x20000014}) epoll_wait(r8, &(0x7f0000001600)=[{}], 0x1, 0x400) (async) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001400)=r5, 0x4) mount$overlay(0x0, &(0x7f0000001900)='./file0\x00', &(0x7f0000001940), 0x2304800, &(0x7f0000001980)={[{@redirect_dir_off}, {@xino_on}], [{@subj_role={'subj_role', 0x3d, '*-(\x06,/.{[\xcb,[\\'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'rr\x00'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '].#z\'#*'}}, {@smackfshat={'smackfshat', 0x3d, 'GPL\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x61, 0x34, 0x30, 0x37, 0x32, 0x38, 0x66], 0x2d, [0x38, 0x34, 0x64, 0x66], 0x2d, [0x66, 0x61, 0x37, 0x63], 0x2d, [0x0, 0x30, 0x61, 0x35], 0x2d, [0x65, 0x37, 0x61, 0x38, 0x9b719c1e96165103, 0x0, 0x65, 0x34]}}}, {@pcr={'pcr', 0x3d, 0x28}}, {@fsmagic={'fsmagic', 0x3d, 0x7ddf}}]}) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001440)={r11, r0, 0x4, r0}, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="200000002f0007012e017000fbdbdf2501"], 0x20}, 0x1, 0x0, 0x0, 0x3404c0d0}, 0x0) (async) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001d00)="2e00000010008188e6b62aa73f72cc9f0ba1f848460000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) socket$inet6_tcp(0xa, 0x1, 0x0) 42.459469754s ago: executing program 6 (id=4460): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000030426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001006bab55b71aae0a908bebd64f43fe9f4aa1000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000013c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xd0, &(0x7f0000001780)=0xa4, 0x4) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001440)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000001480)=[{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001500)="7db49fdb07ac1af786f979a7c4c98f4a30507687a32c16c61e034cb67357e38da3fbe77aa31c827b802222469f1809decbb3a12e1757d1ac4ca0cfbbc289bc69b43b1b7d2e896183837a7224005c40412d2937969050f4a048a1af3723b7dc", 0x5f}, {&(0x7f0000001580)="a55b2c8f73dfa037f58774af75d97ac0c02173e2c7efc30f342a5e29dfdc47280776b0deecfb7e4911e4dd33096e8823fb8ba706e431aa", 0x37}], 0x2, &(0x7f00000015c0)=[@assoc={0x18, 0x117, 0x4, 0x86}], 0x18, 0xc840}], 0x1, 0x84) recvmsg$can_raw(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001680)=""/35, 0x23}, {&(0x7f00000016c0)=""/172, 0xac}], 0x2}, 0x62) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000180)=""/4108, 0x100c}], 0x1) sendmsg$nl_generic(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00022abd7000fedbdf250700000008000a0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x44002) 42.319777987s ago: executing program 6 (id=4463): r0 = socket$inet(0x2, 0x80000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/mapper/control\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$cont(0x20, r2, 0x200, 0x7) ptrace$cont(0x1f, r2, 0x9, 0x7) ioctl(r1, 0xc138fd0d, &(0x7f0000000180)="04000000000000") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x11, 0x803, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 41.479258627s ago: executing program 6 (id=4465): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpgid(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=@can_newroute={0x13c, 0x18, 0x200, 0x70bd2b, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7b, 0x2d, 0x17, 0x5, 0x7, "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", 0x1, "979fb2105a41ff9480563c95015186cb5c7e772a"}}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x13c}, 0x1, 0x0, 0x0, 0xfcabc6fc1665c6a6}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="8c45040000400100140012800900010076657468000000000400028008001300", @ANYRES32=r2, @ANYBLOB="138eec0b3593d15017bb19d5e6697e26a6d212d2b856841c277f7e90f5c1c14ad3a222988517c5b3e8841398dbf0172be72b802570c574a4915e1cd371fbb605515af88c03708ce3d8c0756640c7896a72ca5e06a54267e03bbbb7eb90cc482c4b382e6b281301006be9364834c66d093ed1d837ca83f951616f2d13c33737ffce76c65afab5c10cc0b9e360677c26b07bc0f7e9c3225fbd7c7c03fc32309556ad2189227d58b73163afbd66392dd922fbbd0938188eef45c8cfee9f6c7ba515b0ba82c480cd86c2755f", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) r4 = memfd_secret(0x0) setns(r4, 0x4000000) (async) setns(r4, 0x4000000) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x10, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004) 41.167478438s ago: executing program 6 (id=4467): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002380)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0xfffffffffffffe88}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r1 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002480)=[@text64={0x40, &(0x7f00000024c0)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002580)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x36, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000240)={0x0, 0x1}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0) ioperm(0x8, 0x1, 0x7) read$FUSE(r9, &(0x7f00000002c0)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400b5952dbd7000ffdbdf250a0800ff", @ANYRES32=r10, @ANYBLOB="1400020000000000000000000000000000000001140001000000"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 41.086815116s ago: executing program 37 (id=4467): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002380)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0xfffffffffffffe88}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r1 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002480)=[@text64={0x40, &(0x7f00000024c0)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002580)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x36, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000240)={0x0, 0x1}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0) ioperm(0x8, 0x1, 0x7) read$FUSE(r9, &(0x7f00000002c0)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400b5952dbd7000ffdbdf250a0800ff", @ANYRES32=r10, @ANYBLOB="1400020000000000000000000000000000000001140001000000"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 4.915574759s ago: executing program 8 (id=4864): r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f0000000140)={0x1, 0x1, 0x1, 0x9}) close(r0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000500)={0x8, 0x0, [{0xb2c, 0x0, 0x6}, {0x3bc, 0x0, 0x10}, {0x236, 0x0, 0x6}, {0xb28, 0x0, 0x3}, {0x777, 0x0, 0x7}, {0x0, 0x0, 0x4}, {0x995, 0x0, 0x3}, {0x9a4, 0x0, 0x6bc4}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xbc, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DESC={0x74, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x70, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x692}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x48004) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x51}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x19}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) semop(0x0, &(0x7f00000007c0)=[{0x4}], 0x1) connect$inet6(r2, &(0x7f0000000180)={0xa, 0xfffc, 0x6d09, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='bridge0\x00', 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000040)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket(0x10, 0x803, 0x0) splice(r4, 0x0, r6, 0x0, 0x1100000000f339, 0x0) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8008}, 0x0) sendto$inet6(r2, &(0x7f0000000300), 0x7e, 0x3b00, 0x0, 0xfffffffffffffdfd) 3.970055557s ago: executing program 8 (id=4876): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000206050000000000000000000000220004"], 0x18}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="230000000800000002002000ffff000005"], 0x48) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x41, r1}, 0x38) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f041e231304"], 0x7) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 3.127399218s ago: executing program 4 (id=4885): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000050000000100000000010000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00o'], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x20000000}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x6, 0x0, 0xb, 0x18, 0x110}]}, &(0x7f00000003c0)='syzkaller\x00', 0x5}, 0x94) 3.127127232s ago: executing program 4 (id=4886): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x80, r1, 0x0, 0x7}, 0x38) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x10) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x1, 0x5, 0x1d, 0xfd, 0x14, "3ba0ce7cb942b4b2caa81bfd51882c1648bc43"}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}}, 0x0) r3 = syz_usbip_server_init(0x1) syz_usb_connect(0x1, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) write$usbip_server(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000300000001"], 0x35) 3.082005802s ago: executing program 8 (id=4887): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = msgget(0x0, 0x231) msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="03000000155b7a03"], 0x8, 0x800) msgrcv(r1, &(0x7f0000000180)={0x0, ""/20}, 0x1c, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "8811b3c81a38eecc", "836612fd36d900c78792aa3a3ab08441", "4f7de3f1", "426b0a1939b54422"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x3f799000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000540)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) 2.679658565s ago: executing program 9 (id=4895): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="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", 0x30d}, {&(0x7f00000007c0)="ab29d92826349952eb8f7a2a74f53504000000df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188902c6e2e3", 0xd0}, {&(0x7f00000008c0)="05437c98b91bfe4d908657b5fc913814bde2bbeac2104eaea966c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d72906dd409d39ff6dd3d985d4e075543805ff919f42e8f4f5e464", 0x57}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000940)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{&(0x7f00000009c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000a40)=[{&(0x7f0000000ac0)=""/102, 0x365}, {&(0x7f0000000b40)=""/76, 0x14c}, {&(0x7f0000000bc0)=""/4096, 0x197}, {&(0x7f0000001bc0)=""/92, 0x645}, {&(0x7f0000001c40)=""/73, 0x1b}, {&(0x7f0000001cc0)=""/77, 0x188}, {&(0x7f0000001d40)=""/154, 0x2c}, {&(0x7f0000001e00)=""/17, 0x1d8}], 0x21, &(0x7f0000001e40)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000001f00)={0x77359400}) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2) ioctl$FE_GET_INFO(r1, 0x80a86f3d, &(0x7f0000000040)) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000400)={0xf000000, 0x280, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x98f909, 0x0, '\x00', @value=0x1}}) 2.674580669s ago: executing program 9 (id=4897): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95ce}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r4) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./tracing\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r6, &(0x7f0000000840)='r:s/p ./file0:0\f\\\"\"', 0x13) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x400, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, 0x504c3, 0x4f29}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x30, r5, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r9 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) fcntl$F_GET_RW_HINT(r9, 0x40b, &(0x7f0000000c40)) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000640)=@xdp={0x2c, 0xdd8c, r3, 0x3e}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000700)="80", 0x1}], 0x1}, 0x4) 2.488681314s ago: executing program 9 (id=4899): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002300)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002440)=@newqdisc={0x2c, 0x24, 0x0, 0x70bd2a, 0xfeffffff, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002480)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000024c0)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x20000007, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000003100), 0x56) sendmsg$kcm(r6, &(0x7f0000003140)={&(0x7f0000003180)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003240)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2.40931643s ago: executing program 7 (id=4902): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004100001800002000006c853b1ac5cdaf9078ac1414bbac14"], 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x88900) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r3) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xfc, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffff41}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x523}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000) 2.278142518s ago: executing program 7 (id=4903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000006c0), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000a80)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x200000f5, &(0x7f0000000b00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000fc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="b5a1c041396dda8b5635092d885d27b5319af6cdc16eb3241c69c4c5a896d59f60cfda1f18218fe8d78df0cd8ffe", @ANYRES16=r1, @ANYBLOB="000126bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028008000100", @ANYRES32=r3, @ANYBLOB="04000280"], 0x64}, 0x1, 0x0, 0x0, 0x20004824}, 0x8040) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000154e22d070071756575655f6964000000000000000000080004000100000008000600"/64, @ANYRES32=r4, @ANYBLOB], 0x60}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000009c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100001707fffb005941080000009f5a9522e037a17d44cd69700700974ec45d5b18beff8e0084b209523e4f476191fafd9d6f95b43aeac1444ec8a34a8fbaa1d7b55520117e65eb3283b99665d8e032ab4075b283c983c9af7fdbc13c", @ANYRES32=r3, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r5, @ANYBLOB], 0x60}}, 0x0) stat(0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt/sys/net/ipv4/vs/svc_lfactor\x00', 0x101002, 0x0) sendfile(r7, r7, 0x0, 0xf2) ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000680)={0x9e, &(0x7f00000010c0)}) keyctl$join(0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) name_to_handle_at(r8, &(0x7f00000002c0)='./trace/events/sched/sched_switch/trigger\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0c00000000000000002c5e6748d6ba00000000"], &(0x7f0000000340), 0x400) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000000080104000000000000000003000007050003002f00000007000240920000000900010073797a30000000000c0004800400024000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x94}, 0x54004) socket$alg(0x26, 0x5, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r10, &(0x7f0000000040)="656e61626c655f6576656e743a73636865643adf66fdfc3e8b167de3f340ae9cdc493fa20dfcdc6a57efaa55dfb75c380536fa490450e0a83bc42042", 0x3c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r11, 0x5452, &(0x7f0000000380)=0x8) close(0x3) mount$cgroup(0x0, &(0x7f0000001000)='.\x00', &(0x7f0000001040), 0x10012, &(0x7f0000001080)={[{@none}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000004140)=ANY=[@ANYRESDEC=r6], &(0x7f0000004400)='GPL\x00', 0x5, 0xc3, &(0x7f0000004440)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r10}, 0x94) 2.098221319s ago: executing program 8 (id=4904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a80)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd01f5ff0000001400000060000000f0002ff50b71"], 0xfdef) 1.785801929s ago: executing program 4 (id=4905): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x20084880) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x30, r1, 0x1, 0x0, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 308.419959ms ago: executing program 7 (id=4906): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/comedi3\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000700)={0x4000000, 0x92, 0x0, 0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000019, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xd, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000680)='GPL\x00', 0x4}, 0x94) r4 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x21c0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000001010100000500010008000000080004"], 0x2c}}, 0x0) 307.969594ms ago: executing program 9 (id=4907): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r1, 0x701, 0x70bd2b, 0x25dfdc02, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}}, 0x4000) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 306.794958ms ago: executing program 4 (id=4908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000f9dbdf25160000002000018008000100", @ANYBLOB="14000200626f6e"], 0x34}, 0x1, 0x0, 0x0, 0x40006}, 0x808) r5 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000500)={0x7, 0x2, 0x1, r5, 0xb}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) r7 = syz_ublk_setup_io_uring(0x6203, &(0x7f0000000640)={0x0, 0x7143, 0x1000, 0x1, 0xfe}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r7, 0x17, &(0x7f00000007c0)={0x0, 0x0, 0x1}, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2000000) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000280)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0xa, 0x0, 0x3, 0xa], 0x41000, 0x202}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r10, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r10, 0x5) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008ffc0"], 0x4a) 228.194703ms ago: executing program 8 (id=4909): r0 = openat$kvm(0x0, &(0x7f0000000940), 0x440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000980)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f00000009c0)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000a40)={0x3, 0x0, [{0x40000083, 0x0, 0x1001}, {0x400000b0, 0x0, 0x3}, {0x400000b1, 0x0, 0x7}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 227.843253ms ago: executing program 9 (id=4910): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) 227.334975ms ago: executing program 7 (id=4911): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x42800) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000040)) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000080)={0x2, 0x2, 0x27, 0x868, 0x5, 0xffffa38e}) r1 = syz_socket_connect_nvme_tcp() ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000001c0)=@get={0x1, &(0x7f00000000c0)=""/215, 0x2}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000200)='%-\x00', 0x10001, &(0x7f0000000240)={@align=0x5, {0x7fff, 0x5, 0x9, 0x400}}, 0x9, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x2}) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000340)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xc, 'pim6reg0\x00'}) sendto$l2tp6(r2, &(0x7f0000000440)="66ff3fbd5c9f", 0x6, 0x1, &(0x7f0000000480)={0xa, 0x0, 0x583b, @empty, 0x4}, 0x20) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f00000004c0)={0x3, 0x100, 0xffff, 0xffff, 0x2}) ioctl$IOCTL_VMCI_SET_NOTIFY(r2, 0x7cb, &(0x7f0000000540)={0x1, 0x5, 0xc538}) ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, &(0x7f0000000580)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000005c0)={0x1, @in6={{0xa, 0x6, 0x49c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}}, [0x872b, 0x1ff, 0xffffffff, 0xffffffffffffff60, 0x5, 0xdf, 0x80, 0x5, 0x5, 0x8, 0xd, 0xfffffffffffffffc, 0x3ff, 0x6, 0xa7]}, &(0x7f00000006c0)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000700)={r3, @in={{0x2, 0x4e22, @multicast2}}, 0x6, 0x5}, &(0x7f00000007c0)=0x90) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000800)={0x7, [[0x2, 0xcd, 0x0, 0x856, 0x7, 0x4, 0x2, 0x10000], [0x8, 0x7ff, 0x800, 0x1608e96c, 0xb0, 0x3, 0x6, 0x81], [0x1, 0x7263, 0x3, 0x1, 0x2, 0x15afacf, 0x6, 0x7]], '\x00', [{0x2, 0x7}, {0x7, 0x6, 0x0, 0x1, 0x1, 0x1}, {0xfff, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x8ba, 0x486, 0x0, 0x1, 0x1}, {0xff, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x81, 0xf416, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x80000000, 0x1}, {0x7fff, 0x4, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x10001, 0x8, 0x1}, {0x3, 0x100, 0x1, 0x1, 0x1, 0x1}, {0xc, 0x10c, 0x0, 0x1, 0x1, 0x1}], '\x00', 0x3}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000a80)={0x0, 0x1}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000c00)={r4, &(0x7f0000000b40)=""/187}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c80)={0x1f4, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf, 0x5b}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_REALM={0x26, 0xfa, "1863bc24e684434f07eade2c7f967fa71d1e2f088f58f805c6cd8d18a2c88dd0a926"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_REALM={0x87, 0xfa, "a77fe1e3d4697123c8266890980340ed627a93580fe541b96fbef5b95acfd03bf4187a46a0b963589fb8fc92da5cdf81daa50663f326be958ca0ea9876c25990b22816d92619a0c24d6e9d655d9a4d65b6c0847d24a2ecb524f415804f03fb1cc211967d7aa9e5b17d9c580842c8e7a9a03ce77aa881194c03ce5af6e015f6a5a7973b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xf5, 0xfc, "9e33fe56e3f2bac6af043589018f74aeebaa27c54a253a8d26fd5bdd9c2fced58b5613412459a92235ef19804d2001fca1a3dac35d251c7c3986c77feeff1074d1bb37e48000531edb68c7a2ea4d5b644b787e61575f88758028c2474d3a9e39442f7dc1d7371c6e32cdc3771942ec4fdf366eefb82b3812e06a6a2e28cc00a631fe20ebe5546abfbbd3bde9315a074c87446ffd9a475176c0a713a2b04f2af03c729686890e7f9a95c2beeaddbace45a3286c7e81e045f1a0115846831a1e9bb37a6d8b5dbc9499bf8b52871c22cccb1fc7382d359d9c45fe540bd2d619ab72808cf3214baf8e12c3012e65582fa036e2"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "96cadcd6a11a57d0b23b667a0b"}]]}, 0x1f4}, 0x1, 0x0, 0x0, 0x400c855}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000f00)={@hyper}) close_range(0xffffffffffffffff, r5, 0x2) ioctl$MEMGETREGIONCOUNT(r2, 0x80044d07, &(0x7f0000000f40)) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000f80)='#.\x00', &(0x7f0000000fc0)='%-\x00', 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000001000), 0x4) syz_clone3(&(0x7f0000001240)={0x20000200, &(0x7f0000001040)=0xffffffffffffffff, &(0x7f0000001080), &(0x7f00000010c0), {0x26}, &(0x7f0000001100)=""/57, 0x39, &(0x7f0000001140)=""/152, &(0x7f0000001200)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r2}}, 0x58) ioctl$int_in(r6, 0x5421, &(0x7f00000012c0)=0x52) fgetxattr(r1, &(0x7f0000001300)=@known='system.posix_acl_default\x00', &(0x7f0000001340)=""/114, 0x72) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000013c0)={r3, 0x2}, &(0x7f0000001400)=0x8) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000001440)={r0, 0x0, 0x8000000000000001, 0x7ff, 0x6, 0x3}) fcntl$getown(r5, 0x9) 109.203618ms ago: executing program 7 (id=4912): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000020c300180010010000950000000c000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sunrpc/parameters/min_resvport\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='800\x00', 0x3) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @local}, 0x1f}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x7, 0x2, 'client0\x00', 0x4, "f711ec84f1266217", "038ce8a111a7a6094e32aefaebb0eeacdb3a79469658f7f3b905913f01f68849", 0xfffffc00, 0x7ff}) 108.892224ms ago: executing program 9 (id=4913): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x9, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x2, 0x5, 0x401, 0x1, 0x405, 0x864e, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0x5, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x29, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf782, 0x80000001, 0x5, 0x5, 0x492, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x7f, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x5, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x2, 0x10000001, 0x5, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd8, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0x2, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000002100010028bd7000000000000a00000000000000000000000500150002000000af15cc97a3c2180180000000000000d14b85639b39df703c35c2"], 0x24}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/258, 0x102}], 0x1, 0x0, 0x0, 0x21) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xa, 0x9, 0x8], 0x25000, 0x304}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'veth0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="240000001c00357428bd7000fed3df2502000000", @ANYRES32=r5, @ANYBLOB="4000f10408000100ac1414bb"], 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x0, 0x8e}, 0x28) setns(0xc9, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x10f) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000980)={'syzkaller0\x00', 0x1}) write$tun(r7, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000805000000f1"], 0x11) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1a00000004a5aa000000080000000100000000000000a97d44013d77ee9babd4c3834dc9d1bea7f049e8be2201ed687742af9d8d77e2ade431195910fb84ceb214f274c2e9578b76e08784f77a189aef28fe51fe0d9ca4f0fd6926859930e5a5f74b6c4e1dedee96260942485d2da3728d3deeba5fab4e23dc17f8cdb21403868fdcbca99278e22d095aec6ea6cbf8a433b94181034a52771a0d9006b32fd773a865d72a715ab9651c912f96ecbbf121013fcc8bc18c09c49ce58c1712363a0b40f031ecb6717543f762a012858a4bce79d359af6120d9a47e0692825373095de2a8565d147755bb9ca77c9e1c1ff4a172b3fb8bd85b2fe780", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="010000000300"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r9, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005e000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x8, 0x0, 0x0, 0x5ddb343c6bddcfb5, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) 101.046285ms ago: executing program 8 (id=4914): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000240)={{0x80, 0x4}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x58, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x44, 0x1, [@m_ipt={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x17, 0x6, "636bc3f4c2eb00be6868000000a4f826697a68"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x600) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000240)={{0x80, 0x4}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x7}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x58, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x44, 0x1, [@m_ipt={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x17, 0x6, "636bc3f4c2eb00be6868000000a4f826697a68"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) 100.651359ms ago: executing program 7 (id=4915): r0 = syz_open_dev$swradio(&(0x7f0000003640), 0x1, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)={0xfffffffd, 0x4, 0x2}) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002200)={&(0x7f0000002240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002280)={0x6, 0x7, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000", @ANYRES32, @ANYBLOB="000002005ce3897b95000006000000001dffffffed0000000000"], &(0x7f0000002380)='GPL\x00', 0x5, 0xe2, &(0x7f00000023c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000024c0), 0x1}, 0x80) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000340)={0x0, 0x20, 0x20, 0x1, 0x253, 0x0, r2}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc90d, 0x200, 0x2, 0x15e, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x2c5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb08d, 0x200, 0x3, 0x2a7, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2002, 0x0, 0x1e9}}], 0x1, &(0x7f0000000640)={0x2e, 0x2, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x800) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000780), 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000980)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r14, 0x8, &(0x7f00000009c0)={0x0, 0x1}, 0x1}, 0x94) r16 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1a, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000b40)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r14, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r15, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b80)={r16, r12, 0x3a, 0x4001, @val=@tracing={0x0, 0xfffffffffffffff8}}, 0x20) r17 = syz_io_uring_setup(0x2479, &(0x7f0000002500)={0x0, 0x823d, 0x40000, 0x7, 0x28b}, &(0x7f0000000bc0), &(0x7f0000000c80), &(0x7f0000000cc0)) r18 = fsopen(&(0x7f0000000f80)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r18, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002080)='./sys\x00', &(0x7f00000020c0)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000002100)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f0000002140)='./drv\x00') socket(0x8, 0x1, 0x8) r19 = openat(0xffffffffffffff9c, &(0x7f0000002180)='./drv/unbind\x00', 0x1, 0x6) write(r19, &(0x7f00000021c0)='0000:00:1f.3', 0xc) r20 = fsmount(r18, 0x0, 0x0) fchdir(r20) syz_ublk_setup_queues(r11, r8, &(0x7f00000006c0)={0x0, 0xddb6, 0x909b, 0x3, 0x50, 0x0, r1}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6fe, 0x2, 0x1, 0x150, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbce1, 0x2, 0x2, 0xbd, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8252, 0x2000, 0x0, 0x8e, 0x0, r17}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xae0e, 0x80000, 0x0, 0x4128}}], 0x4, &(0x7f0000001fc0)={0x2e, 0x8, 0x0, r20, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xb82}, 0x0, 0x0, '\x00', {0x2, 0x25c, 0x0, &(0x7f0000000fc0)=@buf_4k="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"}}, &(0x7f0000002040)) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x6, 0x4}) 247.245µs ago: executing program 4 (id=4916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000500000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x1b, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x18, 0x110}]}, &(0x7f00000003c0)='syzkaller\x00', 0x5}, 0x94) 0s ago: executing program 4 (id=4917): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) (async, rerun: 64) r3 = getpid() (async, rerun: 64) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r5, &(0x7f00000005c0), 0x10106, 0x2, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000600)={0x400000000000000, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private0, @in=@broadcast}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0xa0}}, 0x0) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000740)='net/fib_triestat\x00') (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="7638300c000000000000e9000000", 0x0, 0x2f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (rerun: 32) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r8 = socket(0x15, 0x5, 0x0) (async) r9 = socket(0x40000000015, 0x5, 0x0) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r8, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) kernel console output (not intermixed with test programs): 68a2bd8 [ 454.021598][T19939] [ 454.021649][T19939] debugfs: out of free dentries, can not create directory '19939-5' [ 454.558570][T19945] tmpfs: Cannot change global quota limit on remount [ 454.614349][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x229 [ 455.082542][T19963] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.762399][T19970] rxe_eth0 speed is unknown, defaulting to 1000 [ 456.805032][T19971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=19971 comm=syz.4.4601 [ 457.046291][ T63] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 457.205207][ T63] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 457.205744][ T63] usb 9-1: config 0 has no interfaces? [ 457.207667][ T63] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.207690][ T63] usb 9-1: Product: syz [ 457.207706][ T63] usb 9-1: Manufacturer: syz [ 457.207720][ T63] usb 9-1: SerialNumber: syz [ 457.210336][ T63] usb 9-1: config 0 descriptor?? [ 457.419136][T19970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.419514][T19970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.420278][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4601'. [ 457.421115][ T2567] usb 9-1: USB disconnect, device number 37 [ 457.554209][T19945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.616698][T19978] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4604'. [ 457.640127][T19980] syzkaller0: entered promiscuous mode [ 457.640142][T19980] syzkaller0: entered allmulticast mode [ 457.642309][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 457.642320][ T42] audit: type=1400 audit(1792371558.870:22353): avc: denied { write } for pid=19979 comm="syz.9.4605" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 457.692950][T19986] FAULT_INJECTION: forcing a failure. [ 457.692950][T19986] name failslab, interval 1, probability 0, space 0, times 0 [ 457.692974][T19986] CPU: 2 UID: 0 PID: 19986 Comm: syz.8.4608 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.692990][T19986] Tainted: [L]=SOFTLOCKUP [ 457.692994][T19986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 457.693001][T19986] Call Trace: [ 457.693006][T19986] [ 457.693011][T19986] dump_stack_lvl+0x100/0x190 [ 457.693033][T19986] should_fail_ex.cold+0x5/0xa [ 457.693050][T19986] should_failslab+0xc2/0x120 [ 457.693068][T19986] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 457.693100][T19986] ? sock_alloc_inode+0x26/0x2c0 [ 457.693117][T19986] ? __pfx_sock_alloc_inode+0x10/0x10 [ 457.693133][T19986] sock_alloc_inode+0x26/0x2c0 [ 457.693147][T19986] ? __pfx_sock_alloc_inode+0x10/0x10 [ 457.693160][T19986] alloc_inode+0x68/0x250 [ 457.693174][T19986] sock_alloc+0x44/0x280 [ 457.693187][T19986] ? security_socket_create+0x7f/0x250 [ 457.693203][T19986] __sock_create+0xc2/0x860 [ 457.693220][T19986] __sys_socket+0x14d/0x260 [ 457.693235][T19986] ? fput+0x7c/0x100 [ 457.693251][T19986] ? __pfx___sys_socket+0x10/0x10 [ 457.693265][T19986] ? ksys_write+0x1ac/0x250 [ 457.693279][T19986] ? __pfx_ksys_write+0x10/0x10 [ 457.693296][T19986] __x64_sys_socket+0x72/0xb0 [ 457.693311][T19986] ? lockdep_hardirqs_on+0x7d/0x110 [ 457.693328][T19986] do_syscall_64+0x123/0x790 [ 457.693345][T19986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.693357][T19986] RIP: 0033:0x7f8f6d19e559 [ 457.693367][T19986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.693379][T19986] RSP: 002b:00007f8f6b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 457.693392][T19986] RAX: ffffffffffffffda RBX: 00007f8f6d425fa0 RCX: 00007f8f6d19e559 [ 457.693400][T19986] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 457.693408][T19986] RBP: 00007f8f6d235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 457.693416][T19986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.693423][T19986] R13: 00007f8f6d426038 R14: 00007f8f6d425fa0 R15: 00007fff568a2bd8 [ 457.693439][T19986] [ 457.693445][T19986] socket: no more sockets [ 457.795164][ T42] audit: type=1400 audit(1792371559.020:22354): avc: denied { associate } for pid=19983 comm="syz.7.4607" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 457.830686][ T42] audit: type=1400 audit(1792371559.060:22355): avc: denied { create } for pid=20000 comm="syz.9.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 457.843725][T19989] SELinux: DCCP has been removed, pid=19989 comm=syz.8.4609 [ 457.844649][T19989] afs: Unknown parameter '' [ 457.873414][T20001] Bluetooth: MGMT ver 1.23 [ 457.931093][ T42] audit: type=1400 audit(1792371559.160:22356): avc: denied { lock } for pid=20003 comm="syz.9.4611" path="socket:[112438]" dev="sockfs" ino=112438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 458.041319][ T42] audit: type=1400 audit(1792371559.270:22357): avc: denied { write } for pid=20012 comm="syz.9.4615" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 458.049535][T20014] FAULT_INJECTION: forcing a failure. [ 458.049535][T20014] name fail_futex, interval 1, probability 0, space 0, times 0 [ 458.049567][T20014] CPU: 1 UID: 0 PID: 20014 Comm: syz.9.4615 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.049591][T20014] Tainted: [L]=SOFTLOCKUP [ 458.049599][T20014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 458.049609][T20014] Call Trace: [ 458.049615][T20014] [ 458.049623][T20014] dump_stack_lvl+0x100/0x190 [ 458.049653][T20014] should_fail_ex.cold+0x5/0xa [ 458.049680][T20014] get_futex_key+0x1c9/0x13e0 [ 458.049708][T20014] ? __pfx_get_futex_key+0x10/0x10 [ 458.049730][T20014] ? futex_wake+0x4ea/0x5e0 [ 458.049755][T20014] futex_wake+0xf4/0x5e0 [ 458.049776][T20014] ? __pfx_futex_wake+0x10/0x10 [ 458.049798][T20014] ? rcu_read_lock_any_held+0x6a/0x90 [ 458.049816][T20014] ? find_held_lock+0x2b/0x80 [ 458.049841][T20014] ? ksys_write+0x190/0x250 [ 458.049861][T20014] ? ksys_write+0x190/0x250 [ 458.049885][T20014] do_futex+0x2b2/0x440 [ 458.049911][T20014] ? __pfx_do_futex+0x10/0x10 [ 458.049944][T20014] __x64_sys_futex+0x34f/0x4d0 [ 458.049972][T20014] ? __pfx___x64_sys_futex+0x10/0x10 [ 458.050007][T20014] do_syscall_64+0x123/0x790 [ 458.050036][T20014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.050055][T20014] RIP: 0033:0x7f2da059e559 [ 458.050071][T20014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.050088][T20014] RSP: 002b:00007f2da154a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 458.050107][T20014] RAX: ffffffffffffffda RBX: 00007f2da0825fa8 RCX: 00007f2da059e559 [ 458.050118][T20014] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2da0825fac [ 458.050130][T20014] RBP: 00007f2da0825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 458.050141][T20014] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 458.050152][T20014] R13: 00007f2da0826038 R14: 00007fff48938280 R15: 00007fff48938368 [ 458.050177][T20014] [ 458.152665][ T42] audit: type=1400 audit(1792371559.380:22358): avc: denied { create } for pid=20006 comm="syz.8.4612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 458.155588][ T42] audit: type=1400 audit(1792371559.380:22359): avc: denied { bind } for pid=20006 comm="syz.8.4612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 458.155617][ T42] audit: type=1400 audit(1792371559.380:22360): avc: denied { setopt } for pid=20006 comm="syz.8.4612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 458.177790][ T42] audit: type=1400 audit(1792371559.410:22361): avc: denied { create } for pid=20015 comm="syz.4.4617" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 458.177822][ T42] audit: type=1400 audit(1792371559.410:22362): avc: denied { write } for pid=20015 comm="syz.4.4617" name="file0" dev="tmpfs" ino=1564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 458.178223][T20016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4617'. [ 458.178242][T20016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4617'. [ 458.350576][T20026] afs: Unknown parameter '' [ 458.467468][T20046] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(9) [ 458.488122][T20048] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4628'. [ 458.596893][T16674] tipc: Subscription rejected, illegal request [ 459.003204][T20070] nft_compat: unsupported protocol 1 [ 459.135666][T20073] afs: Unknown parameter '' [ 459.285659][T20078] FAULT_INJECTION: forcing a failure. [ 459.285659][T20078] name failslab, interval 1, probability 0, space 0, times 0 [ 459.285693][T20078] CPU: 2 UID: 0 PID: 20078 Comm: syz.9.4638 Tainted: G L syzkaller #0 PREEMPT(full) [ 459.285719][T20078] Tainted: [L]=SOFTLOCKUP [ 459.285725][T20078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 459.285737][T20078] Call Trace: [ 459.285744][T20078] [ 459.285751][T20078] dump_stack_lvl+0x100/0x190 [ 459.285804][T20078] should_fail_ex.cold+0x5/0xa [ 459.285838][T20078] should_failslab+0xc2/0x120 [ 459.285876][T20078] __kmalloc_cache_noprof+0x91/0x6d0 [ 459.285899][T20078] ? alloc_vfsmnt+0x72/0x840 [ 459.285923][T20078] alloc_vfsmnt+0x72/0x840 [ 459.285938][T20078] clone_mnt+0x4b/0x9c0 [ 459.285951][T20078] ? is_subdir+0x1a8/0x3e0 [ 459.285965][T20078] copy_tree+0x327/0xc50 [ 459.285981][T20078] __do_loopback+0x338/0x540 [ 459.285995][T20078] vfs_open_tree+0x5db/0xaf0 [ 459.286006][T20078] ? _raw_spin_unlock+0x28/0x50 [ 459.286025][T20078] ? __pfx_vfs_open_tree+0x10/0x10 [ 459.286041][T20078] __x64_sys_open_tree+0xa3/0x150 [ 459.286054][T20078] do_syscall_64+0x123/0x790 [ 459.286072][T20078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.286084][T20078] RIP: 0033:0x7f2da059e559 [ 459.286094][T20078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.286107][T20078] RSP: 002b:00007f2da154a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 459.286120][T20078] RAX: ffffffffffffffda RBX: 00007f2da0825fa0 RCX: 00007f2da059e559 [ 459.286128][T20078] RDX: 0000000000089901 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 459.286136][T20078] RBP: 00007f2da0635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 459.286143][T20078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.286150][T20078] R13: 00007f2da0826038 R14: 00007f2da0825fa0 R15: 00007fff48938368 [ 459.286167][T20078] [ 459.764992][T20087] FAULT_INJECTION: forcing a failure. [ 459.764992][T20087] name failslab, interval 1, probability 0, space 0, times 0 [ 459.765017][T20087] CPU: 1 UID: 0 PID: 20087 Comm: syz.8.4642 Tainted: G L syzkaller #0 PREEMPT(full) [ 459.765035][T20087] Tainted: [L]=SOFTLOCKUP [ 459.765040][T20087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 459.765048][T20087] Call Trace: [ 459.765052][T20087] [ 459.765058][T20087] dump_stack_lvl+0x100/0x190 [ 459.765081][T20087] should_fail_ex.cold+0x5/0xa [ 459.765098][T20087] should_failslab+0xc2/0x120 [ 459.765116][T20087] kmem_cache_alloc_noprof+0x92/0x6a0 [ 459.765132][T20087] ? __pfx_map_id_range_down+0x10/0x10 [ 459.765160][T20087] ? security_inode_alloc+0x3b/0x2c0 [ 459.765179][T20087] security_inode_alloc+0x3b/0x2c0 [ 459.765196][T20087] inode_init_always_gfp+0xc6f/0xfb0 [ 459.765217][T20087] alloc_inode+0x8e/0x250 [ 459.765231][T20087] new_inode+0x22/0x1c0 [ 459.765246][T20087] debugfs_create_dir+0xbe/0x440 [ 459.765263][T20087] kvm_dev_ioctl+0x1286/0x1b50 [ 459.765289][T20087] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 459.765306][T20087] ? selinux_file_ioctl+0x13b/0x290 [ 459.765323][T20087] ? selinux_file_ioctl+0xb6/0x290 [ 459.765340][T20087] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 459.765356][T20087] __x64_sys_ioctl+0x18e/0x210 [ 459.765373][T20087] do_syscall_64+0x123/0x790 [ 459.765392][T20087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.765404][T20087] RIP: 0033:0x7f8f6d19e559 [ 459.765414][T20087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.765430][T20087] RSP: 002b:00007f8f6b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.765443][T20087] RAX: ffffffffffffffda RBX: 00007f8f6d425fa0 RCX: 00007f8f6d19e559 [ 459.765451][T20087] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 459.765458][T20087] RBP: 00007f8f6d235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 459.765467][T20087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.765475][T20087] R13: 00007f8f6d426038 R14: 00007f8f6d425fa0 R15: 00007fff568a2bd8 [ 459.765492][T20087] [ 459.765507][T20087] debugfs: out of free dentries, can not create directory '20087-5' [ 459.833233][T20089] FAULT_INJECTION: forcing a failure. [ 459.833233][T20089] name failslab, interval 1, probability 0, space 0, times 0 [ 459.833255][T20089] CPU: 1 UID: 0 PID: 20089 Comm: syz.9.4643 Tainted: G L syzkaller #0 PREEMPT(full) [ 459.833271][T20089] Tainted: [L]=SOFTLOCKUP [ 459.833275][T20089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 459.833282][T20089] Call Trace: [ 459.833286][T20089] [ 459.833291][T20089] dump_stack_lvl+0x100/0x190 [ 459.833311][T20089] should_fail_ex.cold+0x5/0xa [ 459.833327][T20089] should_failslab+0xc2/0x120 [ 459.833344][T20089] __kmalloc_noprof+0xfc/0x840 [ 459.833358][T20089] ? iter_file_splice_write+0x5fd/0x10b0 [ 459.833387][T20089] ? iter_file_splice_write+0x1d8/0x10b0 [ 459.833407][T20089] iter_file_splice_write+0x1d8/0x10b0 [ 459.833434][T20089] ? __pfx___might_resched+0x10/0x10 [ 459.833453][T20089] ? __pfx_iter_file_splice_write+0x10/0x10 [ 459.833472][T20089] ? shmem_file_splice_read+0x2b6/0xd80 [ 459.833500][T20089] ? shmem_file_splice_read+0x724/0xd80 [ 459.833520][T20089] ? __pfx_iter_file_splice_write+0x10/0x10 [ 459.833539][T20089] direct_splice_actor+0x192/0x690 [ 459.833558][T20089] splice_direct_to_actor+0x345/0xa30 [ 459.833576][T20089] ? __pfx_direct_splice_actor+0x10/0x10 [ 459.833596][T20089] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 459.833615][T20089] ? lock_acquire+0x1d1/0x380 [ 459.833636][T20089] do_splice_direct+0x174/0x240 [ 459.833654][T20089] ? __pfx_do_splice_direct+0x10/0x10 [ 459.833670][T20089] ? avc_policy_seqno+0x9/0x20 [ 459.833684][T20089] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 459.833701][T20089] ? bpf_lsm_file_permission+0x9/0x10 [ 459.833718][T20089] ? security_file_permission+0x76/0x210 [ 459.833735][T20089] ? rw_verify_area+0xce/0x6d0 [ 459.833750][T20089] do_sendfile+0xadc/0xe20 [ 459.833765][T20089] ? __pfx_do_sendfile+0x10/0x10 [ 459.833777][T20089] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 459.833795][T20089] ? __fget_files+0x21f/0x3d0 [ 459.833815][T20089] __x64_sys_sendfile64+0x1d8/0x220 [ 459.833831][T20089] ? ksys_write+0x1ac/0x250 [ 459.833846][T20089] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 459.833877][T20089] do_syscall_64+0x123/0x790 [ 459.833907][T20089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.833927][T20089] RIP: 0033:0x7f2da059e559 [ 459.833944][T20089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.833963][T20089] RSP: 002b:00007f2da154a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 459.833981][T20089] RAX: ffffffffffffffda RBX: 00007f2da0825fa0 RCX: 00007f2da059e559 [ 459.833989][T20089] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 459.833996][T20089] RBP: 00007f2da154a090 R08: 0000000000000000 R09: 0000000000000000 [ 459.834002][T20089] R10: 0001000000201002 R11: 0000000000000246 R12: 0000000000000002 [ 459.834009][T20089] R13: 00007f2da0826038 R14: 00007f2da0825fa0 R15: 00007fff48938368 [ 459.834025][T20089] [ 459.907013][T20095] ip_tables: iptables: counters copy to user failed while replacing table [ 459.971399][T20101] x_tables: duplicate underflow at hook 1 œ[ 460.178632][T20114] veth0_to_team: entered allmulticast mode [ 460.353687][T20124] FAULT_INJECTION: forcing a failure. [ 460.353687][T20124] name failslab, interval 1, probability 0, space 0, times 0 [ 460.353712][T20124] CPU: 2 UID: 0 PID: 20124 Comm: syz.7.4656 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.353729][T20124] Tainted: [L]=SOFTLOCKUP [ 460.353734][T20124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 460.353741][T20124] Call Trace: [ 460.353746][T20124] [ 460.353751][T20124] dump_stack_lvl+0x100/0x190 [ 460.353774][T20124] should_fail_ex.cold+0x5/0xa [ 460.353792][T20124] should_failslab+0xc2/0x120 [ 460.353811][T20124] kmem_cache_alloc_noprof+0x92/0x6a0 [ 460.353825][T20124] ? __pfx_map_id_range_down+0x10/0x10 [ 460.353841][T20124] ? security_inode_alloc+0x3b/0x2c0 [ 460.353860][T20124] security_inode_alloc+0x3b/0x2c0 [ 460.353877][T20124] inode_init_always_gfp+0xc6f/0xfb0 [ 460.353897][T20124] alloc_inode+0x8e/0x250 [ 460.353912][T20124] new_inode+0x22/0x1c0 [ 460.353930][T20124] debugfs_create_dir+0xbe/0x440 [ 460.353945][T20124] kvm_dev_ioctl+0x1286/0x1b50 [ 460.353965][T20124] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 460.353982][T20124] ? selinux_file_ioctl+0x13b/0x290 [ 460.353997][T20124] ? selinux_file_ioctl+0xb6/0x290 [ 460.354015][T20124] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 460.354046][T20124] __x64_sys_ioctl+0x18e/0x210 [ 460.354066][T20124] do_syscall_64+0x123/0x790 [ 460.354086][T20124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.354099][T20124] RIP: 0033:0x7fbe5339e559 [ 460.354110][T20124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.354121][T20124] RSP: 002b:00007fbe5432a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.354133][T20124] RAX: ffffffffffffffda RBX: 00007fbe53625fa0 RCX: 00007fbe5339e559 [ 460.354142][T20124] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 460.354150][T20124] RBP: 00007fbe53435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 460.354158][T20124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.354166][T20124] R13: 00007fbe53626038 R14: 00007fbe53625fa0 R15: 00007ffdc03fc678 [ 460.354190][T20124] [ 460.379645][T20124] debugfs: out of free dentries, can not create directory '20124-5' [ 460.559276][T20128] sctp: [Deprecated]: syz.9.4657 (pid 20128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.559276][T20128] Use struct sctp_sack_info instead [ 460.564332][ T5732] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 460.564990][ T5732] Bluetooth: hci0: command 0x0c3a tx timeout [ 460.870656][T20150] FAULT_INJECTION: forcing a failure. [ 460.870656][T20150] name failslab, interval 1, probability 0, space 0, times 0 [ 460.870701][T20150] CPU: 3 UID: 0 PID: 20150 Comm: syz.7.4667 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.870729][T20150] Tainted: [L]=SOFTLOCKUP [ 460.870737][T20150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 460.870750][T20150] Call Trace: [ 460.870757][T20150] [ 460.870767][T20150] dump_stack_lvl+0x100/0x190 [ 460.870821][T20150] should_fail_ex.cold+0x5/0xa [ 460.870857][T20150] should_failslab+0xc2/0x120 [ 460.870895][T20150] kmem_cache_alloc_noprof+0x92/0x6a0 [ 460.870921][T20150] ? __pfx_map_id_range_down+0x10/0x10 [ 460.870952][T20150] ? security_inode_alloc+0x3b/0x2c0 [ 460.870998][T20150] security_inode_alloc+0x3b/0x2c0 [ 460.871026][T20150] inode_init_always_gfp+0xc6f/0xfb0 [ 460.871060][T20150] alloc_inode+0x8e/0x250 [ 460.871084][T20150] new_inode+0x22/0x1c0 [ 460.871110][T20150] debugfs_create_dir+0xbe/0x440 [ 460.871144][T20150] kvm_dev_ioctl+0x1286/0x1b50 [ 460.871180][T20150] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 460.871210][T20150] ? selinux_file_ioctl+0x13b/0x290 [ 460.871240][T20150] ? selinux_file_ioctl+0xb6/0x290 [ 460.871271][T20150] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 460.871316][T20150] __x64_sys_ioctl+0x18e/0x210 [ 460.871346][T20150] do_syscall_64+0x123/0x790 [ 460.871387][T20150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.871410][T20150] RIP: 0033:0x7fbe5339e559 [ 460.871429][T20150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.871449][T20150] RSP: 002b:00007fbe5432a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.871469][T20150] RAX: ffffffffffffffda RBX: 00007fbe53625fa0 RCX: 00007fbe5339e559 [ 460.871483][T20150] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 460.871495][T20150] RBP: 00007fbe53435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 460.871508][T20150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.871520][T20150] R13: 00007fbe53626038 R14: 00007fbe53625fa0 R15: 00007ffdc03fc678 [ 460.871548][T20150] [ 460.871647][T20150] debugfs: out of free dentries, can not create directory '20150-5' [ 460.974362][ T50] usb 14-1: new full-speed USB device number 2 using dummy_hcd [ 461.135259][ T50] usb 14-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 461.136709][ T50] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.136730][ T50] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 461.136769][ T50] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.144624][ T50] usb 14-1: config 0 descriptor?? [ 461.149036][ T50] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 461.149622][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 461.159802][ T50] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 461.162635][ T50] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 461.162690][ T50] usb 14-1: media controller created [ 461.169408][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.181727][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 461.181800][ T50] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 461.184531][ T50] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb14/14-1/input/input63 [ 461.186970][ T50] dvb-usb: schedule remote query interval to 150 msecs. [ 461.186986][ T50] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 461.304239][ T6307] usb 12-1: new full-speed USB device number 13 using dummy_hcd [ 461.324202][ T63] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 461.344504][ T5915] dvb-usb: bulk message failed: -22 (1/0) [ 461.344547][ T5915] dvb-usb: error while querying for an remote control event. [ 461.351297][T20145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.351581][T20145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.489688][ T6307] usb 12-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 461.490774][ T6307] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.490787][ T6307] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 461.490810][ T6307] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.492231][ T6307] usb 12-1: config 0 descriptor?? [ 461.493993][ T6307] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 461.494014][ T6307] dvb-usb: bulk message failed: -22 (3/0) [ 461.495404][ T6307] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 461.495787][ T6307] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 461.495809][ T6307] usb 12-1: media controller created [ 461.496482][ T6307] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.498574][ T6307] dvb-usb: bulk message failed: -22 (6/0) [ 461.498608][ T6307] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 461.499982][ T6307] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb12/12-1/input/input64 [ 461.502668][ T6307] dvb-usb: schedule remote query interval to 150 msecs. [ 461.502680][ T6307] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 461.502829][ T63] usb 13-1: Using ep0 maxpacket: 32 [ 461.508200][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 461.508229][T19520] dvb-usb: error while querying for an remote control event. [ 461.511655][ T63] usb 13-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 461.536281][ T63] usb 13-1: config index 0 descriptor too short (expected 29220, got 36) [ 461.536298][ T63] usb 13-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 461.536308][ T63] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 461.536330][ T63] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 461.536342][ T63] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 461.536354][ T63] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 461.536374][ T63] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.576573][ T63] usb 13-1: config 0 descriptor?? [ 461.654853][ T6307] dvb-usb: bulk message failed: -22 (1/0) [ 461.654883][ T6307] dvb-usb: error while querying for an remote control event. [ 461.669265][ T5915] dvb-usb: bulk message failed: -22 (1/0) [ 461.669284][ T5915] dvb-usb: error while querying for an remote control event. [ 461.701989][ T6307] Process accounting resumed [ 461.707608][T20158] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 461.707622][T20158] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 461.707631][T20158] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 461.707637][T20158] One or more global auth toks could not properly register; rc = [-22] [ 461.707658][T20158] Error validating options; rc = [-22] [ 461.749719][T20158] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4670'. [ 461.781811][T20161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.782182][T20161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.786101][ T63] usblp 13-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 461.787672][ T63] usb 13-1: USB disconnect, device number 5 [ 461.789901][ T63] usblp0: removed [ 461.824194][ T5915] dvb-usb: bulk message failed: -22 (1/0) [ 461.824216][ T5915] dvb-usb: error while querying for an remote control event. [ 461.824899][ T6307] dvb-usb: bulk message failed: -22 (1/0) [ 461.824916][ T6307] dvb-usb: error while querying for an remote control event. [ 461.847419][ T2567] usb 12-1: USB disconnect, device number 13 [ 461.916356][T20175] validate_nla: 55 callbacks suppressed [ 461.916371][T20175] netlink: 'syz.9.4675': attribute type 10 has an invalid length. [ 461.916379][T20175] netlink: 55 bytes leftover after parsing attributes in process `syz.9.4675'. [ 461.948351][ T2567] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 461.984822][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 461.984851][ T63] dvb-usb: error while querying for an remote control event. [ 462.144214][ T5915] dvb-usb: bulk message failed: -22 (1/0) [ 462.144244][ T5915] dvb-usb: error while querying for an remote control event. [ 462.224259][ T24] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 462.314803][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 462.314823][ T63] dvb-usb: error while querying for an remote control event. [ 462.360085][T20171] Process accounting resumed [ 462.374619][ T24] usb 13-1: Using ep0 maxpacket: 32 [ 462.375993][ T24] usb 13-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 462.376798][ T24] usb 13-1: config index 0 descriptor too short (expected 29220, got 36) [ 462.376811][ T24] usb 13-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 462.376821][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 462.376842][ T24] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 462.376853][ T24] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 462.376865][ T24] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 462.376885][ T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.379913][ T24] usb 13-1: config 0 descriptor?? [ 462.474179][ T5915] dvb-usb: bulk message failed: -22 (1/0) [ 462.474208][ T5915] dvb-usb: error while querying for an remote control event. [ 462.485428][T20199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=20199 comm=syz.9.4683 [ 462.592269][ T24] usblp 13-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 462.618902][T20218] jffs2: notice: (20218) jffs2_build_xattr_subsystem: complete building xattr subsystem, 21 of xdatum (0 unchecked, 21 orphan) and 32 of xref (0 dead, 32 orphan) found. [ 462.637281][ T5915] dvb-usb: bulk message failed: -22 (1/0) [ 462.637300][ T5915] dvb-usb: error while querying for an remote control event. [ 462.638221][T20218] FAULT_INJECTION: forcing a failure. [ 462.638221][T20218] name failslab, interval 1, probability 0, space 0, times 0 [ 462.638242][T20218] CPU: 3 UID: 0 PID: 20218 Comm: syz.9.4689 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.638275][T20218] Tainted: [L]=SOFTLOCKUP [ 462.638281][T20218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 462.638288][T20218] Call Trace: [ 462.638293][T20218] [ 462.638299][T20218] dump_stack_lvl+0x100/0x190 [ 462.638321][T20218] should_fail_ex.cold+0x5/0xa [ 462.638339][T20218] should_failslab+0xc2/0x120 [ 462.638358][T20218] kmem_cache_alloc_noprof+0x92/0x6a0 [ 462.638373][T20218] ? __pfx_map_id_range_down+0x10/0x10 [ 462.638389][T20218] ? security_inode_alloc+0x3b/0x2c0 [ 462.638415][T20218] security_inode_alloc+0x3b/0x2c0 [ 462.638437][T20218] inode_init_always_gfp+0xc6f/0xfb0 [ 462.638466][T20218] alloc_inode+0x8e/0x250 [ 462.638489][T20218] new_inode+0x22/0x1c0 [ 462.638510][T20218] debugfs_create_dir+0xbe/0x440 [ 462.638535][T20218] kvm_dev_ioctl+0x1286/0x1b50 [ 462.638569][T20218] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 462.638597][T20218] ? selinux_file_ioctl+0x13b/0x290 [ 462.638621][T20218] ? selinux_file_ioctl+0xb6/0x290 [ 462.638649][T20218] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 462.638672][T20218] __x64_sys_ioctl+0x18e/0x210 [ 462.638697][T20218] do_syscall_64+0x123/0x790 [ 462.638727][T20218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.638747][T20218] RIP: 0033:0x7f2da059e559 [ 462.638763][T20218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.638782][T20218] RSP: 002b:00007f2da154a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.638802][T20218] RAX: ffffffffffffffda RBX: 00007f2da0825fa0 RCX: 00007f2da059e559 [ 462.638814][T20218] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 462.638824][T20218] RBP: 00007f2da0635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 462.638832][T20218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.638839][T20218] R13: 00007f2da0826038 R14: 00007f2da0825fa0 R15: 00007fff48938368 [ 462.638855][T20218] [ 462.638959][T20218] debugfs: out of free dentries, can not create directory '20218-5' [ 462.808544][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 462.808566][ T63] dvb-usb: error while querying for an remote control event. [ 462.863651][ T63] sony 0005:054C:03D5.002A: UNIQ does not contain a MAC address; duplicate check skipped [ 462.868879][ T63] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.002A/input/input66 [ 462.895887][ T63] sony 0005:054C:03D5.002A: input,hidraw1: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 462.957876][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 462.957900][ T63] dvb-usb: error while querying for an remote control event. [ 462.998620][ T24] usb 13-1: USB disconnect, device number 6 [ 463.000689][ T24] usblp0: removed [ 463.127605][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 463.127631][ T63] dvb-usb: error while querying for an remote control event. [ 463.285851][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 463.285883][ T63] dvb-usb: error while querying for an remote control event. [ 463.457706][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 463.457731][ T63] dvb-usb: error while querying for an remote control event. [ 463.575841][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 463.575854][ T42] audit: type=1400 audit(1792371564.810:22382): avc: denied { read } for pid=20230 comm="syz.7.4692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 463.618465][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 463.618491][ T63] dvb-usb: error while querying for an remote control event. [ 463.774572][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 463.774594][ T63] dvb-usb: error while querying for an remote control event. [ 463.814682][T19520] usb 13-1: new full-speed USB device number 7 using dummy_hcd [ 463.944165][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 463.944199][ T63] dvb-usb: error while querying for an remote control event. [ 463.994737][T19520] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 463.995767][T19520] usb 13-1: config 0 has an invalid interface number: 3 but max is 0 [ 463.995785][T19520] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.995799][T19520] usb 13-1: config 0 has no interface number 0 [ 463.997870][T19520] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 463.997889][T19520] usb 13-1: Product: syz [ 463.997902][T19520] usb 13-1: Manufacturer: syz [ 463.997914][T19520] usb 13-1: SerialNumber: syz [ 464.000153][T19520] usb 13-1: config 0 descriptor?? [ 464.111033][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 464.111062][ T63] dvb-usb: error while querying for an remote control event. [ 464.203425][ T63] usb 13-1: USB disconnect, device number 7 [ 464.267413][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 464.267442][T19520] dvb-usb: error while querying for an remote control event. [ 464.456167][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 464.456197][T19520] dvb-usb: error while querying for an remote control event. [ 464.614248][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 464.614270][T19520] dvb-usb: error while querying for an remote control event. [ 464.653325][T20208] rxe_eth0 speed is unknown, defaulting to 1000 [ 464.670244][T20244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.670515][T20244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.785724][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 464.785746][ T63] dvb-usb: error while querying for an remote control event. [ 464.896192][T20244] syz.9.4696 (20244): drop_caches: 1 [ 464.946715][T20259] jffs2: notice: (20259) jffs2_build_xattr_subsystem: complete building xattr subsystem, 21 of xdatum (0 unchecked, 21 orphan) and 32 of xref (0 dead, 32 orphan) found. [ 464.951108][T20259] FAULT_INJECTION: forcing a failure. [ 464.951108][T20259] name failslab, interval 1, probability 0, space 0, times 0 [ 464.951131][T20259] CPU: 1 UID: 0 PID: 20259 Comm: syz.8.4698 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.951147][T20259] Tainted: [L]=SOFTLOCKUP [ 464.951152][T20259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 464.951160][T20259] Call Trace: [ 464.951165][T20259] [ 464.951170][T20259] dump_stack_lvl+0x100/0x190 [ 464.951193][T20259] should_fail_ex.cold+0x5/0xa [ 464.951210][T20259] should_failslab+0xc2/0x120 [ 464.951228][T20259] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 464.951244][T20259] ? __d_alloc+0x35/0xa50 [ 464.951258][T20259] __d_alloc+0x35/0xa50 [ 464.951271][T20259] d_alloc+0x4a/0x1e0 [ 464.951284][T20259] lookup_one_qstr_excl+0x171/0x250 [ 464.951298][T20259] start_dirop+0x59/0xb0 [ 464.951314][T20259] simple_start_creating+0xf9/0x110 [ 464.951346][T20259] ? __pfx_simple_start_creating+0x10/0x10 [ 464.951365][T20259] ? mntput+0x70/0xa0 [ 464.951383][T20259] ? simple_pin_fs+0xa3/0x190 [ 464.951400][T20259] debugfs_start_creating.part.0+0x7b/0x150 [ 464.951418][T20259] debugfs_create_dir+0x6c/0x440 [ 464.951434][T20259] kvm_dev_ioctl+0x1286/0x1b50 [ 464.951453][T20259] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 464.951470][T20259] ? selinux_file_ioctl+0x13b/0x290 [ 464.951486][T20259] ? selinux_file_ioctl+0xb6/0x290 [ 464.951504][T20259] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 464.951520][T20259] __x64_sys_ioctl+0x18e/0x210 [ 464.951536][T20259] do_syscall_64+0x123/0x790 [ 464.951554][T20259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.951567][T20259] RIP: 0033:0x7f8f6d19e559 [ 464.951577][T20259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.951589][T20259] RSP: 002b:00007f8f6b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.951612][T20259] RAX: ffffffffffffffda RBX: 00007f8f6d425fa0 RCX: 00007f8f6d19e559 [ 464.951620][T20259] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 464.951627][T20259] RBP: 00007f8f6d235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 464.951635][T20259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.951642][T20259] R13: 00007f8f6d426038 R14: 00007f8f6d425fa0 R15: 00007fff568a2bd8 [ 464.951658][T20259] [ 464.955068][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 464.955092][ T63] dvb-usb: error while querying for an remote control event. [ 465.077440][ T42] audit: type=1400 audit(1792371566.310:22383): avc: denied { mounton } for pid=20261 comm="syz.7.4700" path=2F3134302FE91F7189591E9233614B dev="tmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 465.114385][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 465.114413][ T63] dvb-usb: error while querying for an remote control event. [ 465.164979][ T67] Bluetooth: hci0: unexpected event for opcode 0x080f [ 465.274365][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 465.274384][ T63] dvb-usb: error while querying for an remote control event. [ 465.434121][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 465.434140][ T63] dvb-usb: error while querying for an remote control event. [ 465.543260][T20279] FAULT_INJECTION: forcing a failure. [ 465.543260][T20279] name failslab, interval 1, probability 0, space 0, times 0 [ 465.543328][T20279] CPU: 2 UID: 0 PID: 20279 Comm: syz.4.4706 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.543343][T20279] Tainted: [L]=SOFTLOCKUP [ 465.543347][T20279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 465.543355][T20279] Call Trace: [ 465.543362][T20279] [ 465.543367][T20279] dump_stack_lvl+0x100/0x190 [ 465.543429][T20279] should_fail_ex.cold+0x5/0xa [ 465.543459][T20279] should_failslab+0xc2/0x120 [ 465.543484][T20279] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 465.543500][T20279] ? alloc_inode+0x183/0x250 [ 465.543516][T20279] alloc_inode+0x183/0x250 [ 465.543529][T20279] iget_locked+0x1d9/0x6d0 [ 465.543543][T20279] ? __pfx_iget_locked+0x10/0x10 [ 465.543555][T20279] ? kernfs_root+0xee/0x2a0 [ 465.543572][T20279] ? kernfs_root+0xee/0x2a0 [ 465.543586][T20279] kernfs_get_inode+0x46/0x470 [ 465.543597][T20279] kernfs_iop_lookup+0x1a7/0x2d0 [ 465.543611][T20279] __lookup_slow+0x155/0x320 [ 465.543625][T20279] lookup_slow+0x50/0x70 [ 465.543638][T20279] link_path_walk+0x1377/0x1cc0 [ 465.543658][T20279] path_openat+0x1ac/0x2450 [ 465.543677][T20279] ? __pfx_path_openat+0x10/0x10 [ 465.543698][T20279] do_file_open+0x20e/0x430 [ 465.543715][T20279] ? __pfx_do_file_open+0x10/0x10 [ 465.543743][T20279] ? _raw_spin_unlock+0x28/0x50 [ 465.543766][T20279] ? alloc_fd+0x471/0x7a0 [ 465.543788][T20279] do_sys_openat2+0x10f/0x1e0 [ 465.543799][T20279] ? __pfx_do_sys_openat2+0x10/0x10 [ 465.543810][T20279] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 465.543828][T20279] ? __fget_files+0x21f/0x3d0 [ 465.543846][T20279] __x64_sys_openat+0x12d/0x210 [ 465.543881][T20279] ? __pfx___x64_sys_openat+0x10/0x10 [ 465.543892][T20279] ? ksys_write+0x1ac/0x250 [ 465.543911][T20279] do_syscall_64+0x123/0x790 [ 465.543929][T20279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.543941][T20279] RIP: 0033:0x7f5fb799e559 [ 465.543951][T20279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.543964][T20279] RSP: 002b:00007f5fb87e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.543979][T20279] RAX: ffffffffffffffda RBX: 00007f5fb7c25fa0 RCX: 00007f5fb799e559 [ 465.543987][T20279] RDX: 0000000000000002 RSI: 00002000000005c0 RDI: ffffffffffffff9c [ 465.543994][T20279] RBP: 00007f5fb87e1090 R08: 0000000000000000 R09: 0000000000000000 [ 465.544001][T20279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.544007][T20279] R13: 00007f5fb7c26038 R14: 00007f5fb7c25fa0 R15: 00007ffe540e04f8 [ 465.544023][T20279] [ 465.604412][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 465.604450][ T63] dvb-usb: error while querying for an remote control event. [ 465.632314][T20284] netlink: 778 bytes leftover after parsing attributes in process `syz.8.4708'. [ 465.637805][T20285] jffs2: notice: (20285) jffs2_build_xattr_subsystem: complete building xattr subsystem, 21 of xdatum (0 unchecked, 21 orphan) and 32 of xref (0 dead, 32 orphan) found. [ 465.649545][T20285] FAULT_INJECTION: forcing a failure. [ 465.649545][T20285] name failslab, interval 1, probability 0, space 0, times 0 [ 465.649567][T20285] CPU: 2 UID: 0 PID: 20285 Comm: syz.4.4709 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.649584][T20285] Tainted: [L]=SOFTLOCKUP [ 465.649589][T20285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 465.649596][T20285] Call Trace: [ 465.649601][T20285] [ 465.649607][T20285] dump_stack_lvl+0x100/0x190 [ 465.649628][T20285] should_fail_ex.cold+0x5/0xa [ 465.649646][T20285] should_failslab+0xc2/0x120 [ 465.649665][T20285] kmem_cache_alloc_noprof+0x92/0x6a0 [ 465.649681][T20285] ? __pfx_map_id_range_down+0x10/0x10 [ 465.649709][T20285] ? security_inode_alloc+0x3b/0x2c0 [ 465.649735][T20285] security_inode_alloc+0x3b/0x2c0 [ 465.649751][T20285] inode_init_always_gfp+0xc6f/0xfb0 [ 465.649771][T20285] alloc_inode+0x8e/0x250 [ 465.649786][T20285] new_inode+0x22/0x1c0 [ 465.649801][T20285] debugfs_create_dir+0xbe/0x440 [ 465.649824][T20285] kvm_dev_ioctl+0x1286/0x1b50 [ 465.649851][T20285] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 465.649869][T20285] ? selinux_file_ioctl+0x13b/0x290 [ 465.649887][T20285] ? selinux_file_ioctl+0xb6/0x290 [ 465.649905][T20285] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 465.649921][T20285] __x64_sys_ioctl+0x18e/0x210 [ 465.649937][T20285] do_syscall_64+0x123/0x790 [ 465.649955][T20285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.649967][T20285] RIP: 0033:0x7f5fb799e559 [ 465.649977][T20285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.649988][T20285] RSP: 002b:00007f5fb87e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.649999][T20285] RAX: ffffffffffffffda RBX: 00007f5fb7c25fa0 RCX: 00007f5fb799e559 [ 465.650007][T20285] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 465.650014][T20285] RBP: 00007f5fb7a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 465.650020][T20285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.650027][T20285] R13: 00007f5fb7c26038 R14: 00007f5fb7c25fa0 R15: 00007ffe540e04f8 [ 465.650044][T20285] [ 465.650055][T20285] debugfs: out of free dentries, can not create directory '20285-5' [ 465.688698][ T42] audit: type=1400 audit(1792371566.920:22384): avc: denied { mounton } for pid=20282 comm="syz.8.4708" path="/83/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 465.739460][ T42] audit: type=1400 audit(1792371566.970:22385): avc: denied { read write } for pid=20287 comm="syz.8.4710" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 465.739652][ T42] audit: type=1400 audit(1792371566.970:22386): avc: denied { open } for pid=20287 comm="syz.8.4710" path="/84/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 465.740011][T20288] type mismatch for 20000000,20000 old: write-combining new: write-back [ 465.740452][ T42] audit: type=1400 audit(1792371566.970:22387): avc: denied { ioctl } for pid=20287 comm="syz.8.4710" path="/84/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 465.774443][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 465.774459][ T63] dvb-usb: error while querying for an remote control event. [ 465.786846][T20292] FAULT_INJECTION: forcing a failure. [ 465.786846][T20292] name failslab, interval 1, probability 0, space 0, times 0 [ 465.786868][T20292] CPU: 3 UID: 0 PID: 20292 Comm: syz.4.4712 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.786884][T20292] Tainted: [L]=SOFTLOCKUP [ 465.786889][T20292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 465.786897][T20292] Call Trace: [ 465.786901][T20292] [ 465.786907][T20292] dump_stack_lvl+0x100/0x190 [ 465.786928][T20292] should_fail_ex.cold+0x5/0xa [ 465.786946][T20292] should_failslab+0xc2/0x120 [ 465.786964][T20292] __kmalloc_cache_noprof+0x91/0x6d0 [ 465.786978][T20292] ? __alloc_workqueue+0x155/0x1950 [ 465.787002][T20292] __alloc_workqueue+0x155/0x1950 [ 465.787017][T20292] ? __pfx_vsnprintf+0x10/0x10 [ 465.787033][T20292] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 465.787050][T20292] ? lockdep_hardirqs_on+0x7d/0x110 [ 465.787067][T20292] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 465.787086][T20292] alloc_workqueue_noprof+0xc7/0x130 [ 465.787107][T20292] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 465.787126][T20292] ? __pfx___debug_object_init+0x10/0x10 [ 465.787149][T20292] nci_register_device+0x394/0xb80 [ 465.787166][T20292] ? __pfx_nci_register_device+0x10/0x10 [ 465.787183][T20292] ? lockdep_init_map_type+0x5c/0x250 [ 465.787208][T20292] virtual_ncidev_open+0x141/0x220 [ 465.787229][T20292] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 465.787242][T20292] misc_open+0x26d/0x450 [ 465.787266][T20292] ? __pfx_misc_open+0x10/0x10 [ 465.787289][T20292] chrdev_open+0x234/0x6a0 [ 465.787316][T20292] ? __pfx_chrdev_open+0x10/0x10 [ 465.787340][T20292] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 465.787367][T20292] do_dentry_open+0x6ab/0x14d0 [ 465.787392][T20292] ? __pfx_chrdev_open+0x10/0x10 [ 465.787418][T20292] vfs_open+0x82/0x3f0 [ 465.787437][T20292] path_openat+0x1a23/0x2450 [ 465.787456][T20292] ? __pfx_path_openat+0x10/0x10 [ 465.787477][T20292] do_file_open+0x20e/0x430 [ 465.787495][T20292] ? __pfx_do_file_open+0x10/0x10 [ 465.787522][T20292] ? _raw_spin_unlock+0x28/0x50 [ 465.787536][T20292] ? alloc_fd+0x471/0x7a0 [ 465.787557][T20292] do_sys_openat2+0x10f/0x1e0 [ 465.787568][T20292] ? __pfx_do_sys_openat2+0x10/0x10 [ 465.787580][T20292] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 465.787601][T20292] __x64_sys_openat+0x12d/0x210 [ 465.787613][T20292] ? __pfx___x64_sys_openat+0x10/0x10 [ 465.787630][T20292] do_syscall_64+0x123/0x790 [ 465.787648][T20292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.787660][T20292] RIP: 0033:0x7f5fb799e559 [ 465.787670][T20292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.787682][T20292] RSP: 002b:00007f5fb87e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.787693][T20292] RAX: ffffffffffffffda RBX: 00007f5fb7c25fa0 RCX: 00007f5fb799e559 [ 465.787701][T20292] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 465.787708][T20292] RBP: 00007f5fb7a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 465.787715][T20292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.787721][T20292] R13: 00007f5fb7c26038 R14: 00007f5fb7c25fa0 R15: 00007ffe540e04f8 [ 465.787737][T20292] [ 465.944204][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 465.944224][T19520] dvb-usb: error while querying for an remote control event. [ 465.951049][ T67] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 466.025434][T20305] FAULT_INJECTION: forcing a failure. [ 466.025434][T20305] name failslab, interval 1, probability 0, space 0, times 0 [ 466.025466][T20305] CPU: 3 UID: 0 PID: 20305 Comm: syz.7.4716 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.025487][T20305] Tainted: [L]=SOFTLOCKUP [ 466.025492][T20305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 466.025499][T20305] Call Trace: [ 466.025503][T20305] [ 466.025508][T20305] dump_stack_lvl+0x100/0x190 [ 466.025528][T20305] should_fail_ex.cold+0x5/0xa [ 466.025545][T20305] should_failslab+0xc2/0x120 [ 466.025563][T20305] kmem_cache_alloc_noprof+0x92/0x6a0 [ 466.025578][T20305] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 466.025601][T20305] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 466.025622][T20305] mmu_topup_memory_caches+0x25/0x170 [ 466.025649][T20305] kvm_mmu_load+0xe8/0x2580 [ 466.025661][T20305] ? apic_has_interrupt_for_ppr+0xb4/0x210 [ 466.025677][T20305] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 466.025695][T20305] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 466.025714][T20305] ? __pfx_kvm_mmu_load+0x10/0x10 [ 466.025726][T20305] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 466.025739][T20305] ? kvm_check_and_inject_events+0x896/0x1050 [ 466.025756][T20305] vcpu_run+0x419f/0x61a0 [ 466.025769][T20305] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 466.025793][T20305] ? __pfx_vcpu_run+0x10/0x10 [ 466.025809][T20305] ? lock_acquire+0x1d1/0x380 [ 466.025822][T20305] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 466.025838][T20305] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 466.025864][T20305] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 466.025878][T20305] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 466.025896][T20305] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 466.025910][T20305] ? lock_acquire+0x1d1/0x380 [ 466.025923][T20305] ? do_raw_write_lock+0x11e/0x260 [ 466.025939][T20305] ? find_held_lock+0x2b/0x80 [ 466.025955][T20305] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 466.025970][T20305] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 466.025989][T20305] kvm_vcpu_ioctl+0x730/0x1700 [ 466.026006][T20305] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 466.026022][T20305] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 466.026039][T20305] ? do_vfs_ioctl+0x226/0x13e0 [ 466.026053][T20305] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 466.026065][T20305] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 466.026084][T20305] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 466.026108][T20305] ? __fget_files+0x34/0x3d0 [ 466.026138][T20305] ? selinux_file_ioctl+0x13b/0x290 [ 466.026153][T20305] ? selinux_file_ioctl+0xb6/0x290 [ 466.026170][T20305] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 466.026187][T20305] __x64_sys_ioctl+0x18e/0x210 [ 466.026202][T20305] do_syscall_64+0x123/0x790 [ 466.026221][T20305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.026232][T20305] RIP: 0033:0x7fbe5339e559 [ 466.026242][T20305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.026253][T20305] RSP: 002b:00007fbe5432a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.026264][T20305] RAX: ffffffffffffffda RBX: 00007fbe53625fa0 RCX: 00007fbe5339e559 [ 466.026271][T20305] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 466.026278][T20305] RBP: 00007fbe5432a090 R08: 0000000000000000 R09: 0000000000000000 [ 466.026285][T20305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.026291][T20305] R13: 00007fbe53626038 R14: 00007fbe53625fa0 R15: 00007ffdc03fc678 [ 466.026306][T20305] [ 466.073169][ T42] audit: type=1400 audit(1792371567.300:22388): avc: denied { create } for pid=20307 comm="syz.9.4717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 466.081066][ T42] audit: type=1400 audit(1792371567.310:22389): avc: denied { sys_admin } for pid=20307 comm="syz.9.4717" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 466.114129][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 466.114150][T19520] dvb-usb: error while querying for an remote control event. [ 466.264105][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 466.264129][T19520] dvb-usb: error while querying for an remote control event. [ 466.434235][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 466.434259][T19520] dvb-usb: error while querying for an remote control event. [ 466.444181][ T24] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 466.594187][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 466.594209][T19520] dvb-usb: error while querying for an remote control event. [ 466.594888][ T24] usb 12-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 466.594930][ T24] usb 12-1: too many configurations: 40, using maximum allowed: 8 [ 466.603443][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.603459][ T24] usb 12-1: Product: syz [ 466.603467][ T24] usb 12-1: Manufacturer: syz [ 466.603475][ T24] usb 12-1: SerialNumber: syz [ 466.764749][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 466.764768][T19520] dvb-usb: error while querying for an remote control event. [ 466.823320][T20326] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 466.832810][ T24] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 466.832839][ T24] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 466.832850][ T24] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 466.856811][ T24] lan78xx 12-1:1.0: probe with driver lan78xx failed with error -71 [ 466.859406][ T24] usb 12-1: USB disconnect, device number 14 [ 466.925193][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 466.925216][T19520] dvb-usb: error while querying for an remote control event. [ 467.084185][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 467.084207][ T63] dvb-usb: error while querying for an remote control event. [ 467.222527][T20362] jffs2: notice: (20362) jffs2_build_xattr_subsystem: complete building xattr subsystem, 21 of xdatum (0 unchecked, 21 orphan) and 32 of xref (0 dead, 32 orphan) found. [ 467.254283][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 467.254313][T19520] dvb-usb: error while querying for an remote control event. [ 467.424872][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 467.424891][T19520] dvb-usb: error while querying for an remote control event. [ 467.490096][T20375] FAULT_INJECTION: forcing a failure. [ 467.490096][T20375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.490119][T20375] CPU: 3 UID: 0 PID: 20375 Comm: syz.7.4725 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.490134][T20375] Tainted: [L]=SOFTLOCKUP [ 467.490139][T20375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 467.490145][T20375] Call Trace: [ 467.490150][T20375] [ 467.490155][T20375] dump_stack_lvl+0x100/0x190 [ 467.490176][T20375] should_fail_ex.cold+0x5/0xa [ 467.490193][T20375] _copy_to_user+0x32/0xd0 [ 467.490210][T20375] simple_read_from_buffer+0xcb/0x170 [ 467.490229][T20375] proc_fail_nth_read+0x1af/0x230 [ 467.490247][T20375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.490265][T20375] ? rw_verify_area+0xce/0x6d0 [ 467.490277][T20375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.490294][T20375] vfs_read+0x1e4/0xb40 [ 467.490307][T20375] ? lock_acquire+0x1d1/0x380 [ 467.490320][T20375] ? __fget_files+0x34/0x3d0 [ 467.490336][T20375] ? __pfx_vfs_read+0x10/0x10 [ 467.490348][T20375] ? find_held_lock+0x2b/0x80 [ 467.490382][T20375] ? __fget_files+0x215/0x3d0 [ 467.490401][T20375] ? __fget_files+0x21f/0x3d0 [ 467.490421][T20375] ksys_read+0x12a/0x250 [ 467.490435][T20375] ? __pfx_ksys_read+0x10/0x10 [ 467.490453][T20375] do_syscall_64+0x123/0x790 [ 467.490471][T20375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.490487][T20375] RIP: 0033:0x7fbe5335ed8e [ 467.490497][T20375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 467.490508][T20375] RSP: 002b:00007fbe54329fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 467.490520][T20375] RAX: ffffffffffffffda RBX: 00007fbe5432a6c0 RCX: 00007fbe5335ed8e [ 467.490527][T20375] RDX: 000000000000000f RSI: 00007fbe5432a0a0 RDI: 0000000000000007 [ 467.490534][T20375] RBP: 00007fbe5432a090 R08: 0000000000000000 R09: 0000000000000000 [ 467.490541][T20375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.490547][T20375] R13: 00007fbe53626038 R14: 00007fbe53625fa0 R15: 00007ffdc03fc678 [ 467.490563][T20375] [ 467.594181][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 467.594200][T19520] dvb-usb: error while querying for an remote control event. [ 467.614373][ T67] Bluetooth: hci1: command tx timeout [ 467.617441][ T42] audit: type=1400 audit(1792371568.850:22390): avc: denied { mounton } for pid=20364 comm="syz.4.4722" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 467.620414][T20367] Can't find a SQUASHFS superblock on nullb0 [ 467.623748][T20366] Can't find a SQUASHFS superblock on nullb0 [ 467.754136][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 467.754159][T19520] dvb-usb: error while querying for an remote control event. [ 467.914207][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 467.914229][T19520] dvb-usb: error while querying for an remote control event. [ 468.084429][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 468.084461][T19520] dvb-usb: error while querying for an remote control event. [ 468.244995][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 468.245028][T19520] dvb-usb: error while querying for an remote control event. [ 468.409844][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 468.409865][ T50] dvb-usb: error while querying for an remote control event. [ 468.564441][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 468.564463][T19520] dvb-usb: error while querying for an remote control event. [ 468.735267][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 468.735289][ T50] dvb-usb: error while querying for an remote control event. [ 468.894155][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 468.894188][ T50] dvb-usb: error while querying for an remote control event. [ 469.056114][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 469.056144][ T50] dvb-usb: error while querying for an remote control event. [ 469.214239][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 469.214270][T19520] dvb-usb: error while querying for an remote control event. [ 469.375342][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 469.375372][ T50] dvb-usb: error while querying for an remote control event. [ 469.536788][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 469.536819][ T50] dvb-usb: error while querying for an remote control event. [ 469.687000][ T67] Bluetooth: hci1: command tx timeout [ 469.694129][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 469.694150][ T50] dvb-usb: error while querying for an remote control event. [ 469.753781][T20350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.806316][T20390] jffs2: notice: (20390) jffs2_build_xattr_subsystem: complete building xattr subsystem, 21 of xdatum (0 unchecked, 21 orphan) and 32 of xref (0 dead, 32 orphan) found. [ 469.811899][T20393] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 469.811927][T20393] CIFS: VFS: Malformed UNC in devname [ 469.838158][ T42] audit: type=1400 audit(1792371571.070:22391): avc: denied { ioctl } for pid=20394 comm="syz.8.4732" path="socket:[114202]" dev="sockfs" ino=114202 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 469.840559][ T42] audit: type=1400 audit(1792371571.070:22392): avc: denied { bind } for pid=20394 comm="syz.8.4732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 469.864947][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 469.864973][ T50] dvb-usb: error while querying for an remote control event. [ 469.914825][ T42] audit: type=1400 audit(1792371571.150:22393): avc: denied { read } for pid=20401 comm="syz.4.4734" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 470.034202][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 470.034229][T19520] dvb-usb: error while querying for an remote control event. [ 470.049549][T20406] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.050544][T20406] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.050650][T20406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.094920][ T5829] usb 13-1: new full-speed USB device number 8 using dummy_hcd [ 470.151265][ T42] audit: type=1400 audit(1792371571.380:22394): avc: denied { ioctl } for pid=20411 comm="syz.7.4737" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 470.204267][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 470.204287][T19520] dvb-usb: error while querying for an remote control event. [ 470.244968][ T5829] usb 13-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 470.246206][ T5829] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.246219][ T5829] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 470.246242][ T5829] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.249439][ T5829] usb 13-1: config 0 descriptor?? [ 470.251244][ T5829] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 470.251274][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 470.252102][T20420] openvswitch: netlink: Missing key (keys=d0, expected=500) [ 470.252857][ T5829] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 470.253450][ T5829] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 470.253473][ T5829] usb 13-1: media controller created [ 470.263127][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 470.269453][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 470.269504][ T5829] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 470.272779][ T5829] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb13/13-1/input/input67 [ 470.274593][ T5829] dvb-usb: schedule remote query interval to 150 msecs. [ 470.274607][ T5829] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 470.311450][T20410] SELinux: policydb version -613762557 does not match my version range 15-35 [ 470.311481][T20410] SELinux: failed to load policy [ 470.311806][ T42] audit: type=1400 audit(1792371571.540:22395): avc: denied { load_policy } for pid=20409 comm="syz.9.4738" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 470.375329][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 470.375359][T19520] dvb-usb: error while querying for an remote control event. [ 470.417986][T20426] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4743'. [ 470.434264][ T5829] dvb-usb: bulk message failed: -22 (1/0) [ 470.434285][ T5829] dvb-usb: error while querying for an remote control event. [ 470.480628][ T5829] usb 13-1: USB disconnect, device number 8 [ 470.535218][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 470.535247][T19520] dvb-usb: error while querying for an remote control event. [ 470.540170][ T5829] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 470.654340][T20437] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.655332][T20437] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.655419][T20437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.694193][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 470.694225][T19520] dvb-usb: error while querying for an remote control event. [ 470.835432][ T42] audit: type=1400 audit(1792371572.070:22396): avc: denied { connect } for pid=20452 comm="syz.7.4753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 470.854354][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 470.854381][ T50] dvb-usb: error while querying for an remote control event. [ 470.939372][ T42] audit: type=1400 audit(1792371572.170:22397): avc: denied { map } for pid=20460 comm="syz.9.4758" path="socket:[117001]" dev="sockfs" ino=117001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 471.015750][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 471.015769][T19520] dvb-usb: error while querying for an remote control event. [ 471.047312][T20465] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4760'. [ 471.145729][T20476] Cannot find set identified by id 0 to match [ 471.159748][T20472] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.162354][T20472] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.162459][T20472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.187373][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 471.187396][T19520] dvb-usb: error while querying for an remote control event. [ 471.223934][T20482] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4767'. [ 471.278873][T20488] ip_tables: iptables: counters copy to user failed while replacing table [ 471.279459][T20488] FAULT_INJECTION: forcing a failure. [ 471.279459][T20488] name failslab, interval 1, probability 0, space 0, times 0 [ 471.279487][T20488] CPU: 2 UID: 0 PID: 20488 Comm: syz.8.4769 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.279511][T20488] Tainted: [L]=SOFTLOCKUP [ 471.279517][T20488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 471.279527][T20488] Call Trace: [ 471.279534][T20488] [ 471.279541][T20488] dump_stack_lvl+0x100/0x190 [ 471.279599][T20488] should_fail_ex.cold+0x5/0xa [ 471.279630][T20488] should_failslab+0xc2/0x120 [ 471.279664][T20488] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 471.279687][T20488] ? __alloc_skb+0x5b7/0x710 [ 471.279718][T20488] ? __alloc_skb+0x140/0x710 [ 471.279738][T20488] __alloc_skb+0x140/0x710 [ 471.279753][T20488] ? __alloc_skb+0x5b7/0x710 [ 471.279768][T20488] ? __pfx___alloc_skb+0x10/0x10 [ 471.279785][T20488] ? is_bpf_text_address+0x8a/0x1a0 [ 471.279810][T20488] ? bpf_ksym_find+0x128/0x1c0 [ 471.279859][T20488] alloc_skb_with_frags+0xdd/0x760 [ 471.279886][T20488] ? __lock_acquire+0x5c0/0x1f40 [ 471.279916][T20488] ? unwind_get_return_address+0x59/0xa0 [ 471.279954][T20488] sock_alloc_send_pskb+0x801/0x980 [ 471.279984][T20488] ? do_raw_spin_lock+0x128/0x260 [ 471.280010][T20488] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 471.280036][T20488] ? __lock_acquire+0x5c0/0x1f40 [ 471.280058][T20488] ? __lock_acquire+0x5c0/0x1f40 [ 471.280082][T20488] __ip_append_data+0x23a5/0x44d0 [ 471.280119][T20488] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 471.280138][T20488] ? find_held_lock+0x2b/0x80 [ 471.280170][T20488] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 471.280197][T20488] ? __pfx___ip_append_data+0x10/0x10 [ 471.280224][T20488] ip_make_skb+0x28b/0x310 [ 471.280248][T20488] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 471.280271][T20488] ? __pfx_ip_make_skb+0x10/0x10 [ 471.280307][T20488] ? udp_sendmsg+0x171c/0x2710 [ 471.280327][T20488] udp_sendmsg+0x171c/0x2710 [ 471.280353][T20488] ? __pfx_udp_sendmsg+0x10/0x10 [ 471.280373][T20488] ? __lock_acquire+0x5c0/0x1f40 [ 471.280402][T20488] ? release_sock+0x21/0x280 [ 471.280424][T20488] ? inet_autobind+0x145/0x1a0 [ 471.280445][T20488] ? find_held_lock+0x2b/0x80 [ 471.280474][T20488] ? lockdep_hardirqs_on+0x7d/0x110 [ 471.280514][T20488] ? inet_autobind+0x145/0x1a0 [ 471.280535][T20488] ? __local_bh_enable_ip+0xa5/0x120 [ 471.280566][T20488] ? inet_autobind+0x14a/0x1a0 [ 471.280588][T20488] ? __pfx_udp_sendmsg+0x10/0x10 [ 471.280612][T20488] inet_sendmsg+0x105/0x140 [ 471.280657][T20488] __sys_sendto+0x453/0x4e0 [ 471.280674][T20488] ? __pfx_inet_sendmsg+0x10/0x10 [ 471.280702][T20488] ? __pfx___sys_sendto+0x10/0x10 [ 471.280738][T20488] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 471.280777][T20488] ? ksys_write+0x1ac/0x250 [ 471.280799][T20488] ? __pfx_ksys_write+0x10/0x10 [ 471.280822][T20488] __x64_sys_sendto+0xe0/0x1c0 [ 471.280839][T20488] ? do_syscall_64+0xae/0x790 [ 471.280870][T20488] ? lockdep_hardirqs_on+0x7d/0x110 [ 471.280896][T20488] do_syscall_64+0x123/0x790 [ 471.280925][T20488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.280943][T20488] RIP: 0033:0x7f8f6d19e559 [ 471.280960][T20488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.280977][T20488] RSP: 002b:00007f8f6b3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 471.280996][T20488] RAX: ffffffffffffffda RBX: 00007f8f6d425fa0 RCX: 00007f8f6d19e559 [ 471.281008][T20488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 471.281019][T20488] RBP: 00007f8f6b3f6090 R08: 0000200000000280 R09: 0000000000000010 [ 471.281030][T20488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.281041][T20488] R13: 00007f8f6d426038 R14: 00007f8f6d425fa0 R15: 00007fff568a2bd8 [ 471.281066][T20488] [ 471.283250][T20489] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4770'. [ 471.284798][ T42] audit: type=1400 audit(1792371572.510:22398): avc: denied { write } for pid=20487 comm="syz.7.4770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 471.305475][ T42] audit: type=1400 audit(1792371572.530:22399): avc: denied { create } for pid=20479 comm="syz.9.4766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 471.354199][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 471.354218][T19520] dvb-usb: error while querying for an remote control event. [ 471.361063][ T42] audit: type=1400 audit(1792371572.590:22400): avc: denied { bind } for pid=20491 comm="syz.7.4771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 471.421981][T20495] FAULT_INJECTION: forcing a failure. [ 471.421981][T20495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.422006][T20495] CPU: 3 UID: 0 PID: 20495 Comm: syz.4.4772 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.422021][T20495] Tainted: [L]=SOFTLOCKUP [ 471.422025][T20495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 471.422032][T20495] Call Trace: [ 471.422036][T20495] [ 471.422041][T20495] dump_stack_lvl+0x100/0x190 [ 471.422061][T20495] should_fail_ex.cold+0x5/0xa [ 471.422078][T20495] _copy_from_iter+0x1f4/0x1690 [ 471.422106][T20495] ? _copy_from_iter+0x270/0x1690 [ 471.422122][T20495] ? __pfx__copy_from_iter+0x10/0x10 [ 471.422140][T20495] ? __pfx__copy_from_iter+0x10/0x10 [ 471.422159][T20495] ? _copy_from_iter+0x270/0x1690 [ 471.422177][T20495] copy_page_from_iter+0x238/0x300 [ 471.422196][T20495] skb_copy_datagram_from_iter+0x399/0x720 [ 471.422218][T20495] tun_get_user+0x1967/0x3da0 [ 471.422258][T20495] ? __lock_acquire+0x5c0/0x1f40 [ 471.422272][T20495] ? __pfx_tun_get_user+0x10/0x10 [ 471.422284][T20495] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 471.422302][T20495] ? find_held_lock+0x2b/0x80 [ 471.422318][T20495] ? tun_get+0x191/0x370 [ 471.422333][T20495] ? tun_get+0x191/0x370 [ 471.422352][T20495] tun_chr_write_iter+0xdc/0x200 [ 471.422364][T20495] vfs_write+0x6af/0x1050 [ 471.422379][T20495] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 471.422392][T20495] ? __pfx_vfs_write+0x10/0x10 [ 471.422404][T20495] ? find_held_lock+0x2b/0x80 [ 471.422429][T20495] ksys_write+0x12a/0x250 [ 471.422443][T20495] ? __pfx_ksys_write+0x10/0x10 [ 471.422461][T20495] do_syscall_64+0x123/0x790 [ 471.422479][T20495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.422504][T20495] RIP: 0033:0x7f5fb799e559 [ 471.422514][T20495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.422525][T20495] RSP: 002b:00007f5fb87e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 471.422536][T20495] RAX: ffffffffffffffda RBX: 00007f5fb7c25fa0 RCX: 00007f5fb799e559 [ 471.422543][T20495] RDX: 000000000000fdef RSI: 00002000000006c0 RDI: 0000000000000003 [ 471.422550][T20495] RBP: 00007f5fb87e1090 R08: 0000000000000000 R09: 0000000000000000 [ 471.422557][T20495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 471.422564][T20495] R13: 00007f5fb7c26038 R14: 00007f5fb7c25fa0 R15: 00007ffe540e04f8 [ 471.422579][T20495] [ 471.514296][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 471.514330][T19520] dvb-usb: error while querying for an remote control event. [ 471.665757][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 471.665779][T19520] dvb-usb: error while querying for an remote control event. [ 471.774238][ T67] Bluetooth: hci1: command tx timeout [ 471.796510][T20518] openvswitch: netlink: Missing key (keys=d0, expected=500) [ 471.830869][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 471.830929][T19520] dvb-usb: error while querying for an remote control event. [ 471.984154][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 471.984174][T19520] dvb-usb: error while querying for an remote control event. [ 472.144526][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 472.144555][ T63] dvb-usb: error while querying for an remote control event. [ 472.275581][T20540] FAULT_INJECTION: forcing a failure. [ 472.275581][T20540] name failslab, interval 1, probability 0, space 0, times 0 [ 472.275606][T20540] CPU: 3 UID: 0 PID: 20540 Comm: syz.8.4786 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.275621][T20540] Tainted: [L]=SOFTLOCKUP [ 472.275626][T20540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 472.275633][T20540] Call Trace: [ 472.275637][T20540] [ 472.275642][T20540] dump_stack_lvl+0x100/0x190 [ 472.275679][T20540] should_fail_ex.cold+0x5/0xa [ 472.275703][T20540] should_failslab+0xc2/0x120 [ 472.275724][T20540] kmem_cache_alloc_noprof+0x92/0x6a0 [ 472.275739][T20540] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 472.275765][T20540] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 472.275786][T20540] mmu_topup_memory_caches+0x25/0x170 [ 472.275808][T20540] kvm_mmu_load+0xe8/0x2580 [ 472.275838][T20540] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 472.275858][T20540] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 472.275878][T20540] ? __pfx_kvm_mmu_load+0x10/0x10 [ 472.275890][T20540] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 472.275903][T20540] ? kvm_check_and_inject_events+0x896/0x1050 [ 472.275920][T20540] vcpu_run+0x419f/0x61a0 [ 472.275933][T20540] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 472.275957][T20540] ? __pfx_vcpu_run+0x10/0x10 [ 472.275973][T20540] ? lock_acquire+0x1d1/0x380 [ 472.275992][T20540] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 472.276008][T20540] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 472.276033][T20540] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 472.276052][T20540] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 472.276071][T20540] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 472.276085][T20540] ? lock_acquire+0x1d1/0x380 [ 472.276098][T20540] ? do_raw_write_lock+0x11e/0x260 [ 472.276114][T20540] ? find_held_lock+0x2b/0x80 [ 472.276131][T20540] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 472.276145][T20540] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 472.276164][T20540] kvm_vcpu_ioctl+0x730/0x1700 [ 472.276181][T20540] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 472.276198][T20540] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 472.276220][T20540] ? do_vfs_ioctl+0x226/0x13e0 [ 472.276234][T20540] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 472.276247][T20540] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 472.276273][T20540] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 472.276292][T20540] ? __fget_files+0x34/0x3d0 [ 472.276315][T20540] ? selinux_file_ioctl+0x13b/0x290 [ 472.276330][T20540] ? selinux_file_ioctl+0xb6/0x290 [ 472.276347][T20540] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 472.276364][T20540] __x64_sys_ioctl+0x18e/0x210 [ 472.276378][T20540] do_syscall_64+0x123/0x790 [ 472.276401][T20540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.276412][T20540] RIP: 0033:0x7f8f6d19e559 [ 472.276427][T20540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.276438][T20540] RSP: 002b:00007f8f6b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.276450][T20540] RAX: ffffffffffffffda RBX: 00007f8f6d425fa0 RCX: 00007f8f6d19e559 [ 472.276457][T20540] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 472.276463][T20540] RBP: 00007f8f6b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 472.276470][T20540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.276477][T20540] R13: 00007f8f6d426038 R14: 00007f8f6d425fa0 R15: 00007fff568a2bd8 [ 472.276493][T20540] [ 472.313323][T20544] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4788'. [ 472.313977][T20545] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4788'. [ 472.314137][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 472.314151][ T63] dvb-usb: error while querying for an remote control event. [ 472.474260][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 472.474279][ T63] dvb-usb: error while querying for an remote control event. [ 472.498112][T20550] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4790'. [ 472.618334][T20565] ip6gretap0: entered promiscuous mode [ 472.631892][T20567] TC_ACT_REPEAT abuse ? [ 472.644437][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 472.644528][ T63] dvb-usb: error while querying for an remote control event. [ 472.781793][T20571] jffs2: notice: (20571) jffs2_build_xattr_subsystem: complete building xattr subsystem, 21 of xdatum (0 unchecked, 21 orphan) and 32 of xref (0 dead, 32 orphan) found. [ 472.804464][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 472.804494][T19520] dvb-usb: error while querying for an remote control event. [ 472.880637][T20571] hub 1-0:1.0: USB hub found [ 472.881154][T20571] hub 1-0:1.0: 2 ports detected [ 472.974201][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 472.974231][ T63] dvb-usb: error while querying for an remote control event. [ 473.037773][T20579] kAFS: unable to lookup cell 'syz1' [ 473.086335][T20582] syzkaller0: entered promiscuous mode [ 473.086358][T20582] syzkaller0: entered allmulticast mode [ 473.116380][ C1] TC_ACT_REPEAT abuse ? [ 473.116408][ C1] TC_ACT_REPEAT abuse ? [ 473.116426][ C1] TC_ACT_REPEAT abuse ? [ 473.116445][ C1] TC_ACT_REPEAT abuse ? [ 473.134187][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 473.134215][ T63] dvb-usb: error while querying for an remote control event. [ 473.294257][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 473.294295][ T63] dvb-usb: error while querying for an remote control event. [ 473.454273][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 473.454293][T19520] dvb-usb: error while querying for an remote control event. [ 473.481061][T20597] rxe_eth0 speed is unknown, defaulting to 1000 [ 473.499717][T20599] FAULT_INJECTION: forcing a failure. [ 473.499717][T20599] name fail_futex, interval 1, probability 0, space 0, times 0 [ 473.499754][T20599] CPU: 3 UID: 0 PID: 20599 Comm: syz.7.4808 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.499781][T20599] Tainted: [L]=SOFTLOCKUP [ 473.499789][T20599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 473.499802][T20599] Call Trace: [ 473.499810][T20599] [ 473.499846][T20599] dump_stack_lvl+0x100/0x190 [ 473.499891][T20599] should_fail_ex.cold+0x5/0xa [ 473.499921][T20599] get_futex_key+0x1c9/0x13e0 [ 473.499969][T20599] ? __pfx_get_futex_key+0x10/0x10 [ 473.500002][T20599] futex_wake+0xf4/0x5e0 [ 473.500026][T20599] ? rcu_is_watching+0x13/0xc0 [ 473.500065][T20599] ? __pfx_futex_wake+0x10/0x10 [ 473.500084][T20599] ? __kasan_slab_alloc+0x89/0x90 [ 473.500117][T20599] ? lockdep_init_map_type+0x5c/0x250 [ 473.500149][T20599] do_futex+0x2b2/0x440 [ 473.500177][T20599] ? __pfx_do_futex+0x10/0x10 [ 473.500212][T20599] __x64_sys_futex+0x34f/0x4d0 [ 473.500243][T20599] ? __pfx___x64_sys_futex+0x10/0x10 [ 473.500273][T20599] ? fd_install+0x252/0x580 [ 473.500306][T20599] do_syscall_64+0x123/0x790 [ 473.500339][T20599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.500359][T20599] RIP: 0033:0x7fbe5339e559 [ 473.500377][T20599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.500397][T20599] RSP: 002b:00007fbe5432a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 473.500420][T20599] RAX: ffffffffffffffda RBX: 00007fbe53625fa8 RCX: 00007fbe5339e559 [ 473.500434][T20599] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbe53625fac [ 473.500447][T20599] RBP: 00007fbe53625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 473.500461][T20599] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 473.500474][T20599] R13: 00007fbe53626038 R14: 00007ffdc03fc590 R15: 00007ffdc03fc678 [ 473.500501][T20599] [ 473.502242][T20599] ip_tables: iptables: counters copy to user failed while replacing table [ 473.591599][T20606] 8021q: VLANs not supported on lo [ 473.614634][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 473.614663][ T63] dvb-usb: error while querying for an remote control event. [ 473.614823][T20608] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4811'. [ 473.615302][T20606] FAULT_INJECTION: forcing a failure. [ 473.615302][T20606] name failslab, interval 1, probability 0, space 0, times 0 [ 473.615324][T20606] CPU: 2 UID: 0 PID: 20606 Comm: syz.7.4810 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.615341][T20606] Tainted: [L]=SOFTLOCKUP [ 473.615345][T20606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 473.615353][T20606] Call Trace: [ 473.615357][T20606] [ 473.615362][T20606] dump_stack_lvl+0x100/0x190 [ 473.615385][T20606] should_fail_ex.cold+0x5/0xa [ 473.615406][T20606] should_failslab+0xc2/0x120 [ 473.615424][T20606] __kmalloc_cache_noprof+0x91/0x6d0 [ 473.615438][T20606] ? watch_queue_init+0x45/0x170 [ 473.615453][T20606] watch_queue_init+0x45/0x170 [ 473.615464][T20606] create_pipe_files+0x672/0x970 [ 473.615484][T20606] do_pipe2+0xbd/0x1e0 [ 473.615500][T20606] ? __pfx_do_pipe2+0x10/0x10 [ 473.615517][T20606] ? xfd_validate_state+0x129/0x190 [ 473.615534][T20606] __x64_sys_pipe2+0x54/0x80 [ 473.615551][T20606] do_syscall_64+0x123/0x790 [ 473.615570][T20606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.615582][T20606] RIP: 0033:0x7fbe5339e559 [ 473.615592][T20606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.615604][T20606] RSP: 002b:00007fbe5432a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 473.615616][T20606] RAX: ffffffffffffffda RBX: 00007fbe53625fa0 RCX: 00007fbe5339e559 [ 473.615624][T20606] RDX: 0000000000000000 RSI: 0000000000080080 RDI: 0000000000000000 [ 473.615631][T20606] RBP: 00007fbe53435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 473.615638][T20606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.615646][T20606] R13: 00007fbe53626038 R14: 00007fbe53625fa0 R15: 00007ffdc03fc678 [ 473.615661][T20606] [ 473.724166][ T24] usb 13-1: new full-speed USB device number 9 using dummy_hcd [ 473.757181][T20619] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 473.790236][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 473.790268][ T63] dvb-usb: error while querying for an remote control event. [ 473.813298][T20622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.854288][ T67] Bluetooth: hci1: command tx timeout [ 473.875530][ T24] usb 13-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 473.876926][ T24] usb 13-1: config 0 has no interfaces? [ 473.880401][ T24] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.880414][ T24] usb 13-1: Product: syz [ 473.880421][ T24] usb 13-1: Manufacturer: syz [ 473.880429][ T24] usb 13-1: SerialNumber: syz [ 473.884620][ T24] usb 13-1: config 0 descriptor?? [ 473.944336][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 473.944357][ T63] dvb-usb: error while querying for an remote control event. [ 473.988867][T20634] FAULT_INJECTION: forcing a failure. [ 473.988867][T20634] name failslab, interval 1, probability 0, space 0, times 0 [ 473.988900][T20634] CPU: 0 UID: 0 PID: 20634 Comm: syz.4.4821 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.988924][T20634] Tainted: [L]=SOFTLOCKUP [ 473.988930][T20634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 473.988941][T20634] Call Trace: [ 473.988953][T20634] [ 473.988961][T20634] dump_stack_lvl+0x100/0x190 [ 473.988992][T20634] should_fail_ex.cold+0x5/0xa [ 473.989016][T20634] should_failslab+0xc2/0x120 [ 473.989042][T20634] __kmalloc_cache_noprof+0x91/0x6d0 [ 473.989062][T20634] ? fuse_file_alloc+0xc9/0x2d0 [ 473.989102][T20634] fuse_file_alloc+0xc9/0x2d0 [ 473.989126][T20634] fuse_file_open+0xbf/0x820 [ 473.989152][T20634] fuse_priv_ioctl_prepare+0x1e2/0x250 [ 473.989172][T20634] ? inode_has_perm.isra.0+0x14a/0x1a0 [ 473.989198][T20634] fuse_fileattr_get+0xcc/0x3a0 [ 473.989220][T20634] ? __pfx_fuse_fileattr_get+0x10/0x10 [ 473.989253][T20634] vfs_fileattr_get+0xfc/0x150 [ 473.989289][T20634] __do_sys_file_getattr+0x20e/0x530 [ 473.989308][T20634] ? __pfx___do_sys_file_getattr+0x10/0x10 [ 473.989337][T20634] ? fput+0x7c/0x100 [ 473.989362][T20634] ? ksys_write+0x1ac/0x250 [ 473.989390][T20634] do_syscall_64+0x123/0x790 [ 473.989417][T20634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.989434][T20634] RIP: 0033:0x7f5fb799e559 [ 473.989449][T20634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.989465][T20634] RSP: 002b:00007f5fb87e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d4 [ 473.989483][T20634] RAX: ffffffffffffffda RBX: 00007f5fb7c25fa0 RCX: 00007f5fb799e559 [ 473.989495][T20634] RDX: 0000200000002a00 RSI: 00002000000029c0 RDI: 0000000000000004 [ 473.989505][T20634] RBP: 00007f5fb87e1090 R08: 0000000000000100 R09: 0000000000000000 [ 473.989516][T20634] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 473.989527][T20634] R13: 00007f5fb7c26038 R14: 00007f5fb7c25fa0 R15: 00007ffe540e04f8 [ 473.989551][T20634] [ 473.992428][T20637] lo: entered promiscuous mode [ 474.001497][T20637] tunl0: entered promiscuous mode [ 474.002497][T20637] gre0: entered promiscuous mode [ 474.006351][T20637] gretap0: entered promiscuous mode [ 474.011646][T20637] erspan0: entered promiscuous mode [ 474.013340][T20637] ip_vti0: entered promiscuous mode [ 474.015907][T20637] ip6_vti0: entered promiscuous mode [ 474.017039][T20637] sit0: entered promiscuous mode [ 474.018518][T20637] ip6tnl0: entered promiscuous mode [ 474.019894][T20637] ip6gre0: entered promiscuous mode [ 474.023707][T20637] ip6gretap0: entered promiscuous mode [ 474.026430][T20637] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.026699][T20637] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.027213][T20637] bridge0: entered promiscuous mode [ 474.028876][T20637] vcan0: entered promiscuous mode [ 474.029982][T20637] bond0: entered promiscuous mode [ 474.029994][T20637] bond_slave_0: entered promiscuous mode [ 474.030113][T20637] bond_slave_1: entered promiscuous mode [ 474.031747][T20637] team0: entered promiscuous mode [ 474.031758][T20637] team_slave_0: entered promiscuous mode [ 474.031874][T20637] team_slave_1: entered promiscuous mode [ 474.033652][T20637] dummy0: entered promiscuous mode [ 474.043207][T20641] netlink: 'syz.9.4823': attribute type 1 has an invalid length. [ 474.043219][T20641] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4823'. [ 474.044246][T20637] nlmon0: entered promiscuous mode [ 474.045615][T20637] batadv0: entered promiscuous mode [ 474.047799][T20637] vxcan0: entered promiscuous mode [ 474.048289][T20637] vxcan1: entered promiscuous mode [ 474.050096][T20637] veth0: entered promiscuous mode [ 474.053471][T20637] veth1: entered promiscuous mode [ 474.062449][T20637] wg0: entered promiscuous mode [ 474.071491][T20637] wg1: entered promiscuous mode [ 474.075167][T20637] wg2: entered promiscuous mode [ 474.076493][T20637] veth0_to_bridge: entered promiscuous mode [ 474.081823][T20637] veth1_to_bridge: entered promiscuous mode [ 474.085095][T20637] veth0_to_bond: entered promiscuous mode [ 474.087240][T20637] veth1_to_bond: entered promiscuous mode [ 474.093495][T20637] veth0_to_team: entered promiscuous mode [ 474.097740][T20637] veth1_to_team: entered promiscuous mode [ 474.100132][T20637] veth0_to_batadv: entered promiscuous mode [ 474.101566][T20637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.101595][T20637] batadv_slave_0: entered promiscuous mode [ 474.103097][T20637] veth1_to_batadv: entered promiscuous mode [ 474.104196][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 474.104215][T19520] dvb-usb: error while querying for an remote control event. [ 474.104749][T20637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.104783][T20637] batadv_slave_1: entered promiscuous mode [ 474.106779][T20637] xfrm0: entered promiscuous mode [ 474.109973][T20637] veth0_to_hsr: entered promiscuous mode [ 474.116998][T20637] veth1_to_hsr: entered promiscuous mode [ 474.122438][T20637] hsr0: entered promiscuous mode [ 474.128336][T20637] veth1_virt_wifi: entered promiscuous mode [ 474.131054][T20637] veth0_virt_wifi: entered promiscuous mode [ 474.135980][T20637] virt_wifi0: entered promiscuous mode [ 474.153965][T20646] netlink: 'syz.7.4825': attribute type 1 has an invalid length. [ 474.153986][T20646] netlink: 'syz.7.4825': attribute type 1 has an invalid length. [ 474.194897][T20637] macvtap0: entered promiscuous mode [ 474.198154][T20637] macsec0: entered promiscuous mode [ 474.201403][T20637] geneve0: entered promiscuous mode [ 474.205915][T20637] geneve1: entered promiscuous mode [ 474.208032][T20637] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 474.212570][T20637] netdevsim netdevsim9 netdevsim1: entered promiscuous mode [ 474.221564][T20637] netdevsim netdevsim9 netdevsim2: entered promiscuous mode [ 474.231106][T20637] netdevsim netdevsim9 netdevsim3: entered promiscuous mode [ 474.261650][T20637] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 474.264462][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 474.264481][T19520] dvb-usb: error while querying for an remote control event. [ 474.319126][T20637] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode [ 474.320290][T20637] erspan0.2: entered promiscuous mode [ 474.323491][T20597] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 474.324282][T16674] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.324362][T16674] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.324431][T16674] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.324450][T16674] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.337144][ T50] usb 13-1: USB disconnect, device number 9 [ 474.391938][T20650] nvme_rdma: malformed address passed: 1:4420 [ 474.424223][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 474.424252][T19520] dvb-usb: error while querying for an remote control event. [ 474.492941][T20661] syzkaller0: entered promiscuous mode [ 474.492956][T20661] syzkaller0: entered allmulticast mode [ 474.499390][T20661] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 474.584337][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 474.584358][T19520] dvb-usb: error while querying for an remote control event. [ 474.745059][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 474.745080][T19520] dvb-usb: error while querying for an remote control event. [ 474.759045][T20671] netlink: 'syz.9.4832': attribute type 13 has an invalid length. [ 474.904263][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 474.904289][T19520] dvb-usb: error while querying for an remote control event. [ 474.929277][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 474.929291][ T42] audit: type=1400 audit(1792371576.160:22411): avc: denied { write } for pid=20673 comm="syz.7.4834" path="socket:[116194]" dev="sockfs" ino=116194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 474.956673][ T42] audit: type=1400 audit(1792371576.190:22412): avc: denied { read } for pid=20680 comm="syz.9.4836" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 474.980365][T20686] FAULT_INJECTION: forcing a failure. [ 474.980365][T20686] name failslab, interval 1, probability 0, space 0, times 0 [ 474.980390][T20686] CPU: 2 UID: 0 PID: 20686 Comm: syz.4.4838 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.980407][T20686] Tainted: [L]=SOFTLOCKUP [ 474.980412][T20686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 474.980419][T20686] Call Trace: [ 474.980423][T20686] [ 474.980429][T20686] dump_stack_lvl+0x100/0x190 [ 474.980450][T20686] should_fail_ex.cold+0x5/0xa [ 474.980468][T20686] should_failslab+0xc2/0x120 [ 474.980486][T20686] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 474.980501][T20686] ? n_tty_open+0x12b/0x170 [ 474.980537][T20686] ? alloc_inode+0x183/0x250 [ 474.980569][T20686] alloc_inode+0x183/0x250 [ 474.980593][T20686] new_inode+0x22/0x1c0 [ 474.980620][T20686] devpts_pty_new+0xca/0x770 [ 474.980653][T20686] ? __pfx_devpts_pty_new+0x10/0x10 [ 474.980671][T20686] ? ptmx_open+0x1ad/0x360 [ 474.980691][T20686] ptmx_open+0x1d9/0x360 [ 474.980706][T20686] ? __pfx_ptmx_open+0x10/0x10 [ 474.980721][T20686] chrdev_open+0x234/0x6a0 [ 474.980738][T20686] ? __pfx_chrdev_open+0x10/0x10 [ 474.980755][T20686] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 474.980772][T20686] do_dentry_open+0x6ab/0x14d0 [ 474.980787][T20686] ? __pfx_chrdev_open+0x10/0x10 [ 474.980806][T20686] vfs_open+0x82/0x3f0 [ 474.980825][T20686] path_openat+0x1a23/0x2450 [ 474.980844][T20686] ? __pfx_path_openat+0x10/0x10 [ 474.980866][T20686] do_file_open+0x20e/0x430 [ 474.980888][T20686] ? __pfx_do_file_open+0x10/0x10 [ 474.980915][T20686] ? _raw_spin_unlock+0x28/0x50 [ 474.980930][T20686] ? alloc_fd+0x471/0x7a0 [ 474.980952][T20686] do_sys_openat2+0x10f/0x1e0 [ 474.980964][T20686] ? __pfx_do_sys_openat2+0x10/0x10 [ 474.980977][T20686] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 474.981000][T20686] __x64_sys_openat+0x12d/0x210 [ 474.981013][T20686] ? __pfx___x64_sys_openat+0x10/0x10 [ 474.981031][T20686] do_syscall_64+0x123/0x790 [ 474.981050][T20686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.981063][T20686] RIP: 0033:0x7f5fb799e559 [ 474.981075][T20686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.981088][T20686] RSP: 002b:00007f5fb87e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 474.981118][T20686] RAX: ffffffffffffffda RBX: 00007f5fb7c25fa0 RCX: 00007f5fb799e559 [ 474.981127][T20686] RDX: 0000000000008000 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 474.981135][T20686] RBP: 00007f5fb7a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 474.981143][T20686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.981150][T20686] R13: 00007f5fb7c26038 R14: 00007f5fb7c25fa0 R15: 00007ffe540e04f8 [ 474.981168][T20686] [ 475.019356][T20692] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 475.060031][T20695] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 475.083931][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 475.083948][T19520] dvb-usb: error while querying for an remote control event. [ 475.244164][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 475.244184][ T50] dvb-usb: error while querying for an remote control event. [ 475.404826][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 475.404848][ T50] dvb-usb: error while querying for an remote control event. [ 475.564619][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 475.564652][ T50] dvb-usb: error while querying for an remote control event. [ 475.724168][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 475.724189][ T63] dvb-usb: error while querying for an remote control event. [ 475.888204][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 475.888224][ T63] dvb-usb: error while querying for an remote control event. [ 475.924259][ T5732] Bluetooth: hci1: command 0x0405 tx timeout [ 476.044252][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 476.044275][ T63] dvb-usb: error while querying for an remote control event. [ 476.214440][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 476.214461][ T50] dvb-usb: error while querying for an remote control event. [ 476.384171][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 476.384193][ T63] dvb-usb: error while querying for an remote control event. [ 476.544261][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 476.544293][ T50] dvb-usb: error while querying for an remote control event. [ 476.704377][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 476.704409][ T50] dvb-usb: error while querying for an remote control event. [ 476.864283][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 476.864303][ T50] dvb-usb: error while querying for an remote control event. [ 477.024210][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 477.024232][ T50] dvb-usb: error while querying for an remote control event. [ 477.124164][ T5732] Bluetooth: hci3: command 0x0406 tx timeout [ 477.129768][T20681] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 477.184177][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 477.184200][ T50] dvb-usb: error while querying for an remote control event. [ 477.344556][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 477.344586][ T50] dvb-usb: error while querying for an remote control event. [ 477.504306][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 477.504341][ T50] dvb-usb: error while querying for an remote control event. [ 477.676275][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 477.676296][ T50] dvb-usb: error while querying for an remote control event. [ 477.836163][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 477.836184][ T50] dvb-usb: error while querying for an remote control event. [ 477.898478][T20681] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 477.900428][T20681] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 477.901173][T20681] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 477.904575][T20681] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 477.904631][T20681] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 477.915512][T20681] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 477.923678][T20681] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 477.923767][T20681] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 477.926826][T20681] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 477.939211][T20681] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 477.939275][T20681] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 477.940335][T20681] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 477.996992][T20706] netlink: 'syz.4.4844': attribute type 13 has an invalid length. [ 478.004220][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 478.004247][ T50] dvb-usb: error while querying for an remote control event. [ 478.050678][ T42] audit: type=1400 audit(1792371579.280:22413): avc: denied { mounton } for pid=20707 comm="syz.4.4846" path="/proc/892/task" dev="proc" ino=116305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 478.108068][T20680] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 478.134882][ T42] audit: type=1400 audit(1792371579.370:22414): avc: denied { accept } for pid=20713 comm="syz.9.4847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 478.160192][T20719] lo: entered allmulticast mode [ 478.167369][T20719] dvmrp6: entered allmulticast mode [ 478.168452][T20719] dvmrp6: left allmulticast mode [ 478.174503][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 478.174520][ T50] dvb-usb: error while querying for an remote control event. [ 478.195609][ T851] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 478.220475][T20723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4848'. [ 478.220495][T20723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4848'. [ 478.221199][T20723] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4848'. [ 478.255516][T20717] lo: left allmulticast mode [ 478.305141][T20728] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 478.306994][T20728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=20728 comm=syz.4.4852 [ 478.334314][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 478.334334][ T50] dvb-usb: error while querying for an remote control event. [ 478.373965][T20733] netlink: 'syz.9.4854': attribute type 13 has an invalid length. [ 478.402046][T20730] FAULT_INJECTION: forcing a failure. [ 478.402046][T20730] name failslab, interval 1, probability 0, space 0, times 0 [ 478.402082][T20730] CPU: 2 UID: 0 PID: 20730 Comm: syz.8.4853 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.402111][T20730] Tainted: [L]=SOFTLOCKUP [ 478.402119][T20730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 478.402132][T20730] Call Trace: [ 478.402141][T20730] [ 478.402149][T20730] dump_stack_lvl+0x100/0x190 [ 478.402183][T20730] should_fail_ex.cold+0x5/0xa [ 478.402215][T20730] should_failslab+0xc2/0x120 [ 478.402238][T20730] __kmalloc_node_noprof+0xff/0x880 [ 478.402255][T20730] ? __get_vm_area_node+0x1ff/0x350 [ 478.402272][T20730] ? __get_vm_area_node+0x22b/0x350 [ 478.402288][T20730] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 478.402309][T20730] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 478.402335][T20730] ? n_tty_open+0x1a/0x170 [ 478.402351][T20730] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 478.402369][T20730] ? do_raw_spin_lock+0x128/0x260 [ 478.402386][T20730] ? find_held_lock+0x2b/0x80 [ 478.402403][T20730] ? n_tty_open+0x12b/0x170 [ 478.402415][T20730] ? n_tty_open+0x12b/0x170 [ 478.402429][T20730] ? n_tty_open+0x1a/0x170 [ 478.402441][T20730] __vmalloc_node_noprof+0xad/0xf0 [ 478.402459][T20730] ? n_tty_open+0x1a/0x170 [ 478.402473][T20730] ? __pfx_n_tty_open+0x10/0x10 [ 478.402485][T20730] n_tty_open+0x1a/0x170 [ 478.402498][T20730] tty_ldisc_open+0xa2/0x120 [ 478.402533][T20730] tty_ldisc_setup+0x87/0xf0 [ 478.402551][T20730] tty_init_dev.part.0+0x1b5/0x470 [ 478.402566][T20730] tty_init_dev+0x60/0x80 [ 478.402579][T20730] ? __pfx_ptmx_open+0x10/0x10 [ 478.402595][T20730] ptmx_open+0x128/0x360 [ 478.402611][T20730] ? __pfx_ptmx_open+0x10/0x10 [ 478.402627][T20730] chrdev_open+0x234/0x6a0 [ 478.402645][T20730] ? __pfx_chrdev_open+0x10/0x10 [ 478.402663][T20730] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 478.402680][T20730] do_dentry_open+0x6ab/0x14d0 [ 478.402694][T20730] ? __pfx_chrdev_open+0x10/0x10 [ 478.402714][T20730] vfs_open+0x82/0x3f0 [ 478.402736][T20730] path_openat+0x1a23/0x2450 [ 478.402764][T20730] ? __pfx_path_openat+0x10/0x10 [ 478.402797][T20730] do_file_open+0x20e/0x430 [ 478.402823][T20730] ? __pfx_do_file_open+0x10/0x10 [ 478.402865][T20730] ? _raw_spin_unlock+0x28/0x50 [ 478.402890][T20730] ? alloc_fd+0x471/0x7a0 [ 478.402924][T20730] do_sys_openat2+0x10f/0x1e0 [ 478.402945][T20730] ? __pfx_do_sys_openat2+0x10/0x10 [ 478.402964][T20730] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 478.403000][T20730] __x64_sys_openat+0x12d/0x210 [ 478.403019][T20730] ? __pfx___x64_sys_openat+0x10/0x10 [ 478.403070][T20730] do_syscall_64+0x123/0x790 [ 478.403102][T20730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.403123][T20730] RIP: 0033:0x7f8f6d19e559 [ 478.403142][T20730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.403162][T20730] RSP: 002b:00007f8f6b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 478.403184][T20730] RAX: ffffffffffffffda RBX: 00007f8f6d425fa0 RCX: 00007f8f6d19e559 [ 478.403199][T20730] RDX: 0000000000008000 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 478.403211][T20730] RBP: 00007f8f6d235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 478.403223][T20730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.403235][T20730] R13: 00007f8f6d426038 R14: 00007f8f6d425fa0 R15: 00007fff568a2bd8 [ 478.403264][T20730] [ 478.404534][T20730] syz.8.4853: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 478.404663][T20730] CPU: 3 UID: 0 PID: 20730 Comm: syz.8.4853 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.404681][T20730] Tainted: [L]=SOFTLOCKUP [ 478.404685][T20730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 478.404693][T20730] Call Trace: [ 478.404698][T20730] [ 478.404703][T20730] dump_stack_lvl+0x100/0x190 [ 478.404724][T20730] warn_alloc.cold+0x9e/0xb2 [ 478.404754][T20730] ? __pfx_warn_alloc+0x10/0x10 [ 478.404768][T20730] ? dump_stack_lvl+0x17c/0x190 [ 478.404786][T20730] ? rcu_is_watching+0x13/0xc0 [ 478.404817][T20730] ? __kasan_kmalloc+0x8a/0xb0 [ 478.404841][T20730] ? __kmalloc_node_noprof+0x360/0x880 [ 478.404866][T20730] ? __get_vm_area_node+0x1ff/0x350 [ 478.404890][T20730] ? __get_vm_area_node+0x22b/0x350 [ 478.404912][T20730] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 478.404937][T20730] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 478.404961][T20730] ? n_tty_open+0x1a/0x170 [ 478.404979][T20730] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 478.404997][T20730] ? do_raw_spin_lock+0x128/0x260 [ 478.405015][T20730] ? find_held_lock+0x2b/0x80 [ 478.405033][T20730] ? n_tty_open+0x12b/0x170 [ 478.405044][T20730] ? n_tty_open+0x12b/0x170 [ 478.405058][T20730] ? n_tty_open+0x1a/0x170 [ 478.405069][T20730] __vmalloc_node_noprof+0xad/0xf0 [ 478.405088][T20730] ? n_tty_open+0x1a/0x170 [ 478.405102][T20730] ? __pfx_n_tty_open+0x10/0x10 [ 478.405115][T20730] n_tty_open+0x1a/0x170 [ 478.405128][T20730] tty_ldisc_open+0xa2/0x120 [ 478.405144][T20730] tty_ldisc_setup+0x87/0xf0 [ 478.405161][T20730] tty_init_dev.part.0+0x1b5/0x470 [ 478.405174][T20730] tty_init_dev+0x60/0x80 [ 478.405185][T20730] ? __pfx_ptmx_open+0x10/0x10 [ 478.405199][T20730] ptmx_open+0x128/0x360 [ 478.405214][T20730] ? __pfx_ptmx_open+0x10/0x10 [ 478.405228][T20730] chrdev_open+0x234/0x6a0 [ 478.405245][T20730] ? __pfx_chrdev_open+0x10/0x10 [ 478.405262][T20730] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 478.405279][T20730] do_dentry_open+0x6ab/0x14d0 [ 478.405293][T20730] ? __pfx_chrdev_open+0x10/0x10 [ 478.405312][T20730] vfs_open+0x82/0x3f0 [ 478.405331][T20730] path_openat+0x1a23/0x2450 [ 478.405350][T20730] ? __pfx_path_openat+0x10/0x10 [ 478.405371][T20730] do_file_open+0x20e/0x430 [ 478.405389][T20730] ? __pfx_do_file_open+0x10/0x10 [ 478.405416][T20730] ? _raw_spin_unlock+0x28/0x50 [ 478.405433][T20730] ? alloc_fd+0x471/0x7a0 [ 478.405457][T20730] do_sys_openat2+0x10f/0x1e0 [ 478.405468][T20730] ? __pfx_do_sys_openat2+0x10/0x10 [ 478.405481][T20730] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 478.405504][T20730] __x64_sys_openat+0x12d/0x210 [ 478.405516][T20730] ? __pfx___x64_sys_openat+0x10/0x10 [ 478.405535][T20730] do_syscall_64+0x123/0x790 [ 478.405553][T20730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.405565][T20730] RIP: 0033:0x7f8f6d19e559 [ 478.405576][T20730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.405600][T20730] RSP: 002b:00007f8f6b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 478.405613][T20730] RAX: ffffffffffffffda RBX: 00007f8f6d425fa0 RCX: 00007f8f6d19e559 [ 478.405622][T20730] RDX: 0000000000008000 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 478.405630][T20730] RBP: 00007f8f6d235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 478.405638][T20730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.405646][T20730] R13: 00007f8f6d426038 R14: 00007f8f6d425fa0 R15: 00007fff568a2bd8 [ 478.405664][T20730] [ 478.405670][T20730] Mem-Info: [ 478.405675][T20730] active_anon:11565 inactive_anon:914 isolated_anon:0 [ 478.405675][T20730] active_file:3622 inactive_file:14888 isolated_file:0 [ 478.405675][T20730] unevictable:1000 dirty:468 writeback:0 [ 478.405675][T20730] slab_reclaimable:17092 slab_unreclaimable:98471 [ 478.405675][T20730] mapped:29480 shmem:4396 pagetables:3989 [ 478.405675][T20730] sec_pagetables:314 bounce:0 [ 478.405675][T20730] kernel_misc_reclaimable:0 [ 478.405675][T20730] free:392609 free_pcp:12045 free_cma:0 [ 478.405703][T20730] Node 0 active_anon:37700kB inactive_anon:3656kB active_file:14488kB inactive_file:59408kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:76948kB dirty:1868kB writeback:0kB shmem:15576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18688kB pagetables:5976kB sec_pagetables:1248kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 478.405735][T20730] Node 1 active_anon:8560kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:40972kB dirty:4kB writeback:0kB shmem:2008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:320kB pagetables:9980kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 478.405765][T20730] Node 0 DMA free:14212kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:88kB local_pcp:0kB free_cma:0kB [ 478.405798][T20730] lowmem_reserve[]: 0 1204 1204 1204 1204 [ 478.405819][T20730] Node 0 DMA32 free:179152kB boost:0kB min:27508kB low:34384kB high:41260kB reserved_highatomic:0kB free_highatomic:0kB active_anon:37696kB inactive_anon:3656kB active_file:14488kB inactive_file:59408kB unevictable:2000kB writepending:1868kB zspages:0kB present:2080628kB managed:1233664kB mlocked:0kB bounce:0kB free_pcp:31624kB local_pcp:11440kB free_cma:0kB [ 478.405853][T20730] lowmem_reserve[]: 0 0 0 0 0 [ 478.405872][T20730] Node 1 Normal free:1377072kB boost:0kB min:39732kB low:49664kB high:59596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8560kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:2000kB writepending:4kB zspages:1484kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:16468kB local_pcp:0kB free_cma:0kB [ 478.405903][T20730] lowmem_reserve[]: 0 0 0 0 0 [ 478.405921][T20730] Node 0 DMA: 48*4kB (UM) 45*8kB (UM) 42*16kB (UM) 34*32kB (UM) 14*64kB (UM) 8*128kB (UM) 5*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 0*4096kB = 14216kB [ 478.406041][T20730] Node 0 DMA32: 785*4kB (ME) 1382*8kB (UME) 485*16kB (UME) 1115*32kB (UME) 436*64kB (UM) 163*128kB (UM) 82*256kB (UM) 45*512kB (UME) 14*1024kB (ME) 7*2048kB (UM) 0*4096kB = 179108kB [ 478.406165][T20730] Node 1 Normal: 592*4kB (UME) 508*8kB (UME) 461*16kB (UME) 440*32kB (UME) 359*64kB (UME) 337*128kB (UME) 316*256kB (UME) 288*512kB (UME) 226*1024kB (UM) 12*2048kB (UME) 195*4096kB (UM) = 1377072kB [ 478.406260][T20730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 478.406270][T20730] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 478.406279][T20730] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 478.406289][T20730] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 478.406298][T20730] 22905 total pagecache pages [ 478.406302][T20730] 3 pages in swap cache [ 478.406306][T20730] Free swap = 122408kB [ 478.406311][T20730] Total swap = 124996kB [ 478.406315][T20730] 1048443 pages RAM [ 478.406319][T20730] 0 pages HighMem/MovableOnly [ 478.406323][T20730] 290717 pages reserved [ 478.406327][T20730] 0 pages cma reserved [ 478.411290][T20730] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 478.504834][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 478.504854][ T50] dvb-usb: error while querying for an remote control event. [ 478.608573][T20744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4859'. [ 478.623867][T20730] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 478.674146][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 478.674174][ T50] dvb-usb: error while querying for an remote control event. [ 478.834149][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 478.834169][ T50] dvb-usb: error while querying for an remote control event. [ 478.981095][T20766] netlink: 176 bytes leftover after parsing attributes in process `syz.8.4864'. [ 478.995619][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 478.995649][ T50] dvb-usb: error while querying for an remote control event. [ 479.020781][T20770] netlink: 'syz.4.4863': attribute type 13 has an invalid length. [ 479.150216][ T5732] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 479.157562][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 479.157590][ T50] dvb-usb: error while querying for an remote control event. [ 479.199976][ T42] audit: type=1400 audit(1792371580.430:22415): avc: denied { setopt } for pid=20778 comm="syz.9.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 479.201916][T20780] binder: 20778:20780 ioctl c0306201 200000000180 returned -14 [ 479.205692][ T5732] Bluetooth: hci3: command 0x0406 tx timeout [ 479.306887][ T5732] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 479.324472][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 479.324502][ T50] dvb-usb: error while querying for an remote control event. [ 479.453167][T20791] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 479.494239][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 479.494269][ T50] dvb-usb: error while querying for an remote control event. [ 479.636689][T20800] netlink: 'syz.9.4874': attribute type 13 has an invalid length. [ 479.654166][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 479.654187][ T50] dvb-usb: error while querying for an remote control event. [ 479.673857][T20802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.675172][T20802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.824576][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 479.824598][ T63] dvb-usb: error while querying for an remote control event. [ 479.887336][ T42] audit: type=1400 audit(1792371581.120:22416): avc: denied { lock } for pid=20808 comm="syz.4.4878" path="socket:[115646]" dev="sockfs" ino=115646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 479.924164][ T5732] Bluetooth: hci4: command 0x0c1a tx timeout [ 479.965776][ T5732] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 479.994293][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 479.994325][ T63] dvb-usb: error while querying for an remote control event. [ 480.008948][ T5732] Bluetooth: hci1: command 0x0405 tx timeout [ 480.154268][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 480.154304][ T50] dvb-usb: error while querying for an remote control event. [ 480.326327][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 480.326361][ T50] dvb-usb: error while querying for an remote control event. [ 480.484413][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 480.484434][ T50] dvb-usb: error while querying for an remote control event. [ 480.497756][T20828] netlink: 'syz.4.4883': attribute type 13 has an invalid length. [ 480.530398][T20818] Bluetooth: (null): Too short H5 packet [ 480.569721][T20823] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 480.645138][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 480.645194][ T50] dvb-usb: error while querying for an remote control event. [ 480.721868][ T42] audit: type=1400 audit(1792371581.950:22417): avc: denied { open } for pid=20837 comm="syz.4.4886" path="/dev/ptyqc" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 480.723640][ T42] audit: type=1400 audit(1792371581.950:22418): avc: denied { ioctl } for pid=20837 comm="syz.4.4886" path="/dev/ptyqc" dev="devtmpfs" ino=139 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 480.775870][T20838] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 480.775899][T20838] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 480.781183][T20838] vhci_hcd vhci_hcd.0: Device attached [ 480.808810][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 480.808842][ T63] dvb-usb: error while querying for an remote control event. [ 480.907666][T20853] ip_tables: iptables: counters copy to user failed while replacing table [ 480.964840][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 480.964862][ T63] dvb-usb: error while querying for an remote control event. [ 481.014153][ T50] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 481.024977][T19520] usb 9-1: new low-speed USB device number 38 using dummy_hcd [ 481.066437][T20861] netlink: 'syz.7.4894': attribute type 13 has an invalid length. [ 481.124342][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 481.124368][ T63] dvb-usb: error while querying for an remote control event. [ 481.174763][T19520] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 481.175238][T19520] usb 9-1: config 0 has no interfaces? [ 481.175264][T19520] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.176274][ T42] audit: type=1400 audit(1792371582.410:22419): avc: denied { append } for pid=20867 comm="syz.9.4897" name="uprobe_events" dev="tracefs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 481.177254][T19520] usb 9-1: config 0 descriptor?? [ 481.205968][T20868] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 481.284311][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 481.284341][T19520] dvb-usb: error while querying for an remote control event. [ 481.294406][ T5732] Bluetooth: hci3: command 0x0406 tx timeout [ 481.315992][T20877] syzkaller0: entered promiscuous mode [ 481.316010][T20877] syzkaller0: entered allmulticast mode [ 481.385510][T20844] vhci_hcd: connection closed [ 481.385911][T19520] usb 9-1: USB disconnect, device number 38 [ 481.396465][ T5580] vhci_hcd vhci_hcd.4: stop threads [ 481.397997][ T5580] vhci_hcd vhci_hcd.4: release socket [ 481.402962][ T5580] vhci_hcd vhci_hcd.4: disconnect device [ 481.452751][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 481.452781][ T63] dvb-usb: error while querying for an remote control event. [ 481.456498][ T50] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 481.581732][T20888] netlink: 'syz.7.4903': attribute type 2 has an invalid length. [ 481.581789][T20888] netlink: 'syz.7.4903': attribute type 2 has an invalid length. [ 481.592620][T20888] cgroup: Need name or subsystem set [ 481.609344][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 481.609374][T19520] dvb-usb: error while querying for an remote control event. [ 481.766160][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 481.766190][T19520] dvb-usb: error while querying for an remote control event. [ 481.925451][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 481.925477][ T63] dvb-usb: error while querying for an remote control event. [ 482.091019][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 482.091048][ T63] dvb-usb: error while querying for an remote control event. [ 482.094332][ T5732] Bluetooth: hci1: command 0x0405 tx timeout [ 482.247704][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 482.247725][T19520] dvb-usb: error while querying for an remote control event. [ 482.407933][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 482.407954][ T50] dvb-usb: error while querying for an remote control event. [ 482.566738][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 482.566759][T19520] dvb-usb: error while querying for an remote control event. [ 482.727854][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 482.727874][ T50] dvb-usb: error while querying for an remote control event. [ 482.886387][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 482.886416][ T50] dvb-usb: error while querying for an remote control event. [ 483.044947][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 483.044980][ T50] dvb-usb: error while querying for an remote control event. [ 483.204701][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 483.204731][ T50] dvb-usb: error while querying for an remote control event. [ 483.368174][ T5732] Bluetooth: hci3: command 0x0406 tx timeout [ 483.368221][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 483.368235][ T50] dvb-usb: error while querying for an remote control event. [ 483.432194][T20887] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4903'. [ 483.489505][T20904] netlink: 'syz.7.4906': attribute type 13 has an invalid length. [ 483.524390][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 483.524417][ T50] dvb-usb: error while querying for an remote control event. [ 483.675132][T20919] syzkaller0: left promiscuous mode [ 483.675196][T20919] syzkaller0: left allmulticast mode [ 483.681840][T20921] tc_dump_action: action bad kind [ 483.684307][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 483.684325][T19520] dvb-usb: error while querying for an remote control event. [ 483.688689][T20927] tc_dump_action: action bad kind [ 483.697502][ T42] audit: type=1400 audit(1792371584.930:22420): avc: denied { cmd } for pid=20923 comm="iou-wrk-20924" path="socket:[120891]" dev="sockfs" ino=120891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 483.830290][T20929] ------------[ cut here ]------------ [ 483.830301][T20929] Device '0-0002' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst. [ 483.830310][T20929] WARNING: drivers/base/core.c:2642 at device_release+0x1da/0x270, CPU#3: syz.7.4915/20929 [ 483.842353][T20929] Modules linked in: [ 483.844370][T20929] CPU: 3 UID: 0 PID: 20929 Comm: syz.7.4915 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.848949][T20929] Tainted: [L]=SOFTLOCKUP [ 483.850815][T20929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 483.855199][T20929] RIP: 0010:device_release+0x1dd/0x270 [ 483.857567][T20929] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 3d 3f a0 fb 48 8d 3d a6 76 e5 0b 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 24 3f a0 fb 48 89 da 48 b8 00 00 [ 483.865436][T20929] RSP: 0018:ffffc90021147a40 EFLAGS: 00010283 [ 483.868027][T20929] RAX: 0000000000004291 RBX: ffff88802c53b020 RCX: ffffc90030d04000 [ 483.871185][T20929] RDX: 0000000000080000 RSI: ffff888023962e20 RDI: ffffffff92518f60 [ 483.872523][ T42] audit: type=1326 audit(1792371585.100:22421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20932 comm="syz.4.4917" exe="/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f5fb799e559 code=0x0 [ 483.882958][T20929] RBP: ffff888023962e20 R08: 0000000000000001 R09: 0000000000000000 [ 483.885649][T20929] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802d9d4000 [ 483.886015][ T42] audit: type=1400 audit(1792371585.120:22422): avc: denied { map } for pid=20923 comm="syz.7.4915" path="pipe:[119223]" dev="pipefs" ino=119223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 483.897948][T20929] R13: dffffc0000000000 R14: ffff888023962e20 R15: 0000000000000000 [ 483.901225][T20929] FS: 00007fbe5422c6c0(0000) GS:ffff8880d4c46000(0000) knlGS:0000000000000000 [ 483.905284][T20929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 483.908137][T20929] CR2: 000000110c34e77b CR3: 0000000062184000 CR4: 0000000000352ef0 [ 483.910792][T20929] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000003 [ 483.913312][T20929] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 483.915886][T20929] Call Trace: [ 483.916960][T20929] [ 483.917885][T20929] kobject_put+0x1f7/0x640 [ 483.919305][T20929] device_unregister+0x2f/0xe0 [ 483.920815][T20929] i2c_unregister_device+0xf5/0x270 [ 483.922505][T20929] i2c_deregister_clients+0x255/0x460 [ 483.924350][T20929] i2c_del_adapter+0x13a/0x2e0 [ 483.925918][T20929] i801_remove+0xa4/0x3d0 [ 483.927314][T20929] pci_device_remove+0xb2/0x1d0 [ 483.928930][T20929] ? __pfx_pci_device_remove+0x10/0x10 [ 483.930626][T20929] device_remove+0xcb/0x180 [ 483.932099][T20929] device_release_driver_internal+0x44e/0x620 [ 483.934119][T20929] unbind_store+0xf8/0x110 [ 483.935541][T20929] ? __pfx_unbind_store+0x10/0x10 [ 483.937145][T20929] drv_attr_store+0x74/0xb0 [ 483.938623][T20929] ? __pfx_drv_attr_store+0x10/0x10 [ 483.940322][T20929] sysfs_kf_write+0xf2/0x150 [ 483.941825][T20929] kernfs_fop_write_iter+0x3e0/0x5f0 [ 483.943804][T20929] ? __pfx_sysfs_kf_write+0x10/0x10 [ 483.946410][T20929] vfs_write+0x6af/0x1050 [ 483.948210][T20929] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 483.950622][T20929] ? __pfx_vfs_write+0x10/0x10 [ 483.952369][T20929] ? find_held_lock+0x2b/0x80 [ 483.954153][T20929] ksys_write+0x12a/0x250 [ 483.956067][T20929] ? __pfx_ksys_write+0x10/0x10 [ 483.958091][T20929] do_syscall_64+0x123/0x790 [ 483.960025][T20929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.962487][T20929] RIP: 0033:0x7fbe5339e559 [ 483.964556][T20929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.971345][T20929] RSP: 002b:00007fbe5422c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 483.973868][T20929] RAX: ffffffffffffffda RBX: 00007fbe53626090 RCX: 00007fbe5339e559 [ 483.976533][T20929] RDX: 000000000000000c RSI: 00002000000021c0 RDI: 0000000000000013 [ 483.979092][T20929] RBP: 00007fbe53435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 483.981593][T20929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.984295][T20929] R13: 00007fbe53626128 R14: 00007fbe53626090 R15: 00007ffdc03fc678 [ 483.986781][T20929] [ 483.987746][T20929] irq event stamp: 6001 [ 483.989061][T20929] hardirqs last enabled at (6005): [] __nbcon_atomic_flush_pending_con+0x293/0x440 [ 483.992413][T20929] hardirqs last disabled at (6008): [] __nbcon_atomic_flush_pending_con+0x284/0x440 [ 483.995857][T20929] softirqs last enabled at (6050): [] __irq_exit_rcu+0x16a/0x210 [ 483.998892][T20929] softirqs last disabled at (6015): [] __irq_exit_rcu+0x16a/0x210 [ 484.001950][T20929] ---[ end trace 0000000000000000 ]--- [ 484.005715][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 484.005732][T19520] dvb-usb: error while querying for an remote control event. [ 484.166977][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 484.167009][T19520] dvb-usb: error while querying for an remote control event. [ 484.169908][ T5732] Bluetooth: hci1: command 0x0405 tx timeout [ 484.326913][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 484.326936][ T50] dvb-usb: error while querying for an remote control event. [ 484.484189][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 484.484212][ T50] dvb-usb: error while querying for an remote control event. [ 484.644911][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 484.644943][ T50] dvb-usb: error while querying for an remote control event. [ 484.814174][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 484.814206][ T50] dvb-usb: error while querying for an remote control event. [ 484.974984][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 484.975004][ T50] dvb-usb: error while querying for an remote control event. [ 485.136277][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 485.136298][ T50] dvb-usb: error while querying for an remote control event. [ 485.294333][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 485.294358][ T63] dvb-usb: error while querying for an remote control event. [ 485.454269][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 485.454300][ T50] dvb-usb: error while querying for an remote control event. [ 485.614201][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 485.614232][ T50] dvb-usb: error while querying for an remote control event. [ 485.774394][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 485.774426][ T50] dvb-usb: error while querying for an remote control event. [ 485.934199][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 485.934221][ T50] dvb-usb: error while querying for an remote control event. [ 486.094144][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 486.094166][ T50] dvb-usb: error while querying for an remote control event. [ 486.264215][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 486.264236][ T50] dvb-usb: error while querying for an remote control event. [ 486.424175][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 486.424198][ T50] dvb-usb: error while querying for an remote control event. [ 486.584251][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 486.584284][ T50] dvb-usb: error while querying for an remote control event. [ 486.744187][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 486.744219][ T50] dvb-usb: error while querying for an remote control event. [ 486.904290][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 486.904322][ T50] dvb-usb: error while querying for an remote control event. [ 487.064196][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 487.064227][ T50] dvb-usb: error while querying for an remote control event. [ 487.224205][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 487.224236][ T50] dvb-usb: error while querying for an remote control event. [ 487.384275][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 487.384309][ T50] dvb-usb: error while querying for an remote control event. [ 487.554844][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 487.554866][ T50] dvb-usb: error while querying for an remote control event. [ 487.714251][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 487.714283][ T50] dvb-usb: error while querying for an remote control event. [ 487.884212][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 487.884235][ T50] dvb-usb: error while querying for an remote control event. [ 488.054132][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 488.054154][ T50] dvb-usb: error while querying for an remote control event. [ 488.214213][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 488.214235][ T50] dvb-usb: error while querying for an remote control event. [ 488.374592][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 488.374614][ T50] dvb-usb: error while querying for an remote control event. [ 488.544205][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 488.544227][ T50] dvb-usb: error while querying for an remote control event. [ 488.704169][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 488.704191][ T50] dvb-usb: error while querying for an remote control event. [ 488.874370][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 488.874415][ T50] dvb-usb: error while querying for an remote control event. [ 489.034769][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 489.034791][ T50] dvb-usb: error while querying for an remote control event. [ 489.194270][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 489.194302][T19520] dvb-usb: error while querying for an remote control event. [ 489.364594][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 489.364616][T19520] dvb-usb: error while querying for an remote control event. [ 489.524117][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 489.524138][T19520] dvb-usb: error while querying for an remote control event. [ 489.694487][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 489.694510][T19520] dvb-usb: error while querying for an remote control event. [ 489.854524][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 489.854559][T19520] dvb-usb: error while querying for an remote control event. [ 490.014372][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 490.014414][T19520] dvb-usb: error while querying for an remote control event. [ 490.184176][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 490.184209][ T50] dvb-usb: error while querying for an remote control event. [ 490.346250][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 490.346272][ T50] dvb-usb: error while querying for an remote control event. [ 490.504423][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 490.504451][ T50] dvb-usb: error while querying for an remote control event. [ 490.668759][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 490.668791][ T50] dvb-usb: error while querying for an remote control event. [ 490.824264][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 490.824287][T19520] dvb-usb: error while querying for an remote control event. [ 490.984231][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 490.984254][ T50] dvb-usb: error while querying for an remote control event. [ 491.154761][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 491.154793][ T50] dvb-usb: error while querying for an remote control event. [ 491.161759][ T5580] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.296636][ T5580] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.324736][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 491.324758][ T50] dvb-usb: error while querying for an remote control event. [ 491.395683][ T5580] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.484475][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 491.484509][ T50] dvb-usb: error while querying for an remote control event. [ 491.504434][ T5580] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.644154][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 491.644187][ T50] dvb-usb: error while querying for an remote control event. [ 491.689352][ T5580] bridge_slave_1: left allmulticast mode [ 491.689379][ T5580] bridge_slave_1: left promiscuous mode [ 491.689507][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.693351][ T5580] bridge_slave_0: left allmulticast mode [ 491.693367][ T5580] bridge_slave_0: left promiscuous mode [ 491.693477][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.801253][ T5580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.804452][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 491.804470][ T63] dvb-usb: error while querying for an remote control event. [ 491.826498][ T5580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.865609][ T5580] bond0 (unregistering): Released all slaves [ 491.976436][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 491.976458][ T63] dvb-usb: error while querying for an remote control event. [ 492.144148][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 492.144168][ T63] dvb-usb: error while querying for an remote control event. [ 492.306350][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 492.306370][ T63] dvb-usb: error while querying for an remote control event. [ 492.464564][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 492.464585][ T50] dvb-usb: error while querying for an remote control event. [ 492.483359][ T5580] hsr_slave_0: left promiscuous mode [ 492.489053][ T5580] hsr_slave_1: left promiscuous mode [ 492.489810][ T5580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.489827][ T5580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.490832][ T5580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.490848][ T5580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.508396][ T5580] veth1_macvtap: left promiscuous mode [ 492.508586][ T5580] veth0_macvtap: left promiscuous mode [ 492.508685][ T5580] veth1_vlan: left promiscuous mode [ 492.508740][ T5580] veth0_vlan: left promiscuous mode [ 492.634878][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 492.634925][ T63] dvb-usb: error while querying for an remote control event. [ 492.691039][ T5580] team0 (unregistering): Port device team_slave_1 removed [ 492.705905][ T5580] team0 (unregistering): Port device team_slave_0 removed [ 492.794262][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 492.794292][ T63] dvb-usb: error while querying for an remote control event. [ 492.954134][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 492.954156][ T50] dvb-usb: error while querying for an remote control event. [ 493.067852][ T5580] IPVS: stop unused estimator thread 0... [ 493.125099][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 493.125119][ T63] dvb-usb: error while querying for an remote control event. [ 493.284313][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 493.284342][ T63] dvb-usb: error while querying for an remote control event. [ 493.444307][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 493.444327][ T63] dvb-usb: error while querying for an remote control event. [ 493.604659][T19520] dvb-usb: bulk message failed: -22 (1/0) [ 493.604680][T19520] dvb-usb: error while querying for an remote control event. [ 493.764217][ T63] dvb-usb: bulk message failed: -22 (1/0) [ 493.764250][ T63] dvb-usb: error while querying for an remote control event.