last executing test programs:

5.211832991s ago: executing program 3 (id=484):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = inotify_init1(0x80000)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x40)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb) (fail_nth: 9)

5.04171794s ago: executing program 3 (id=485):
openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCGPTPEER(r3, 0x5441, 0xb3d)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x6e60, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000380))

4.972241737s ago: executing program 3 (id=486):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x28, r3, 0x7, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}]}, 0x28}}, 0x4000004)
r5 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000780)=ANY=[], 0x100)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"})
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.853049384s ago: executing program 3 (id=489):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20)
write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x3f, 0x0, 0x0, @tick, {}, {}, @result={0x2, 0x1}}], 0x1c)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfe, {}, {}, @raw32}], 0xffc8)
syz_open_dev$vim2m(0x0, 0x10000000000007f, 0x2)
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d)
ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000040)={0x2, 0x4})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc4b13b6eaa22235f, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f0000000240)={0x40, 0x30, 0x53, {0x53, 0x2, "59832ef5b3657551f360e72fcec137ccf04709c0c04a3e7694457e514608722b75fc6813916d11f3ec9aaf142c54f31640b10e47f1866de6c2eaf9a255a8008029c4ff9108421278003257abc31a6ee9d5"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f0000000600)={0x34, &(0x7f0000000480)={0x0, 0x16, 0x7, "de02363c7f0c3f"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2e}, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000580)={0x40, 0xa0, 0x4, 0x3}, &(0x7f00000005c0)={0xc0, 0xa2, 0x2f, "21a9c3ca9db9cde4f13699405dbbf1edd0d1cdbb1765e290bed089bc5fd7995a321d43ae49cae7e3c155a21f71d814"}})
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0xffffffffffffffff, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x9, 0x6, 0x101, 0x70bd28, 0x25dfdbfc, {0x7}, [@typed={0x8, 0x3d, 0x0, 0x0, @pid=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x20)
getdents64(r3, &(0x7f00000000c0)=""/55, 0x37)
getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002)
syz_open_dev$vbi(0x0, 0x3, 0x2)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x7}}, 0xe8)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c)

4.292288255s ago: executing program 3 (id=493):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10)

4.050509838s ago: executing program 3 (id=498):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040))
sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0)

4.004679462s ago: executing program 32 (id=498):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040))
sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0)

2.011450716s ago: executing program 1 (id=526):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180))

1.83250169s ago: executing program 1 (id=529):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x400, 0x270bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x11, 0xffff}, {0x8, 0x8}, {0xfff1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20049010}, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c)
unshare(0x22020400)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10)
bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$poke(0x5, r4, &(0x7f0000000200), 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

1.631798027s ago: executing program 0 (id=530):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x500)

1.631544457s ago: executing program 1 (id=531):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x5, 0xe, 0x2, 0x0, 0xfffffdd2, 0x6, 0x9, 0x3, 0x5, 0x12, 0xa, 0x5, 0x0, 0xf21, 0x8, 0x5, 0x6, 0xc, 0x4, '\x00', 0xa, 0x20000000001})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"})
r4 = syz_open_pts(r3, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80600, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f0000000140)={0xbc, 0x0, 0x3})
r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x830, 0x5}}], 0x20})
syz_kvm_add_vcpu$x86(r7, &(0x7f00000006c0)={0x0, &(0x7f0000000480)=[@set_irq_handler={0xc8, 0x20, {0xa2, 0x1}}, @wrmsr={0x65, 0x20, {0xbea, 0x5}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host32=0x4c00, 0x4, 0x3, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x44d, 0x10c, 0x5, 0x894}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro32=0x440a, 0x7, 0x200000, 0xdcdf}}, @nested_amd_stgi={0x17e, 0x10}, @uexit={0x0, 0x18, 0x5}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x43c, 0x461, 0xffc, 0x9}}, @nested_amd_stgi={0x17e, 0x10}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0x27b}}, @in_dx={0x69, 0x20, {0x405e, 0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0xb7, 0x3, 0x0, 0x3}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x19a}}], 0x218})
nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f0000000140))
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0))

1.490016404s ago: executing program 0 (id=532):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, &(0x7f0000000080)="0fba2700f48a4e2e3e36a7ba410066edbaf80c66b856d1ca8d66efbafc0cb80b00ef64f20f78dc0b400fc7b68d49b800008ee0baf80c66b838cc9f8766efbafc0c66b8b8ca000066ef", 0x49}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x5392, &(0x7f0000000000)={0xb, 0x3, 0x8, 0x8})
r5 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0xc0b41)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0xf8, @scatter={0x3, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/222, 0xde}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000400)=""/37, 0x25}]}, &(0x7f0000000440)="153606ee522b", 0x0, 0x3, 0x0, 0x3, 0x0})
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_buf(r7, 0x29, 0x1b, &(0x7f0000000040)="c14d49c500ffffffffffffffff1f2be82db1af0000000000", 0x18)
sendmmsg$inet6(r7, &(0x7f0000004400)=[{{&(0x7f0000000540)={0xa, 0x4e1f, 0x2, @mcast2, 0xd1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="d5", 0x1}], 0x1, 0x0, 0x14}}], 0x1, 0x20000800)
dup2(r7, r6)
listen(r6, 0x5)
accept(r6, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000200)=0x3, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="0400000000", @ANYRES32, @ANYBLOB="4e2d358a6f7aa690494744714509ed23279c382c20366aa7869ddd3d0ff05884e8f6db736187a23a79872c112d00b5fca11fd4d4d44008e2002ec13e8cc519a70ae4e5a113861b032ec9d94a748ff1bafa3bfc7230ce7a89426f3c0d77c3e57f6a7afd34625430fd22157ecb1ed644c889c224514aab7e0c8a582c8054e2bb7ef2c3fb52cf1ce54272c549b1bec58e53adf43dc1e93cce39e7c4684b275e301821291b6afb9fa20b42aec2770047d218fa51"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4)
write(r8, &(0x7f0000000040)="a9", 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x80001, 0x0)

1.171988117s ago: executing program 2 (id=537):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000035c0), 0x0, 0x884)

1.171331356s ago: executing program 2 (id=539):
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000180)=0x80177, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5)
sendto$packet(r1, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14)

1.021701921s ago: executing program 2 (id=541):
openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCGPTPEER(r3, 0x5441, 0xb3d)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x6e60, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000380))

1.021210591s ago: executing program 4 (id=542):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = syz_open_dev$rtc(&(0x7f0000002c40), 0x0, 0x2200)
ioctl$RTC_PIE_OFF(r1, 0x7006)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x3c}}, 0x40800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r4], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000e60f000000100000000707000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
writev(r0, &(0x7f00000021c0), 0x0)
r7 = fcntl$dupfd(r6, 0x406, r6)
ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000040))
ioctl$EVIOCGVERSION(r7, 0x80044501, &(0x7f0000000240)=""/140)

872.544251ms ago: executing program 4 (id=543):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x3, 0x10, 0x0, &(0x7f0000000100)='|/'}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x5, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xde56353, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x8001, 0x0}, {0x2, 0x0, 0xa9c, 0x0}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 9)

711.011465ms ago: executing program 4 (id=544):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4000004)
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0)
setsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, 0x18)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x100)
connect$inet6(r4, 0x0, 0x0)
sendmmsg$inet6(r4, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"})
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

601.270063ms ago: executing program 1 (id=545):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x28, r3, 0x7, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}]}, 0x28}}, 0x4000004)
r6 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000780)=ANY=[], 0x100)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000001840), 0x3b, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"})
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

572.152554ms ago: executing program 4 (id=546):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000180)=0x80177, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5)
sendto$packet(r0, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14)

561.030523ms ago: executing program 0 (id=547):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)

494.494869ms ago: executing program 0 (id=548):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000035c0), 0x0, 0x884)

494.243238ms ago: executing program 4 (id=549):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0xfffd, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32, 0xfffffffd}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r1, 0x2)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2ed79bf7cb29cc876ee6ef6a8e87a18651ae4df8bb2ad50e1714aa09b88cf571e4fee52441c4aeff8b2da0", @ANYRES16=r3, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800730000000000"], 0x3c}, 0x1, 0x2, 0x0, 0x10}, 0x2004c091)

494.021969ms ago: executing program 0 (id=550):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 9)

484.325548ms ago: executing program 1 (id=551):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0xfff2, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

262.311906ms ago: executing program 4 (id=552):
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0b03112003"], 0x7)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x82, &(0x7f00000000c0)='n\x00\x00\x00\x00\x00\x00\x00', 0x8)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, 0x0, 0x0, 0x10000}) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) (async)
r3 = dup(r2)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r3})
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002880), 0xffffffffffffffff)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x34}}, 0x10) (async, rerun: 32)
syz_open_dev$dvb_frontend(0x0, 0x101, 0x0) (rerun: 32)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xe, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
setns(0xc9, 0x0) (rerun: 32)
r7 = socket(0x8, 0x5, 0x5)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x42000004, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fbdbdf25080000000800020008000000f0fc0680"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0000400}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="080027bd7000ffdbdf2503000000080034000104000008002c000a0000000500300000000000050038000100000005002a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000004)

262.094968ms ago: executing program 0 (id=553):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000480)={{0x80a0000, 0x41000, 0xf, 0xf, 0x5, 0x4, 0x42, 0x3, 0x0, 0x34, 0x19}, {0x0, 0x7000, 0xc, 0x2, 0x1, 0x43, 0x7f, 0x6, 0x5, 0x1, 0x7f, 0x1}, {0xdddd0000, 0x2000, 0xb, 0x2, 0x99, 0x8, 0x0, 0x9, 0xff, 0xb, 0x6}, {0x26000, 0x26000, 0x0, 0x6, 0x4, 0xff, 0xff, 0x0, 0xa, 0x9e, 0x7, 0xf2}, {0x22221000, 0x25000, 0xb, 0x3, 0x5, 0x2, 0xab, 0x7e, 0xf, 0x86, 0xf7, 0xc4}, {0x2000, 0xfec06000, 0x4, 0x7, 0xf7, 0x6, 0x5, 0x1, 0x80, 0xd6, 0x4, 0x5}, {0xddddd000, 0x6000, 0x3, 0x7, 0xfc, 0x0, 0x44, 0x3, 0x3, 0x7d, 0xb8, 0x70}, {0x8000000, 0xdddd1000, 0xb, 0x2, 0xf, 0x7, 0x7, 0xe2, 0x9, 0x8, 0xec, 0x9}, {0xeeee0000, 0x3}, {0x0, 0x2}, 0x80000031, 0x0, 0x7000, 0x42064, 0x400000006, 0x9000, 0x80a0000, [0x3, 0x800ffa, 0x400000000063, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0xff0f0000)

190.743578ms ago: executing program 1 (id=554):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4000004)
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0)
setsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, 0x18)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x100)
connect$inet6(r4, 0x0, 0x0)
sendmmsg$inet6(r4, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"})
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

190.342467ms ago: executing program 2 (id=555):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (fail_nth: 9)

2.22134ms ago: executing program 2 (id=556):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)

0s ago: executing program 2 (id=564):
openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCGPTPEER(r3, 0x5441, 0xb3d)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x6e60, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000380))

0s ago: executing program 0 (id=558):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a000000205800034824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00030d0000000000000069e3289b6c17a118d9", 0x58}], 0x1)
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00')
mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff)
symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff)
mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff)
mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlink(&(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x20, 0x3, 0x35e}, &(0x7f0000001b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb13e, 0x800, 0x2, 0xd5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd551, 0x1, 0x1, 0x13b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2df2, 0x1020, 0x3, 0x28f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce4f, 0x2000, 0x1, 0xc5}, <r1=>0xffffffffffffffff}], 0x4, &(0x7f0000002dc0)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x4, 0x7a7, 0x0, &(0x7f0000001dc0)=@buf_4k="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"}}, &(0x7f0000002e40))
syz_ublk_setup_io_uring(0x48c2, &(0x7f0000002e80)={0x0, 0xb5e0, 0x80000, 0x1, 0x309, 0x0, r1}, &(0x7f0000002f00), &(0x7f0000002f40), &(0x7f0000002f80))
r2 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000001b00)='dummy_', 0x6)
close(r2)

kernel console output (not intermixed with test programs):

interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   61.564476][   T10] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[   61.569046][   T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[   61.570653][ T1360] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.571981][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.577161][ T1360] usbsevseg 8-1:1.0: USB 7 Segment device now attached
[   61.578534][   T10] usb 5-1: Product: syz
[   61.578549][   T10] usb 5-1: Manufacturer: syz
[   61.578562][   T10] usb 5-1: SerialNumber: syz
[   61.585002][ T6245] UDC core: g1: couldn't find an available UDC or it's busy
[   61.602669][    C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[   62.032297][   T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input9
[   62.055811][   T10] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[   62.058269][   T10]  (id 0x00)
[   62.145277][   T10] rc_core: IR keymap rc-imon-pad not found
[   62.147477][   T10] Registered IR keymap rc-empty
[   62.149418][   T10] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[   62.153365][   T10] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[   62.201324][ T6251] UDC core: g1: couldn't find an available UDC or it's busy
[   62.260389][   T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0
[   62.269960][   T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input10
[   62.279659][   T10] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:3> initialized
[   62.286509][ T1360] usb 8-1: USB disconnect, device number 6
[   62.291642][ T1360] usbsevseg 8-1:1.0: USB 7 Segment now disconnected
[   62.505062][ T5816] usb 6-1: USB disconnect, device number 5
[   62.551068][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'.
[   62.554626][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'.
[   62.554648][ T6258] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.565012][ T6258] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.569025][ T6258] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.571972][ T6258] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.580457][ T6258] batadv0 (unregistering): left promiscuous mode
[   62.604272][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'.
[   62.835086][ T6271] UDC core: g1: couldn't find an available UDC or it's busy
[   63.309930][ T6281] Rounding down aligned max_sectors from 4294967295 to 4294967288
[   63.320776][ T6281] Unable to extract alua_tg_pt_write_md
[   63.369638][ T6285] loop0: detected capacity change from 0 to 32768
[   63.386399][ T6285] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   63.391359][   T42] kauditd_printk_skb: 54 callbacks suppressed
[   63.391378][   T42] audit: type=1400 audit(1785419525.396:401): avc:  denied  { ioctl } for  pid=6284 comm="syz.1.128" path="/29/dev/md0" dev="devtmpfs" ino=3016 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   63.452042][ T6288] md: invalid raid superblock magic on loop0
[   63.454628][ T6288] md: loop0 does not have a valid v0.0 superblock, not importing!
[   63.458488][ T6288] md: md_import_device returned -22
[   63.552026][ T6285] md: could not open device unknown-block(0,0).
[   63.554532][ T6285] md: error, md_import_device() returned -6
[   63.589999][   T42] audit: type=1400 audit(1785419525.596:402): avc:  denied  { bind } for  pid=6292 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   63.616243][ T1360] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[   63.618805][ T6295] netlink: 'syz.1.130': attribute type 4 has an invalid length.
[   63.627660][   T42] audit: type=1400 audit(1785419525.636:403): avc:  denied  { ioctl } for  pid=6294 comm="syz.1.130" path="socket:[10975]" dev="sockfs" ino=10975 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   63.723893][ T6300] vhci_hcd vhci_hcd.0: failed to lookup sock
[   63.778736][ T1360] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[   63.783946][ T1360] usb 7-1: config 0 has no interface number 0
[   63.788672][ T1360] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   63.792692][ T1360] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[   63.798618][ T1360] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   63.804753][ T1360] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[   63.814748][ T1360] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[   63.820854][ T1360] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   63.830988][ T1360] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   63.834630][ T1360] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.870156][ T1360] usb 7-1: config 0 descriptor??
[   63.873340][ T6287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   63.880098][ T6287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   63.885082][   T42] audit: type=1400 audit(1785419525.886:404): avc:  denied  { write } for  pid=6306 comm="syz.3.135" name="functions" dev="configfs" ino=9726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   63.892620][ T1360] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[   63.898891][   T42] audit: type=1400 audit(1785419525.906:405): avc:  denied  { write } for  pid=6306 comm="syz.3.135" name="c.1" dev="configfs" ino=8081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   63.909586][   T42] audit: type=1400 audit(1785419525.906:406): avc:  denied  { write } for  pid=6306 comm="syz.3.135" name="c.1" dev="configfs" ino=8081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   63.942435][ T6307] configfs-gadget.g1 gadget.32: HOST MAC 36:0b:43:b9:30:53
[   63.945878][ T6307] configfs-gadget.g1 gadget.32: MAC 12:09:3f:ab:83:74
[   63.959383][ T6311] usbip-vudc usbip-vudc.0: gadget not bound
[   64.031948][ T1360] IPVS: starting estimator thread 0...
[   64.036419][ T6313] netlink: 32 bytes leftover after parsing attributes in process `syz.3.136'.
[   64.090511][ T6318] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   64.109670][ T5816] usb 7-1: USB disconnect, device number 3
[   64.126450][ T6315] IPVS: using max 43 ests per chain, 103200 per kthread
[   64.128728][ T5816] ldusb 7-1:0.55: LD USB Device #1 now disconnected
[   64.229283][   T42] audit: type=1400 audit(1785419526.236:407): avc:  denied  { create } for  pid=6230 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   64.241735][   T29] usb 5-1: USB disconnect, device number 3
[   64.246646][   T42] audit: type=1400 audit(1785419526.236:408): avc:  denied  { connect } for  pid=6230 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   64.278929][   T42] audit: type=1400 audit(1785419526.286:409): avc:  denied  { write } for  pid=6328 comm="syz.3.142" name="cluster" dev="configfs" ino=1172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   64.295196][   T42] audit: type=1400 audit(1785419526.286:410): avc:  denied  { write } for  pid=6328 comm="syz.3.142" name="heartbeat" dev="configfs" ino=10995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   64.324039][ T6331] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   64.653931][    C0] unchecked MSR access error: WRMSR to 0x400 (tried to write 0x0000000000000001) at rIP: 0xffffffff81b1d00a (__mcheck_cpu_init_prepare_banks+0x18a/0x380)
[   64.658725][    C0] Call Trace:
[   64.659720][    C0]  <IRQ>
[   64.660581][    C0]  ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10
[   64.662570][    C0]  ? sched_clock_cpu+0x6c/0x570
[   64.664000][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[   64.665567][    C0]  ? __pfx_mce_cpu_restart+0x10/0x10
[   64.667124][    C0]  mce_cpu_restart+0xd5/0x1f0
[   64.668619][    C0]  __flush_smp_call_function_queue+0x281/0x960
[   64.670461][    C0]  __sysvec_call_function+0x81/0x420
[   64.672044][    C0]  sysvec_call_function+0x9e/0xc0
[   64.673522][    C0]  </IRQ>
[   64.674430][    C0]  <TASK>
[   64.675310][    C0]  asm_sysvec_call_function+0x1a/0x20
[   64.677154][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[   64.679305][    C0] Code: e6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 7f 10 00 fb f4 <e9> 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[   64.685664][    C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000202
[   64.687452][    C0] RAX: 00000000000cb037 RBX: ffffffff8e891480 RCX: ffffffff8bbb22d5
[   64.689748][    C0] RDX: 0000000000000000 RSI: ffffffff8e1a6f32 RDI: ffffffff8c402680
[   64.692120][    C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100d48678d
[   64.694467][    C0] R10: ffff88806a433c6b R11: 0000000000000000 R12: 0000000000000000
[   64.696846][    C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000
[   64.699695][    C0]  ? ct_kernel_exit+0x125/0x180
[   64.701191][    C0]  default_idle+0x9/0x10
[   64.702462][    C0]  default_idle_call+0x6c/0xb0
[   64.703953][    C0]  do_idle+0x3a7/0x5b0
[   64.705636][    C0]  ? __pfx_do_idle+0x10/0x10
[   64.707579][    C0]  cpu_startup_entry+0x4f/0x60
[   64.709520][    C0]  rest_init+0x251/0x260
[   64.711283][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[   64.713497][    C0]  start_kernel+0x48e/0x490
[   64.715337][    C0]  x86_64_start_reservations+0x24/0x30
[   64.717501][    C0]  x86_64_start_kernel+0x12b/0x130
[   64.719551][    C0]  common_startup_64+0x13e/0x158
[   64.721512][    C0]  </TASK>
[   65.031615][ T6364] ubi0: attaching mtd0
[   65.035794][ T6364] ubi0: scanning is finished
[   65.037291][ T6364] ubi0: empty MTD device detected
[   65.288233][ T6364] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[   65.291461][ T6364] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   65.293620][ T6364] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[   65.295702][ T6364] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[   65.298093][ T6364] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   65.300098][ T6364] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[   65.302498][ T6364] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2555148338
[   65.305503][ T6364] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   65.310006][ T6375] ubi0: background thread "ubi_bgt0d" started, PID 6375
[   65.730307][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'.
[   65.756456][ T6382] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.771682][ T6381] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   65.866405][ T5584] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   65.883236][ T5584] bond1: (slave ip6gretap1): link status up again after 0 ms
[   65.889704][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   65.985721][ T5584] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   66.015314][   T29] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[   66.017397][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   66.098742][ T6395] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   66.125875][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   66.178490][   T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   66.182661][   T29] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[   66.188531][   T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.196889][   T29] cxacru 8-1:1.0: usbatm_usb_probe: bind failed: -19!
[   66.235308][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   66.382895][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   66.402741][ T5614] usb 8-1: USB disconnect, device number 7
[   66.497375][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   66.585200][   T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   66.738004][   T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.741315][   T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.744164][   T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   66.748125][   T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   66.750784][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.754587][   T29] usb 7-1: config 0 descriptor??
[   66.957932][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'.
[   66.961342][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'.
[   67.012328][ T6416] xt_hashlimit: max too large, truncated to 1048576
[   67.014680][ T6416] xt_hashlimit: Unknown mode mask E03114, kernel too old?
[   67.174211][   T29] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   67.428282][ T5740] usb 7-1: USB disconnect, device number 4
[   67.429619][ T6411] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -19
[   67.489961][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'.
[   67.497703][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'.
[   67.500595][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'.
[   67.938140][ T6444] syzkaller1: entered promiscuous mode
[   67.940328][ T6444] syzkaller1: entered allmulticast mode
[   68.238213][ T6470] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   68.555279][ T1045] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[   68.710036][ T1045] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   68.716165][ T1045] usb 8-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00
[   68.719961][ T1045] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.723211][ T1045] usb 8-1: Product: syz
[   68.724811][ T1045] usb 8-1: Manufacturer: syz
[   68.726863][ T1045] usb 8-1: SerialNumber: syz
[   68.734938][ T6476] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   69.056081][ T5816] usb 8-1: USB disconnect, device number 8
[   69.162242][   T42] kauditd_printk_skb: 34 callbacks suppressed
[   69.162264][   T42] audit: type=1800 audit(1785419531.166:445): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.211" name="use" dev="configfs" ino=13694 res=0 errno=0
[   69.255444][ T5614] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   69.322252][   T42] audit: type=1400 audit(1785419531.326:446): avc:  denied  { write } for  pid=6490 comm="syz.1.214" name="configs" dev="configfs" ino=9727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   69.375663][ T5584] net_ratelimit: 26 callbacks suppressed
[   69.375679][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   69.405257][ T5614] usb 7-1: Using ep0 maxpacket: 8
[   69.405814][ T6495] retu-mfd 1-0002: could not read Tahvo revision: -5
[   69.408723][ T5614] usb 7-1: config 0 has no interfaces?
[   69.410124][ T6495] retu-mfd 1-0002: probe with driver retu-mfd failed with error -5
[   69.411222][ T5614] usb 7-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 1.00
[   69.413773][ T6495] i2c i2c-1: new_device: Instantiated device tahvo at 0x02
[   69.417673][ T5614] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.426709][ T5614] usb 7-1: config 0 descriptor??
[   69.485252][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   69.521937][   T42] audit: type=1400 audit(1785419531.536:447): avc:  denied  { ioctl } for  pid=6502 comm="syz.3.220" path="/dev/vhost-net" dev="devtmpfs" ino=1299 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   69.574608][   T42] audit: type=1400 audit(1785419531.576:448): avc:  denied  { listen } for  pid=6508 comm="syz.1.222" laddr=172.20.0.1 lport=12816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   69.589647][ T6510] netlink: 'syz.3.220': attribute type 1 has an invalid length.
[   69.592230][ T6510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   69.595792][ T6510] IPv6: NLM_F_CREATE should be set when creating new route
[   69.615289][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   69.637670][ T1045] usb 7-1: USB disconnect, device number 5
[   69.723304][   T42] audit: type=1400 audit(1785419531.726:449): avc:  denied  { write } for  pid=6512 comm="syz.1.223" name="c.1" dev="configfs" ino=8081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   69.730357][   T42] audit: type=1400 audit(1785419531.726:450): avc:  denied  { write } for  pid=6512 comm="syz.1.223" name="c.1" dev="configfs" ino=8081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   69.737521][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   69.840842][   T42] audit: type=1400 audit(1785419531.846:451): avc:  denied  { create } for  pid=6514 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   69.846818][   T42] audit: type=1400 audit(1785419531.846:452): avc:  denied  { ioctl } for  pid=6514 comm="syz.1.224" path="socket:[14410]" dev="sockfs" ino=14410 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   69.855306][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   69.975372][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   70.095281][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   70.178659][   T42] audit: type=1400 audit(1785419532.186:453): avc:  denied  { read append } for  pid=6518 comm="syz.2.226" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   70.189094][   T42] audit: type=1400 audit(1785419532.186:454): avc:  denied  { open } for  pid=6518 comm="syz.2.226" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   70.205937][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   70.238209][ T6519] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   70.240659][ T6519] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   70.248066][ T6519] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   70.251612][ T6519] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   70.253396][ T6519] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   70.257056][ T6519] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   70.260275][ T6519] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   70.262302][ T6519] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   70.266055][ T6519] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   70.315242][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   70.328879][ T6522] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   70.365538][ T6488] NFSD: Unable to initialize client recovery tracking! (-110)
[   70.370490][ T6488] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[   70.376939][ T6488] NFSD: starting 90-second grace period (net f000044b)
[   70.425289][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   70.572355][ T6539] __nla_validate_parse: 2 callbacks suppressed
[   70.572368][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'.
[   70.686883][ T6543] netlink: 'syz.2.234': attribute type 7 has an invalid length.
[   70.689794][ T6543] netlink: 'syz.2.234': attribute type 7 has an invalid length.
[   70.692596][ T6543] Zero length message leads to an empty skb
[   70.764416][ T6547] netlink: 144 bytes leftover after parsing attributes in process `syz.2.236'.
[   70.765302][ T6550] FAULT_INJECTION: forcing a failure.
[   70.765302][ T6550] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   70.772996][ T6550] CPU: 1 UID: 0 PID: 6550 Comm: syz.1.237 Not tainted syzkaller #0 PREEMPT(full) 
[   70.773023][ T6550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   70.773034][ T6550] Call Trace:
[   70.773041][ T6550]  <TASK>
[   70.773048][ T6550]  dump_stack_lvl+0x100/0x190
[   70.773077][ T6550]  should_fail_ex.cold+0x5/0xa
[   70.773099][ T6550]  _copy_from_user+0x2e/0xd0
[   70.773125][ T6550]  copy_msghdr_from_user+0x9f/0x4c0
[   70.773155][ T6550]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[   70.773186][ T6550]  ? __pfx__kstrtoull+0x10/0x10
[   70.773209][ T6550]  ___sys_sendmsg+0x106/0x1e0
[   70.773237][ T6550]  ? __pfx____sys_sendmsg+0x10/0x10
[   70.773305][ T6550]  ? find_held_lock+0x2b/0x80
[   70.773350][ T6550]  __sys_sendmmsg+0x20c/0x440
[   70.773375][ T6550]  ? __pfx___sys_sendmmsg+0x10/0x10
[   70.773395][ T6550]  ? ksys_write+0x190/0x250
[   70.773438][ T6550]  ? fput+0x79/0x100
[   70.773457][ T6550]  ? ksys_write+0x1ac/0x250
[   70.773482][ T6550]  ? __pfx_ksys_write+0x10/0x10
[   70.773512][ T6550]  __x64_sys_sendmmsg+0x9c/0x100
[   70.773534][ T6550]  ? lockdep_hardirqs_on+0x78/0x100
[   70.773554][ T6550]  do_syscall_64+0x115/0x870
[   70.773573][ T6550]  ? clear_bhb_loop+0x40/0x90
[   70.773621][ T6550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.773639][ T6550] RIP: 0033:0x7f4406b9df99
[   70.773655][ T6550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.773672][ T6550] RSP: 002b:00007f4404df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   70.773690][ T6550] RAX: ffffffffffffffda RBX: 00007f4406e25fa0 RCX: 00007f4406b9df99
[   70.773703][ T6550] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[   70.773714][ T6550] RBP: 00007f4404df6090 R08: 0000000000000000 R09: 0000000000000000
[   70.773725][ T6550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.773735][ T6550] R13: 00007f4406e26038 R14: 00007f4406e25fa0 R15: 00007ffeab9598c8
[   70.773760][ T6550]  </TASK>
[   70.915862][ T6552] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   71.350409][ T1444] ieee802154 phy0 wpan0: encryption failed: -22
[   71.354836][ T1444] ieee802154 phy1 wpan1: encryption failed: -22
[   71.455255][ T1360] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[   71.608809][ T1360] usb 8-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01
[   71.612511][ T1360] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.615796][ T1360] usb 8-1: Product: syz
[   71.617525][ T1360] usb 8-1: Manufacturer: syz
[   71.619455][ T1360] usb 8-1: SerialNumber: syz
[   71.624309][ T1360] ums-datafab 8-1:1.0: USB Mass Storage device detected
[   71.629130][ T1360] ums-datafab 8-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[   71.629130][ T1360]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   71.639307][ T1360] scsi host6: usb-storage 8-1:1.0
[   72.060809][ T6600] FAULT_INJECTION: forcing a failure.
[   72.060809][ T6600] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   72.064828][ T6600] CPU: 2 UID: 0 PID: 6600 Comm: syz.1.250 Not tainted syzkaller #0 PREEMPT(full) 
[   72.064846][ T6600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   72.064853][ T6600] Call Trace:
[   72.064858][ T6600]  <TASK>
[   72.064863][ T6600]  dump_stack_lvl+0x100/0x190
[   72.064907][ T6600]  should_fail_ex.cold+0x5/0xa
[   72.064935][ T6600]  _copy_from_user+0x2e/0xd0
[   72.064956][ T6600]  move_addr_to_kernel+0x65/0x170
[   72.064988][ T6600]  __sys_sendto+0x1b8/0x4e0
[   72.065002][ T6600]  ? __pfx___sys_sendto+0x10/0x10
[   72.065019][ T6600]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   72.065044][ T6600]  ? ksys_write+0x1ac/0x250
[   72.065069][ T6600]  ? __pfx_ksys_write+0x10/0x10
[   72.065088][ T6600]  __x64_sys_sendto+0xe0/0x1c0
[   72.065101][ T6600]  ? do_syscall_64+0x90/0x870
[   72.065127][ T6600]  ? lockdep_hardirqs_on+0x78/0x100
[   72.065140][ T6600]  do_syscall_64+0x115/0x870
[   72.065152][ T6600]  ? clear_bhb_loop+0x40/0x90
[   72.065167][ T6600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.065179][ T6600] RIP: 0033:0x7f4406b9df99
[   72.065189][ T6600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   72.065201][ T6600] RSP: 002b:00007f4404df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   72.065214][ T6600] RAX: ffffffffffffffda RBX: 00007f4406e25fa0 RCX: 00007f4406b9df99
[   72.065221][ T6600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[   72.065227][ T6600] RBP: 00007f4404df6090 R08: 0000200000000180 R09: 0000000000000014
[   72.065234][ T6600] R10: 0000000004004004 R11: 0000000000000246 R12: 0000000000000001
[   72.065241][ T6600] R13: 00007f4406e26038 R14: 00007f4406e25fa0 R15: 00007ffeab9598c8
[   72.065255][ T6600]  </TASK>
[   72.305358][ T5741] Bluetooth: hci1: command 0x0c1a tx timeout
[   72.305373][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout
[   72.309365][ T5095] Bluetooth: hci0: command 0x0c1a tx timeout
[   72.337692][ T6610] FAULT_INJECTION: forcing a failure.
[   72.337692][ T6610] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   72.343539][ T6610] CPU: 1 UID: 0 PID: 6610 Comm: syz.1.255 Not tainted syzkaller #0 PREEMPT(full) 
[   72.343566][ T6610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   72.343577][ T6610] Call Trace:
[   72.343584][ T6610]  <TASK>
[   72.343592][ T6610]  dump_stack_lvl+0x100/0x190
[   72.343622][ T6610]  should_fail_ex.cold+0x5/0xa
[   72.343644][ T6610]  _copy_from_user+0x2e/0xd0
[   72.343671][ T6610]  kstrtouint_from_user+0xd6/0x1d0
[   72.343690][ T6610]  ? __pfx_kstrtouint_from_user+0x10/0x10
[   72.343707][ T6610]  ? __lock_acquire+0x49f/0x1a40
[   72.343753][ T6610]  proc_fail_nth_write+0x83/0x220
[   72.343781][ T6610]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   72.343816][ T6610]  vfs_write+0x2aa/0x1050
[   72.343845][ T6610]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   72.343874][ T6610]  ? __pfx_vfs_write+0x10/0x10
[   72.343900][ T6610]  ? __fget_files+0x215/0x3d0
[   72.343925][ T6610]  ? __fget_files+0x21f/0x3d0
[   72.343950][ T6610]  ksys_write+0x12a/0x250
[   72.343977][ T6610]  ? __pfx_ksys_write+0x10/0x10
[   72.344011][ T6610]  do_syscall_64+0x115/0x870
[   72.344049][ T6610]  ? clear_bhb_loop+0x40/0x90
[   72.344073][ T6610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.344091][ T6610] RIP: 0033:0x7f4406b5e7ce
[   72.344107][ T6610] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   72.344125][ T6610] RSP: 002b:00007f4404df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   72.344144][ T6610] RAX: ffffffffffffffda RBX: 00007f4404df66c0 RCX: 00007f4406b5e7ce
[   72.344156][ T6610] RDX: 0000000000000001 RSI: 00007f4404df60a0 RDI: 0000000000000004
[   72.344167][ T6610] RBP: 00007f4404df6090 R08: 0000000000000000 R09: 0000000000000000
[   72.344178][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   72.344188][ T6610] R13: 00007f4406e26038 R14: 00007f4406e25fa0 R15: 00007ffeab9598c8
[   72.344214][ T6610]  </TASK>
[   72.464347][ T6612] netlink: 88 bytes leftover after parsing attributes in process `syz.1.256'.
[   72.706834][  T227] scsi 6:0:0:0: Direct-Access     Datafab  MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS
[   72.712221][  T227] scsi 6:0:0:1: Direct-Access     Datafab  MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS
[   72.740543][  T227] sd 6:0:0:0: Attached scsi generic sg2 type 0
[   72.746484][  T227] sd 6:0:0:1: Attached scsi generic sg3 type 0
[   73.963475][ T6575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   74.077340][ T6627] FAULT_INJECTION: forcing a failure.
[   74.077340][ T6627] name failslab, interval 1, probability 1, space 0, times 0
[   74.082639][ T6627] CPU: 3 UID: 0 PID: 6627 Comm: syz.0.262 Not tainted syzkaller #0 PREEMPT(full) 
[   74.082658][ T6627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   74.082674][ T6627] Call Trace:
[   74.082679][ T6627]  <TASK>
[   74.082684][ T6627]  dump_stack_lvl+0x100/0x190
[   74.082708][ T6627]  should_fail_ex.cold+0x5/0xa
[   74.082724][ T6627]  should_failslab+0xc2/0x120
[   74.082747][ T6627]  kmem_cache_alloc_noprof+0x91/0x6a0
[   74.082766][ T6627]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[   74.082788][ T6627]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[   74.082806][ T6627]  mmu_topup_memory_caches+0x25/0x170
[   74.082830][ T6627]  kvm_mmu_load+0xe2/0x2570
[   74.082850][ T6627]  ? kvm_deliver_exception_payload+0x129/0x210
[   74.082870][ T6627]  ? __pfx_kvm_mmu_load+0x10/0x10
[   74.082884][ T6627]  ? vmx_inject_exception+0x239/0x560
[   74.082898][ T6627]  ? kvm_check_and_inject_events+0x873/0x12a0
[   74.082919][ T6627]  vcpu_run+0x3aaa/0x5de0
[   74.082939][ T6627]  ? trace_event_raw_event_kvm_fpu+0x146/0x200
[   74.082955][ T6627]  ? __pfx_vcpu_run+0x10/0x10
[   74.082976][ T6627]  ? rcu_is_watching+0x12/0xc0
[   74.083002][ T6627]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[   74.083019][ T6627]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[   74.083040][ T6627]  kvm_vcpu_ioctl+0x730/0x1700
[   74.083054][ T6627]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   74.083067][ T6627]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   74.083088][ T6627]  ? do_vfs_ioctl+0x226/0x13e0
[   74.083105][ T6627]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   74.083122][ T6627]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   74.083147][ T6627]  ? __fget_files+0x215/0x3d0
[   74.083158][ T6627]  ? hook_file_ioctl_common+0x140/0x440
[   74.083175][ T6627]  ? selinux_file_ioctl+0x13b/0x290
[   74.083192][ T6627]  ? selinux_file_ioctl+0xb6/0x290
[   74.083210][ T6627]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   74.083224][ T6627]  __x64_sys_ioctl+0x18e/0x210
[   74.083242][ T6627]  do_syscall_64+0x115/0x870
[   74.083257][ T6627]  ? clear_bhb_loop+0x40/0x90
[   74.083271][ T6627]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.083283][ T6627] RIP: 0033:0x7fd0e939df99
[   74.083294][ T6627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.083305][ T6627] RSP: 002b:00007fd0ea2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   74.083318][ T6627] RAX: ffffffffffffffda RBX: 00007fd0e9625fa0 RCX: 00007fd0e939df99
[   74.083325][ T6627] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   74.083331][ T6627] RBP: 00007fd0ea2be090 R08: 0000000000000000 R09: 0000000000000000
[   74.083338][ T6627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   74.083344][ T6627] R13: 00007fd0e9626038 R14: 00007fd0e9625fa0 R15: 00007fff245902c8
[   74.083359][ T6627]  </TASK>
[   74.192604][   T42] kauditd_printk_skb: 20 callbacks suppressed
[   74.192624][   T42] audit: type=1400 audit(1785419536.196:475): avc:  denied  { connect } for  pid=6631 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   74.261431][   T42] audit: type=1400 audit(1785419536.266:476): avc:  denied  { ioctl } for  pid=6634 comm="syz.1.265" path="socket:[14666]" dev="sockfs" ino=14666 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   74.270718][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'.
[   74.273596][ T6635] hsr_slave_0: left promiscuous mode
[   74.277235][ T6635] hsr_slave_1: left promiscuous mode
[   74.375257][ T5741] Bluetooth: hci1: command 0x0c1a tx timeout
[   74.375281][ T5095] Bluetooth: hci0: command 0x0c1a tx timeout
[   74.423555][   T42] audit: type=1400 audit(1785419536.426:477): avc:  denied  { create } for  pid=6641 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   74.430603][ T5584] net_ratelimit: 34 callbacks suppressed
[   74.430617][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   74.431848][   T42] audit: type=1400 audit(1785419536.426:478): avc:  denied  { bind } for  pid=6641 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   74.440612][   T42] audit: type=1400 audit(1785419536.426:479): avc:  denied  { setopt } for  pid=6641 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   74.478189][   T42] audit: type=1400 audit(1785419536.486:480): avc:  denied  { accept } for  pid=6641 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   74.485321][   T42] audit: type=1400 audit(1785419536.486:481): avc:  denied  { write } for  pid=6641 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   74.492406][   T42] audit: type=1400 audit(1785419536.496:482): avc:  denied  { read } for  pid=6641 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   74.545368][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   74.627557][   T10] usb 8-1: USB disconnect, device number 9
[   74.655198][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   74.667863][ T1176] sd 6:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
[   74.671299][ T1176] sd 6:0:0:0: [sdb] Sense not available.
[   74.671569][   T75] sd 6:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[   74.673389][ T1176] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[   74.679110][ T1176] sd 6:0:0:0: [sdb] 0-byte physical blocks
[   74.682543][   T75] sd 6:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[   74.682607][ T1176] sd 6:0:0:0: [sdb] Write Protect is off
[   74.685910][   T75] sd 6:0:0:1: [sdc] Sense not available.
[   74.686034][   T75] sd 6:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B)
[   74.689585][   T75] sd 6:0:0:1: [sdc] 0-byte physical blocks
[   74.691854][ T1176] sd 6:0:0:0: [sdb] Asking for cache data failed
[   74.693595][   T75] sd 6:0:0:1: [sdc] Test WP failed, assume Write Enabled
[   74.695978][ T1176] sd 6:0:0:0: [sdb] Assuming drive cache: write through
[   74.700860][   T75] sd 6:0:0:1: [sdc] Asking for cache data failed
[   74.702907][   T75] sd 6:0:0:1: [sdc] Assuming drive cache: write through
[   74.721938][   T75] sd 6:0:0:1: [sdc] Attached SCSI removable disk
[   74.722255][ T1176] sd 6:0:0:0: [sdb] Attached SCSI removable disk
[   74.765318][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   74.875320][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   74.896306][ T6629] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   74.900128][ T6629] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   74.903650][ T6629] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   74.943508][   T42] audit: type=1400 audit(1785419536.946:483): avc:  denied  { ioctl } for  pid=6644 comm="syz.3.270" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13220 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   74.985298][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   75.095387][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   75.205265][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   75.211735][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.274'.
[   75.233167][   T42] audit: type=1400 audit(1785419537.236:484): avc:  denied  { append } for  pid=6658 comm="syz.3.275" name="uprobe_events" dev="tracefs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   75.326527][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   75.339458][ T6675] FAULT_INJECTION: forcing a failure.
[   75.339458][ T6675] name failslab, interval 1, probability 1, space 0, times 0
[   75.344266][ T6675] CPU: 0 UID: 0 PID: 6675 Comm: syz.0.280 Not tainted syzkaller #0 PREEMPT(full) 
[   75.344283][ T6675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   75.344291][ T6675] Call Trace:
[   75.344295][ T6675]  <TASK>
[   75.344300][ T6675]  dump_stack_lvl+0x100/0x190
[   75.344319][ T6675]  should_fail_ex.cold+0x5/0xa
[   75.344335][ T6675]  should_failslab+0xc2/0x120
[   75.344351][ T6675]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[   75.344366][ T6675]  ? dyn_event_create+0x1f/0x70
[   75.344396][ T6675]  ? __lock_acquire+0x49f/0x1a40
[   75.344411][ T6675]  ? argv_split+0x35/0x420
[   75.344433][ T6675]  kstrndup+0x64/0x120
[   75.344455][ T6675]  ? __pfx___trace_uprobe_create+0x10/0x10
[   75.344471][ T6675]  argv_split+0x35/0x420
[   75.344484][ T6675]  ? __pfx___trace_uprobe_create+0x10/0x10
[   75.344499][ T6675]  trace_probe_create+0x7d/0x100
[   75.344513][ T6675]  ? __pfx_trace_probe_create+0x10/0x10
[   75.344530][ T6675]  dyn_event_create+0x46/0x70
[   75.344548][ T6675]  create_or_delete_trace_uprobe+0x5a/0xb0
[   75.344563][ T6675]  trace_parse_run_command+0x1ab/0x3b0
[   75.344577][ T6675]  ? __pfx_create_or_delete_trace_uprobe+0x10/0x10
[   75.344594][ T6675]  vfs_write+0x2aa/0x1050
[   75.344613][ T6675]  ? __pfx_probes_write+0x10/0x10
[   75.344628][ T6675]  ? __pfx_vfs_write+0x10/0x10
[   75.344645][ T6675]  ? __fget_files+0x215/0x3d0
[   75.344661][ T6675]  ? __fget_files+0x21f/0x3d0
[   75.344676][ T6675]  ksys_write+0x12a/0x250
[   75.344694][ T6675]  ? __pfx_ksys_write+0x10/0x10
[   75.344715][ T6675]  do_syscall_64+0x115/0x870
[   75.344728][ T6675]  ? clear_bhb_loop+0x40/0x90
[   75.344743][ T6675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.344754][ T6675] RIP: 0033:0x7fd0e939df99
[   75.344765][ T6675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   75.344776][ T6675] RSP: 002b:00007fd0ea2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   75.344795][ T6675] RAX: ffffffffffffffda RBX: 00007fd0e9625fa0 RCX: 00007fd0e939df99
[   75.344802][ T6675] RDX: 000000000000000f RSI: 0000200000000180 RDI: 0000000000000004
[   75.344809][ T6675] RBP: 00007fd0ea2be090 R08: 0000000000000000 R09: 0000000000000000
[   75.344815][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   75.344822][ T6675] R13: 00007fd0e9626038 R14: 00007fd0e9625fa0 R15: 00007fff245902c8
[   75.344836][ T6675]  </TASK>
[   75.435247][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   76.114015][ T6667] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   76.116772][ T6667] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   76.119363][ T6667] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   76.167599][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'.
[   76.288405][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.292'.
[   76.369231][ T6708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.294'.
[   77.156156][ T6706] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   77.158768][ T6706] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   77.160687][ T6706] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   77.264461][ T6733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.304'.
[   77.316280][ T6731] zram0: detected capacity change from 0 to 8
[   77.371821][ T6741] syzkaller0: entered promiscuous mode
[   77.373615][ T6741] syzkaller0: entered allmulticast mode
[   77.478270][ T6748] FAULT_INJECTION: forcing a failure.
[   77.478270][ T6748] name failslab, interval 1, probability 1, space 0, times 0
[   77.482299][ T6748] CPU: 0 UID: 0 PID: 6748 Comm: syz.1.310 Not tainted syzkaller #0 PREEMPT(full) 
[   77.482316][ T6748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   77.482324][ T6748] Call Trace:
[   77.482339][ T6748]  <TASK>
[   77.482344][ T6748]  dump_stack_lvl+0x100/0x190
[   77.482416][ T6748]  should_fail_ex.cold+0x5/0xa
[   77.482436][ T6748]  ? __pfx_ref_tracker_alloc+0x10/0x10
[   77.482465][ T6748]  should_failslab+0xc2/0x120
[   77.482492][ T6748]  kmem_cache_alloc_noprof+0x91/0x6a0
[   77.482513][ T6748]  ? skb_clone+0x190/0x400
[   77.482547][ T6748]  skb_clone+0x190/0x400
[   77.482561][ T6748]  netlink_deliver_tap+0xaed/0xcc0
[   77.482589][ T6748]  netlink_unicast+0x6a5/0x850
[   77.482602][ T6748]  ? __pfx_netlink_unicast+0x10/0x10
[   77.482617][ T6748]  netlink_ack+0x655/0xb80
[   77.482633][ T6748]  netlink_rcv_skb+0x333/0x420
[   77.482644][ T6748]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   77.482669][ T6748]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   77.482687][ T6748]  ? ns_capable+0xd2/0xf0
[   77.482714][ T6748]  nfnetlink_rcv+0x1b3/0x440
[   77.482729][ T6748]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   77.482744][ T6748]  ? netlink_deliver_tap+0x1ae/0xcc0
[   77.482764][ T6748]  netlink_unicast+0x585/0x850
[   77.482777][ T6748]  ? __pfx_netlink_unicast+0x10/0x10
[   77.482792][ T6748]  netlink_sendmsg+0x8b0/0xda0
[   77.482806][ T6748]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.482819][ T6748]  ? selinux_socket_sendmsg+0x198/0x2f0
[   77.482844][ T6748]  ____sys_sendmsg+0xa4d/0xbe0
[   77.482867][ T6748]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.482879][ T6748]  ? __pfx_____sys_sendmsg+0x10/0x10
[   77.482903][ T6748]  ___sys_sendmsg+0x190/0x1e0
[   77.482923][ T6748]  ? __pfx____sys_sendmsg+0x10/0x10
[   77.482940][ T6748]  ? __lock_acquire+0x49f/0x1a40
[   77.482963][ T6748]  ? get_pid_task+0x106/0x250
[   77.482998][ T6748]  __sys_sendmsg+0x160/0x210
[   77.483013][ T6748]  ? __pfx___sys_sendmsg+0x10/0x10
[   77.483034][ T6748]  do_syscall_64+0x115/0x870
[   77.483069][ T6748]  ? clear_bhb_loop+0x40/0x90
[   77.483084][ T6748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.483096][ T6748] RIP: 0033:0x7f4406b9df99
[   77.483106][ T6748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.483117][ T6748] RSP: 002b:00007f4404df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   77.483138][ T6748] RAX: ffffffffffffffda RBX: 00007f4406e25fa0 RCX: 00007f4406b9df99
[   77.483145][ T6748] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[   77.483152][ T6748] RBP: 00007f4404df6090 R08: 0000000000000000 R09: 0000000000000000
[   77.483158][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.483164][ T6748] R13: 00007f4406e26038 R14: 00007f4406e25fa0 R15: 00007ffeab9598c8
[   77.483178][ T6748]  </TASK>
[   77.491259][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'.
[   77.575284][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'.
[   77.594980][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'.
[   77.598833][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'.
[   77.610625][ T6046] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.613455][ T6046] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.618051][ T6046] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.621364][ T6756] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[   77.626221][ T6046] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.849395][ T6779] Mass Storage Function, version: 2009/09/11
[   77.852622][ T6779] LUN: removable file: (no medium)
[   78.082187][ T6788] misc userio: No port type given on /dev/userio
[   78.137021][ T6790] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[   78.140767][ T6790] udc dummy_udc.0: failed to start g1: -19
[   78.144668][ T6790] UDC core: g1: couldn't find an available UDC or it's busy
[   78.152997][ T6791] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[   78.156162][ T6791] udc dummy_udc.0: failed to start g1: -19
[   78.161041][ T6791] UDC core: g1: couldn't find an available UDC or it's busy
[   78.347395][ T6799] FAULT_INJECTION: forcing a failure.
[   78.347395][ T6799] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   78.351454][ T6799] CPU: 2 UID: 0 PID: 6799 Comm: syz.3.329 Not tainted syzkaller #0 PREEMPT(full) 
[   78.351470][ T6799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   78.351477][ T6799] Call Trace:
[   78.351490][ T6799]  <TASK>
[   78.351495][ T6799]  dump_stack_lvl+0x100/0x190
[   78.351543][ T6799]  should_fail_ex.cold+0x5/0xa
[   78.351560][ T6799]  _copy_to_user+0x32/0xd0
[   78.351584][ T6799]  simple_read_from_buffer+0xcb/0x170
[   78.351603][ T6799]  proc_fail_nth_read+0x1af/0x230
[   78.351622][ T6799]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   78.351641][ T6799]  ? rw_verify_area+0xce/0x6d0
[   78.351669][ T6799]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   78.351687][ T6799]  vfs_read+0x1e4/0xb40
[   78.351706][ T6799]  ? __pfx_vfs_read+0x10/0x10
[   78.351723][ T6799]  ? __fget_files+0x215/0x3d0
[   78.351738][ T6799]  ? __fget_files+0x21f/0x3d0
[   78.351757][ T6799]  ksys_read+0x12a/0x250
[   78.351775][ T6799]  ? __pfx_ksys_read+0x10/0x10
[   78.351796][ T6799]  do_syscall_64+0x115/0x870
[   78.351827][ T6799]  ? clear_bhb_loop+0x40/0x90
[   78.351842][ T6799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.351853][ T6799] RIP: 0033:0x7f7f7b95e7ce
[   78.351864][ T6799] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   78.351875][ T6799] RSP: 002b:00007f7f7c7f1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   78.351891][ T6799] RAX: ffffffffffffffda RBX: 00007f7f7c7f26c0 RCX: 00007f7f7b95e7ce
[   78.351899][ T6799] RDX: 000000000000000f RSI: 00007f7f7c7f20a0 RDI: 0000000000000006
[   78.351905][ T6799] RBP: 00007f7f7c7f2090 R08: 0000000000000000 R09: 0000000000000000
[   78.351912][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   78.351924][ T6799] R13: 00007f7f7bc26038 R14: 00007f7f7bc25fa0 R15: 00007ffd05b325d8
[   78.351939][ T6799]  </TASK>
[   78.444870][ T6801] program syz.3.330 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   78.465295][ T5095] Bluetooth: hci2: command 0x0c1a tx timeout
[   78.653275][ T6807] FAULT_INJECTION: forcing a failure.
[   78.653275][ T6807] name failslab, interval 1, probability 1, space 0, times 0
[   78.657386][ T6807] CPU: 3 UID: 0 PID: 6807 Comm: syz.3.332 Not tainted syzkaller #0 PREEMPT(full) 
[   78.657403][ T6807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   78.657410][ T6807] Call Trace:
[   78.657414][ T6807]  <TASK>
[   78.657420][ T6807]  dump_stack_lvl+0x100/0x190
[   78.657440][ T6807]  should_fail_ex.cold+0x5/0xa
[   78.657454][ T6807]  ? __pfx_ref_tracker_alloc+0x10/0x10
[   78.657474][ T6807]  should_failslab+0xc2/0x120
[   78.657491][ T6807]  kmem_cache_alloc_noprof+0x91/0x6a0
[   78.657506][ T6807]  ? skb_clone+0x190/0x400
[   78.657568][ T6807]  skb_clone+0x190/0x400
[   78.657588][ T6807]  netlink_deliver_tap+0xaed/0xcc0
[   78.657614][ T6807]  netlink_unicast+0x62b/0x850
[   78.657628][ T6807]  ? __pfx_netlink_unicast+0x10/0x10
[   78.657643][ T6807]  netlink_sendmsg+0x8b0/0xda0
[   78.657657][ T6807]  ? __pfx_netlink_sendmsg+0x10/0x10
[   78.657670][ T6807]  ? selinux_socket_sendmsg+0x198/0x2f0
[   78.657696][ T6807]  ____sys_sendmsg+0xa4d/0xbe0
[   78.657713][ T6807]  ? __pfx_netlink_sendmsg+0x10/0x10
[   78.657726][ T6807]  ? __pfx_____sys_sendmsg+0x10/0x10
[   78.657751][ T6807]  ___sys_sendmsg+0x190/0x1e0
[   78.657777][ T6807]  ? __pfx____sys_sendmsg+0x10/0x10
[   78.657804][ T6807]  ? __lock_acquire+0x49f/0x1a40
[   78.657837][ T6807]  ? get_pid_task+0x106/0x250
[   78.657888][ T6807]  __sys_sendmsg+0x160/0x210
[   78.657903][ T6807]  ? __pfx___sys_sendmsg+0x10/0x10
[   78.657925][ T6807]  do_syscall_64+0x115/0x870
[   78.657938][ T6807]  ? clear_bhb_loop+0x40/0x90
[   78.657953][ T6807]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.657965][ T6807] RIP: 0033:0x7f7f7b99df99
[   78.657975][ T6807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.657987][ T6807] RSP: 002b:00007f7f7c7d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   78.658000][ T6807] RAX: ffffffffffffffda RBX: 00007f7f7bc26090 RCX: 00007f7f7b99df99
[   78.658007][ T6807] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[   78.658013][ T6807] RBP: 00007f7f7c7d1090 R08: 0000000000000000 R09: 0000000000000000
[   78.658020][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   78.658026][ T6807] R13: 00007f7f7bc26128 R14: 00007f7f7bc26090 R15: 00007ffd05b325d8
[   78.658040][ T6807]  </TASK>
[   79.175346][ T5095] Bluetooth: hci0: command 0x0c1a tx timeout
[   79.177647][ T5741] Bluetooth: hci1: command 0x0c1a tx timeout
[   79.535944][ T5584] net_ratelimit: 36 callbacks suppressed
[   79.535970][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   79.634035][ T6811] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32)
[   79.666750][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   79.775247][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   79.895292][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   80.005247][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   80.115305][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   80.225397][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   80.345249][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   80.455294][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   80.545249][ T5095] Bluetooth: hci2: command 0x0c1a tx timeout
[   80.565963][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   80.711914][ T6775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.761843][ T6820] netlink: 104 bytes leftover after parsing attributes in process `syz.1.337'.
[   80.800337][ T6825] FAULT_INJECTION: forcing a failure.
[   80.800337][ T6825] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   80.805052][ T6825] CPU: 2 UID: 0 PID: 6825 Comm: syz.3.339 Not tainted syzkaller #0 PREEMPT(full) 
[   80.805068][ T6825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   80.805076][ T6825] Call Trace:
[   80.805081][ T6825]  <TASK>
[   80.805086][ T6825]  dump_stack_lvl+0x100/0x190
[   80.805120][ T6825]  should_fail_ex.cold+0x5/0xa
[   80.805136][ T6825]  _copy_from_iter+0x1f4/0x1690
[   80.805154][ T6825]  ? __asan_memset+0x23/0x50
[   80.805166][ T6825]  ? __pfx__copy_from_iter+0x10/0x10
[   80.805182][ T6825]  ? __pfx___alloc_skb+0x10/0x10
[   80.805202][ T6825]  netlink_sendmsg+0x808/0xda0
[   80.805216][ T6825]  ? __pfx_netlink_sendmsg+0x10/0x10
[   80.805229][ T6825]  ? selinux_socket_sendmsg+0x198/0x2f0
[   80.805249][ T6825]  ____sys_sendmsg+0xa4d/0xbe0
[   80.805266][ T6825]  ? __pfx_netlink_sendmsg+0x10/0x10
[   80.805278][ T6825]  ? __pfx_____sys_sendmsg+0x10/0x10
[   80.805302][ T6825]  ___sys_sendmsg+0x190/0x1e0
[   80.805321][ T6825]  ? __pfx____sys_sendmsg+0x10/0x10
[   80.805338][ T6825]  ? __lock_acquire+0x49f/0x1a40
[   80.805353][ T6825]  ? get_pid_task+0x106/0x250
[   80.805386][ T6825]  __sys_sendmsg+0x160/0x210
[   80.805401][ T6825]  ? __pfx___sys_sendmsg+0x10/0x10
[   80.805422][ T6825]  do_syscall_64+0x115/0x870
[   80.805435][ T6825]  ? clear_bhb_loop+0x40/0x90
[   80.805449][ T6825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.805461][ T6825] RIP: 0033:0x7f7f7b99df99
[   80.805471][ T6825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.805482][ T6825] RSP: 002b:00007f7f7c7f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   80.805495][ T6825] RAX: ffffffffffffffda RBX: 00007f7f7bc25fa0 RCX: 00007f7f7b99df99
[   80.805502][ T6825] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 000000000000000b
[   80.805509][ T6825] RBP: 00007f7f7c7f2090 R08: 0000000000000000 R09: 0000000000000000
[   80.805515][ T6825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   80.805522][ T6825] R13: 00007f7f7bc26038 R14: 00007f7f7bc25fa0 R15: 00007ffd05b325d8
[   80.805553][ T6825]  </TASK>
[   80.911532][   T42] kauditd_printk_skb: 32 callbacks suppressed
[   80.911552][   T42] audit: type=1400 audit(1785419542.916:517): avc:  denied  { write } for  pid=6829 comm="syz.1.342" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   80.993027][ T6843] binder: 6842:6843 ioctl c0c89425 200000000200 returned -22
[   81.012892][   T42] audit: type=1400 audit(1785419543.016:518): avc:  denied  { ioctl } for  pid=6842 comm="syz.2.348" path="socket:[17707]" dev="sockfs" ino=17707 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   81.013739][ T6843] binder: BINDER_SET_CONTEXT_MGR already set
[   81.026795][ T6843] binder: 6842:6843 ioctl 4018620d 200000004a80 returned -16
[   81.051935][ T6841] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   81.056611][   T42] audit: type=1400 audit(1785419543.056:519): avc:  denied  { append } for  pid=6842 comm="syz.2.348" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   81.081334][ T6841] kvm: pic: level sensitive irq not supported
[   81.082466][ T6841] kvm: pic: non byte read
[   81.088649][ T6841] kvm: pic: level sensitive irq not supported
[   81.089033][ T6841] kvm: pic: non byte read
[   81.094685][ T6841] kvm: pic: level sensitive irq not supported
[   81.097457][ T6841] kvm: pic: non byte read
[   81.103079][ T6841] kvm: pic: level sensitive irq not supported
[   81.103620][ T6841] kvm: pic: non byte read
[   81.261386][ T6869] lo speed is unknown, defaulting to 1000
[   81.264929][ T6869] lo speed is unknown, defaulting to 1000
[   81.268339][ T6869] lo speed is unknown, defaulting to 1000
[   81.270612][ T6869] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   81.275259][ T6869] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   81.280943][ T6869] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   81.290166][ T6869] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   81.292764][ T6872] uhci_hcd 0000:00:1d.0: remove, state 4
[   81.299149][ T6872] usb usb2: USB disconnect, device number 1
[   81.306786][ T6869] lo speed is unknown, defaulting to 1000
[   81.310282][ T6869] lo speed is unknown, defaulting to 1000
[   81.312786][ T6869] lo speed is unknown, defaulting to 1000
[   81.315871][ T6869] lo speed is unknown, defaulting to 1000
[   81.316201][ T6876] netlink: 'syz.2.357': attribute type 4 has an invalid length.
[   81.373692][ T6872] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered
[   81.451879][ T6889] warning: `syz.2.363' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   81.452479][ T6877] uhci_hcd 0000:00:1d.0: UHCI Host Controller
[   81.482948][ T6877] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2
[   81.485549][ T6877] uhci_hcd 0000:00:1d.0: detected 2 ports
[   81.487509][ T6877] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0
[   81.493415][ T6877] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02
[   81.496213][ T6877] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[   81.498673][ T6877] usb usb2: Product: UHCI Host Controller
[   81.500375][   T42] audit: type=1400 audit(1785419543.506:520): avc:  denied  { ioctl } for  pid=6893 comm="syz.2.365" path="/102/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   81.508375][ T6877] usb usb2: Manufacturer: Linux syzkaller uhci_hcd
[   81.512253][ T6877] usb usb2: SerialNumber: 0000:00:1d.0
[   81.533802][   T42] audit: type=1400 audit(1785419543.536:521): avc:  denied  { create } for  pid=6899 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   81.544466][ T6877] hub 2-0:1.0: USB hub found
[   81.548539][   T42] audit: type=1400 audit(1785419543.536:522): avc:  denied  { append } for  pid=6899 comm="syz.0.368" name="vsock" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   81.557746][ T6877] hub 2-0:1.0: 2 ports detected
[   81.600953][   T40] cfg80211: failed to load regulatory.db
[   81.620847][ T6910] syzkaller0: entered promiscuous mode
[   81.622531][ T6910] syzkaller0: entered allmulticast mode
[   81.629098][   T42] audit: type=1400 audit(1785419543.636:523): avc:  denied  { unmount } for  pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   81.658415][ T6914] FAULT_INJECTION: forcing a failure.
[   81.658415][ T6914] name failslab, interval 1, probability 1, space 0, times 0
[   81.662091][ T6914] CPU: 1 UID: 0 PID: 6914 Comm: syz.2.373 Not tainted syzkaller #0 PREEMPT(full) 
[   81.662107][ T6914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   81.662114][ T6914] Call Trace:
[   81.662119][ T6914]  <TASK>
[   81.662123][ T6914]  dump_stack_lvl+0x100/0x190
[   81.662162][ T6914]  should_fail_ex.cold+0x5/0xa
[   81.662183][ T6914]  should_failslab+0xc2/0x120
[   81.662204][ T6914]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[   81.662225][ T6914]  ? __alloc_skb+0x5b7/0x710
[   81.662244][ T6914]  ? __alloc_skb+0x140/0x710
[   81.662260][ T6914]  __alloc_skb+0x140/0x710
[   81.662272][ T6914]  ? __alloc_skb+0x5b7/0x710
[   81.662285][ T6914]  ? __pfx___alloc_skb+0x10/0x10
[   81.662299][ T6914]  ? __pfx_nf_tables_abort+0x10/0x10
[   81.662331][ T6914]  netlink_ack+0x117/0xb80
[   81.662352][ T6914]  nfnetlink_rcv_batch+0x1d52/0x2880
[   81.662375][ T6914]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[   81.662391][ T6914]  ? find_held_lock+0x2b/0x80
[   81.662423][ T6914]  ? avc_has_perm_noaudit+0x145/0x3b0
[   81.662453][ T6914]  ? __nla_parse+0x40/0x60
[   81.662467][ T6914]  nfnetlink_rcv+0x3bd/0x440
[   81.662481][ T6914]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   81.662499][ T6914]  netlink_unicast+0x585/0x850
[   81.662513][ T6914]  ? __pfx_netlink_unicast+0x10/0x10
[   81.662524][ T6914]  ? __pfx_sock_has_perm+0x10/0x10
[   81.662542][ T6914]  netlink_sendmsg+0x8b0/0xda0
[   81.662555][ T6914]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.662568][ T6914]  ? selinux_socket_sendmsg+0x198/0x2f0
[   81.662587][ T6914]  ____sys_sendmsg+0xa4d/0xbe0
[   81.662608][ T6914]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.662621][ T6914]  ? __pfx_____sys_sendmsg+0x10/0x10
[   81.662644][ T6914]  ___sys_sendmsg+0x190/0x1e0
[   81.662663][ T6914]  ? __pfx____sys_sendmsg+0x10/0x10
[   81.662681][ T6914]  ? __lock_acquire+0x49f/0x1a40
[   81.662695][ T6914]  ? get_pid_task+0x106/0x250
[   81.662732][ T6914]  __sys_sendmsg+0x160/0x210
[   81.662747][ T6914]  ? __pfx___sys_sendmsg+0x10/0x10
[   81.662773][ T6914]  do_syscall_64+0x115/0x870
[   81.662791][ T6914]  ? clear_bhb_loop+0x40/0x90
[   81.662806][ T6914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.662817][ T6914] RIP: 0033:0x7f3f0999df99
[   81.662828][ T6914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.662841][ T6914] RSP: 002b:00007f3f0a80d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   81.662854][ T6914] RAX: ffffffffffffffda RBX: 00007f3f09c25fa0 RCX: 00007f3f0999df99
[   81.662860][ T6914] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[   81.662867][ T6914] RBP: 00007f3f0a80d090 R08: 0000000000000000 R09: 0000000000000000
[   81.662874][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   81.662880][ T6914] R13: 00007f3f09c26038 R14: 00007f3f09c25fa0 R15: 00007ffdba31fba8
[   81.662894][ T6914]  </TASK>
[   81.772447][   T42] audit: type=1400 audit(1785419543.776:524): avc:  denied  { read write } for  pid=6915 comm="syz.1.374" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   81.779527][   T42] audit: type=1400 audit(1785419543.776:525): avc:  denied  { open } for  pid=6915 comm="syz.1.374" path="/101/file0/file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   81.787829][   T42] audit: type=1400 audit(1785419543.786:526): avc:  denied  { create } for  pid=6919 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   81.933626][ T6941] syzkaller1: entered promiscuous mode
[   81.942564][ T6941] syzkaller1: entered allmulticast mode
[   82.184953][ T6966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.230481][ T6970] FAULT_INJECTION: forcing a failure.
[   82.230481][ T6970] name failslab, interval 1, probability 1, space 0, times 0
[   82.237265][ T6970] CPU: 3 UID: 0 PID: 6970 Comm: syz.2.387 Not tainted syzkaller #0 PREEMPT(full) 
[   82.237291][ T6970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   82.237303][ T6970] Call Trace:
[   82.237311][ T6970]  <TASK>
[   82.237318][ T6970]  dump_stack_lvl+0x100/0x190
[   82.237374][ T6970]  should_fail_ex.cold+0x5/0xa
[   82.237402][ T6970]  ? __pfx_ref_tracker_alloc+0x10/0x10
[   82.237444][ T6970]  should_failslab+0xc2/0x120
[   82.237476][ T6970]  kmem_cache_alloc_noprof+0x91/0x6a0
[   82.237507][ T6970]  ? skb_clone+0x190/0x400
[   82.237573][ T6970]  skb_clone+0x190/0x400
[   82.237596][ T6970]  netlink_deliver_tap+0xaed/0xcc0
[   82.237637][ T6970]  netlink_dump+0x909/0xd00
[   82.237666][ T6970]  ? __pfx_netlink_dump+0x10/0x10
[   82.237705][ T6970]  __netlink_dump_start+0x6d6/0x990
[   82.237734][ T6970]  ? __pfx_rtnl_dump_all+0x10/0x10
[   82.237751][ T6970]  rtnetlink_rcv_msg+0xb3e/0xe90
[   82.237771][ T6970]  ? __pfx_rtnl_dump_all+0x10/0x10
[   82.237789][ T6970]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   82.237811][ T6970]  ? __pfx_rtnl_dumpit+0x10/0x10
[   82.237828][ T6970]  ? __pfx_rtnl_dump_all+0x10/0x10
[   82.237850][ T6970]  ? ref_tracker_free+0x37e/0x6c0
[   82.237878][ T6970]  netlink_rcv_skb+0x159/0x420
[   82.237896][ T6970]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   82.237920][ T6970]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   82.237947][ T6970]  ? netlink_deliver_tap+0x1ae/0xcc0
[   82.237979][ T6970]  netlink_unicast+0x585/0x850
[   82.238000][ T6970]  ? __pfx_netlink_unicast+0x10/0x10
[   82.238026][ T6970]  netlink_sendmsg+0x8b0/0xda0
[   82.238048][ T6970]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.238069][ T6970]  ? selinux_socket_sendmsg+0x198/0x2f0
[   82.238099][ T6970]  sock_write_iter+0x53a/0x5b0
[   82.238134][ T6970]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.238153][ T6970]  ? __pfx_sock_write_iter+0x10/0x10
[   82.238186][ T6970]  ? bpf_lsm_file_permission+0x9/0x10
[   82.238242][ T6970]  ? security_file_permission+0x76/0x210
[   82.238262][ T6970]  ? rw_verify_area+0xce/0x6d0
[   82.238297][ T6970]  vfs_write+0x6ac/0x1050
[   82.238325][ T6970]  ? __pfx_sock_write_iter+0x10/0x10
[   82.238353][ T6970]  ? __pfx_vfs_write+0x10/0x10
[   82.238378][ T6970]  ? find_held_lock+0x2b/0x80
[   82.238436][ T6970]  ksys_write+0x1f8/0x250
[   82.238464][ T6970]  ? __pfx_ksys_write+0x10/0x10
[   82.238499][ T6970]  do_syscall_64+0x115/0x870
[   82.238526][ T6970]  ? clear_bhb_loop+0x40/0x90
[   82.238550][ T6970]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.238568][ T6970] RIP: 0033:0x7f3f0999df99
[   82.238585][ T6970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.238602][ T6970] RSP: 002b:00007f3f0a80d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   82.238621][ T6970] RAX: ffffffffffffffda RBX: 00007f3f09c25fa0 RCX: 00007f3f0999df99
[   82.238634][ T6970] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003
[   82.238645][ T6970] RBP: 00007f3f0a80d090 R08: 0000000000000000 R09: 0000000000000000
[   82.238657][ T6970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   82.238667][ T6970] R13: 00007f3f09c26038 R14: 00007f3f09c25fa0 R15: 00007ffdba31fba8
[   82.238692][ T6970]  </TASK>
[   82.820577][ T7004] FAULT_INJECTION: forcing a failure.
[   82.820577][ T7004] name failslab, interval 1, probability 1, space 0, times 0
[   82.827893][ T7004] CPU: 2 UID: 0 PID: 7004 Comm: syz.1.396 Not tainted syzkaller #0 PREEMPT(full) 
[   82.827917][ T7004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   82.827927][ T7004] Call Trace:
[   82.827934][ T7004]  <TASK>
[   82.827941][ T7004]  dump_stack_lvl+0x100/0x190
[   82.827971][ T7004]  should_fail_ex.cold+0x5/0xa
[   82.827994][ T7004]  should_failslab+0xc2/0x120
[   82.828018][ T7004]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[   82.828042][ T7004]  ? __alloc_skb+0x140/0x710
[   82.828066][ T7004]  __alloc_skb+0x140/0x710
[   82.828082][ T7004]  ? __alloc_skb+0x5b7/0x710
[   82.828120][ T7004]  ? __pfx___alloc_skb+0x10/0x10
[   82.828143][ T7004]  hci_sock_sendmsg+0x1b01/0x2620
[   82.828176][ T7004]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[   82.828193][ T7004]  ? selinux_socket_sendmsg+0x198/0x2f0
[   82.828221][ T7004]  sock_write_iter+0x53a/0x5b0
[   82.828247][ T7004]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[   82.828266][ T7004]  ? __pfx_sock_write_iter+0x10/0x10
[   82.828299][ T7004]  ? bpf_lsm_file_permission+0x9/0x10
[   82.828327][ T7004]  ? security_file_permission+0x76/0x210
[   82.828344][ T7004]  ? rw_verify_area+0xce/0x6d0
[   82.828369][ T7004]  vfs_write+0x6ac/0x1050
[   82.828394][ T7004]  ? __pfx_sock_write_iter+0x10/0x10
[   82.828413][ T7004]  ? __pfx_vfs_write+0x10/0x10
[   82.828429][ T7004]  ? find_held_lock+0x2b/0x80
[   82.828457][ T7004]  ksys_write+0x1f8/0x250
[   82.828475][ T7004]  ? __pfx_ksys_write+0x10/0x10
[   82.828497][ T7004]  do_syscall_64+0x115/0x870
[   82.828510][ T7004]  ? clear_bhb_loop+0x40/0x90
[   82.828524][ T7004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.828536][ T7004] RIP: 0033:0x7f4406b9df99
[   82.828546][ T7004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.828557][ T7004] RSP: 002b:00007f4404df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   82.828570][ T7004] RAX: ffffffffffffffda RBX: 00007f4406e25fa0 RCX: 00007f4406b9df99
[   82.828577][ T7004] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000017
[   82.828584][ T7004] RBP: 00007f4404df6090 R08: 0000000000000000 R09: 0000000000000000
[   82.828590][ T7004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   82.828597][ T7004] R13: 00007f4406e26038 R14: 00007f4406e25fa0 R15: 00007ffeab9598c8
[   82.828612][ T7004]  </TASK>
[   82.829485][ T7004] Bluetooth: MGMT ver 1.23
[   83.174621][ T5095] Bluetooth: hci2: ACL packet for unknown connection handle 201
[   83.232272][ T7026] usb usb8: usbfs: process 7026 (syz.1.405) did not claim interface 0 before use
[   83.238322][ T7026] FAULT_INJECTION: forcing a failure.
[   83.238322][ T7026] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   83.242358][ T7026] CPU: 1 UID: 0 PID: 7026 Comm: syz.1.405 Not tainted syzkaller #0 PREEMPT(full) 
[   83.242374][ T7026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   83.242380][ T7026] Call Trace:
[   83.242392][ T7026]  <TASK>
[   83.242400][ T7026]  dump_stack_lvl+0x100/0x190
[   83.242452][ T7026]  should_fail_ex.cold+0x5/0xa
[   83.242469][ T7026]  _copy_from_user+0x2e/0xd0
[   83.242492][ T7026]  kstrtouint_from_user+0xd6/0x1d0
[   83.242504][ T7026]  ? __pfx_kstrtouint_from_user+0x10/0x10
[   83.242516][ T7026]  ? __lock_acquire+0x49f/0x1a40
[   83.242541][ T7026]  proc_fail_nth_write+0x83/0x220
[   83.242565][ T7026]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   83.242600][ T7026]  vfs_write+0x2aa/0x1050
[   83.242624][ T7026]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   83.242643][ T7026]  ? __pfx_vfs_write+0x10/0x10
[   83.242660][ T7026]  ? __fget_files+0x215/0x3d0
[   83.242675][ T7026]  ? __fget_files+0x21f/0x3d0
[   83.242691][ T7026]  ksys_write+0x12a/0x250
[   83.242708][ T7026]  ? __pfx_ksys_write+0x10/0x10
[   83.242730][ T7026]  do_syscall_64+0x115/0x870
[   83.242759][ T7026]  ? clear_bhb_loop+0x40/0x90
[   83.242772][ T7026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.242784][ T7026] RIP: 0033:0x7f4406b5e7ce
[   83.242795][ T7026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   83.242806][ T7026] RSP: 002b:00007f4404df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   83.242821][ T7026] RAX: ffffffffffffffda RBX: 00007f4404df66c0 RCX: 00007f4406b5e7ce
[   83.242828][ T7026] RDX: 0000000000000001 RSI: 00007f4404df60a0 RDI: 0000000000000004
[   83.242835][ T7026] RBP: 00007f4404df6090 R08: 0000000000000000 R09: 0000000000000000
[   83.242841][ T7026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   83.242847][ T7026] R13: 00007f4406e26038 R14: 00007f4406e25fa0 R15: 00007ffeab9598c8
[   83.242861][ T7026]  </TASK>
[   83.488317][ T7035] syz.2.409 uses obsolete (PF_INET,SOCK_PACKET)
[   83.979715][ T6928] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[   83.982727][ T6928] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[   84.340224][ T7052] FAULT_INJECTION: forcing a failure.
[   84.340224][ T7052] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   84.344770][ T7052] CPU: 0 UID: 0 PID: 7052 Comm: syz.1.416 Not tainted syzkaller #0 PREEMPT(full) 
[   84.344788][ T7052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   84.344797][ T7052] Call Trace:
[   84.344812][ T7052]  <TASK>
[   84.344817][ T7052]  dump_stack_lvl+0x100/0x190
[   84.344889][ T7052]  should_fail_ex.cold+0x5/0xa
[   84.344910][ T7052]  _copy_to_user+0x32/0xd0
[   84.344937][ T7052]  simple_read_from_buffer+0xcb/0x170
[   84.344956][ T7052]  proc_fail_nth_read+0x1af/0x230
[   84.344975][ T7052]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   84.344993][ T7052]  ? rw_verify_area+0xce/0x6d0
[   84.345019][ T7052]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   84.345037][ T7052]  vfs_read+0x1e4/0xb40
[   84.345056][ T7052]  ? __pfx_vfs_read+0x10/0x10
[   84.345100][ T7052]  ? __fget_files+0x215/0x3d0
[   84.345128][ T7052]  ? __fget_files+0x21f/0x3d0
[   84.345144][ T7052]  ksys_read+0x12a/0x250
[   84.345161][ T7052]  ? __pfx_ksys_read+0x10/0x10
[   84.345183][ T7052]  do_syscall_64+0x115/0x870
[   84.345219][ T7052]  ? clear_bhb_loop+0x40/0x90
[   84.345233][ T7052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.345245][ T7052] RIP: 0033:0x7f4406b5e7ce
[   84.345255][ T7052] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   84.345266][ T7052] RSP: 002b:00007f4404df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   84.345286][ T7052] RAX: ffffffffffffffda RBX: 00007f4404df66c0 RCX: 00007f4406b5e7ce
[   84.345293][ T7052] RDX: 000000000000000f RSI: 00007f4404df60a0 RDI: 0000000000000003
[   84.345300][ T7052] RBP: 00007f4404df6090 R08: 0000000000000000 R09: 0000000000000000
[   84.345306][ T7052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.345312][ T7052] R13: 00007f4406e26038 R14: 00007f4406e25fa0 R15: 00007ffeab9598c8
[   84.345326][ T7052]  </TASK>
[   84.545308][ T5584] net_ratelimit: 32 callbacks suppressed
[   84.545328][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   84.655309][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   84.765239][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   84.861464][ T6928] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   84.863374][ T6928] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   84.875263][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   84.954126][ T6928] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   84.963161][ T6928] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   84.985783][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   85.033158][ T7074] FAULT_INJECTION: forcing a failure.
[   85.033158][ T7074] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   85.037359][ T7074] CPU: 1 UID: 0 PID: 7074 Comm: syz.1.424 Not tainted syzkaller #0 PREEMPT(full) 
[   85.037375][ T7074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   85.037383][ T7074] Call Trace:
[   85.037387][ T7074]  <TASK>
[   85.037391][ T7074]  dump_stack_lvl+0x100/0x190
[   85.037411][ T7074]  should_fail_ex.cold+0x5/0xa
[   85.037426][ T7074]  _copy_from_user+0x2e/0xd0
[   85.037443][ T7074]  kstrtouint_from_user+0xd6/0x1d0
[   85.037455][ T7074]  ? __pfx_kstrtouint_from_user+0x10/0x10
[   85.037466][ T7074]  ? __lock_acquire+0x49f/0x1a40
[   85.037612][ T7074]  proc_fail_nth_write+0x83/0x220
[   85.037635][ T7074]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   85.037674][ T7074]  vfs_write+0x2aa/0x1050
[   85.037693][ T7074]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   85.037712][ T7074]  ? __pfx_vfs_write+0x10/0x10
[   85.037729][ T7074]  ? __fget_files+0x215/0x3d0
[   85.037744][ T7074]  ? __fget_files+0x21f/0x3d0
[   85.037760][ T7074]  ksys_write+0x12a/0x250
[   85.037777][ T7074]  ? __pfx_ksys_write+0x10/0x10
[   85.037799][ T7074]  do_syscall_64+0x115/0x870
[   85.037812][ T7074]  ? clear_bhb_loop+0x40/0x90
[   85.037826][ T7074]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.037838][ T7074] RIP: 0033:0x7f4406b5e7ce
[   85.037848][ T7074] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   85.037858][ T7074] RSP: 002b:00007f4404df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   85.037870][ T7074] RAX: ffffffffffffffda RBX: 00007f4404df66c0 RCX: 00007f4406b5e7ce
[   85.037877][ T7074] RDX: 0000000000000001 RSI: 00007f4404df60a0 RDI: 0000000000000004
[   85.037883][ T7074] RBP: 00007f4404df6090 R08: 0000000000000000 R09: 0000000000000000
[   85.037889][ T7074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   85.037896][ T7074] R13: 00007f4406e26038 R14: 00007f4406e25fa0 R15: 00007ffeab9598c8
[   85.037910][ T7074]  </TASK>
[   85.125290][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   85.245591][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   85.358837][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   85.465838][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   85.532160][ T7113] FAULT_INJECTION: forcing a failure.
[   85.532160][ T7113] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   85.539222][ T7113] CPU: 0 UID: 0 PID: 7113 Comm: syz.0.438 Not tainted syzkaller #0 PREEMPT(full) 
[   85.539249][ T7113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   85.539259][ T7113] Call Trace:
[   85.539267][ T7113]  <TASK>
[   85.539273][ T7113]  dump_stack_lvl+0x100/0x190
[   85.539322][ T7113]  should_fail_ex.cold+0x5/0xa
[   85.539343][ T7113]  _copy_to_user+0x32/0xd0
[   85.539364][ T7113]  simple_read_from_buffer+0xcb/0x170
[   85.539380][ T7113]  proc_fail_nth_read+0x1af/0x230
[   85.539399][ T7113]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   85.539418][ T7113]  ? rw_verify_area+0xce/0x6d0
[   85.539440][ T7113]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   85.539458][ T7113]  vfs_read+0x1e4/0xb40
[   85.539484][ T7113]  ? __pfx_vfs_read+0x10/0x10
[   85.539506][ T7113]  ? __fget_files+0x215/0x3d0
[   85.539527][ T7113]  ? __fget_files+0x21f/0x3d0
[   85.539551][ T7113]  ksys_read+0x12a/0x250
[   85.539577][ T7113]  ? __pfx_ksys_read+0x10/0x10
[   85.539606][ T7113]  do_syscall_64+0x115/0x870
[   85.539628][ T7113]  ? clear_bhb_loop+0x40/0x90
[   85.539643][ T7113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.539655][ T7113] RIP: 0033:0x7fd0e935e7ce
[   85.539666][ T7113] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   85.539677][ T7113] RSP: 002b:00007fd0ea2bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   85.539690][ T7113] RAX: ffffffffffffffda RBX: 00007fd0ea2be6c0 RCX: 00007fd0e935e7ce
[   85.539698][ T7113] RDX: 000000000000000f RSI: 00007fd0ea2be0a0 RDI: 0000000000000008
[   85.539704][ T7113] RBP: 00007fd0ea2be090 R08: 0000000000000000 R09: 0000000000000000
[   85.539711][ T7113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   85.539718][ T7113] R13: 00007fd0e9626038 R14: 00007fd0e9625fa0 R15: 00007fff245902c8
[   85.539732][ T7113]  </TASK>
[   85.575321][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   85.696324][ T7142] netlink: 'syz.0.442': attribute type 1 has an invalid length.
[   85.709258][ T7142] bond1: entered promiscuous mode
[   85.711204][ T7142] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.719603][ T7142] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   85.723503][ T7142] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   85.728293][ T7142] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[   85.734092][ T7142] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   85.772171][ T7146] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   85.776073][ T7146] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   85.780121][ T7146] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   86.293589][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'.
[   86.412326][   T42] kauditd_printk_skb: 41 callbacks suppressed
[   86.412341][   T42] audit: type=1400 audit(1785419548.416:568): avc:  denied  { create } for  pid=7160 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   86.483412][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.452'.
[   86.487566][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.452'.
[   86.492355][ T7161] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22)
[   86.534045][ T7167] FAULT_INJECTION: forcing a failure.
[   86.534045][ T7167] name failslab, interval 1, probability 1, space 0, times 0
[   86.540028][ T7167] CPU: 2 UID: 0 PID: 7167 Comm: syz.3.453 Not tainted syzkaller #0 PREEMPT(full) 
[   86.540046][ T7167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   86.540052][ T7167] Call Trace:
[   86.540063][ T7167]  <TASK>
[   86.540068][ T7167]  dump_stack_lvl+0x100/0x190
[   86.540138][ T7167]  should_fail_ex.cold+0x5/0xa
[   86.540154][ T7167]  should_failslab+0xc2/0x120
[   86.540192][ T7167]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[   86.540215][ T7167]  ? security_netlbl_sid_to_secattr+0x1d8/0x4d0
[   86.540241][ T7167]  kstrdup+0x51/0xe0
[   86.540260][ T7167]  security_netlbl_sid_to_secattr+0x1d8/0x4d0
[   86.540276][ T7167]  selinux_netlbl_sock_genattr+0x128/0x4e0
[   86.540295][ T7167]  selinux_netlbl_socket_post_create+0xb0/0x1c0
[   86.540315][ T7167]  selinux_socket_post_create+0x368/0x7e0
[   86.540333][ T7167]  ? __pfx_selinux_socket_post_create+0x10/0x10
[   86.540348][ T7167]  ? udp_init_sock+0x384/0x450
[   86.540389][ T7167]  ? inet_create+0x962/0x1060
[   86.540405][ T7167]  security_socket_post_create+0xaf/0x270
[   86.540423][ T7167]  __sock_create+0x70b/0x860
[   86.540459][ T7167]  udp_sock_create4+0xa6/0x450
[   86.540470][ T7167]  ? __pfx_udp_sock_create4+0x10/0x10
[   86.540481][ T7167]  ? preempt_schedule_common+0x42/0xc0
[   86.540512][ T7167]  ? preempt_schedule_thunk+0x16/0x40
[   86.540529][ T7167]  sctp_udp_sock_start+0x113/0x440
[   86.540557][ T7167]  ? __pfx_sctp_udp_sock_start+0x10/0x10
[   86.540574][ T7167]  ? __pfx___mutex_lock+0x10/0x10
[   86.540598][ T7167]  proc_sctp_do_udp_port+0x38e/0x460
[   86.540615][ T7167]  ? __pfx_proc_sctp_do_udp_port+0x10/0x10
[   86.540631][ T7167]  ? __kasan_kmalloc+0xaa/0xb0
[   86.540649][ T7167]  ? proc_sys_call_handler+0x2c7/0x5a0
[   86.540670][ T7167]  proc_sys_call_handler+0x47f/0x5a0
[   86.540684][ T7167]  ? __pfx_proc_sys_call_handler+0x10/0x10
[   86.540703][ T7167]  vfs_write+0x6ac/0x1050
[   86.540722][ T7167]  ? __pfx_proc_sys_write+0x10/0x10
[   86.540736][ T7167]  ? __pfx_vfs_write+0x10/0x10
[   86.540763][ T7167]  ksys_write+0x12a/0x250
[   86.540781][ T7167]  ? __pfx_ksys_write+0x10/0x10
[   86.540807][ T7167]  do_syscall_64+0x115/0x870
[   86.540820][ T7167]  ? clear_bhb_loop+0x40/0x90
[   86.540834][ T7167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.540846][ T7167] RIP: 0033:0x7f7f7b99df99
[   86.540856][ T7167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.540867][ T7167] RSP: 002b:00007f7f7c7f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   86.540884][ T7167] RAX: ffffffffffffffda RBX: 00007f7f7bc25fa0 RCX: 00007f7f7b99df99
[   86.540892][ T7167] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003
[   86.540898][ T7167] RBP: 00007f7f7c7f2090 R08: 0000000000000000 R09: 0000000000000000
[   86.540904][ T7167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   86.540911][ T7167] R13: 00007f7f7bc26038 R14: 00007f7f7bc25fa0 R15: 00007ffd05b325d8
[   86.540926][ T7167]  </TASK>
[   86.541226][ T7167] sctp: Failed to create the SCTP UDP tunneling v4 sock
[   86.785498][ T7175] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22)
[   86.972916][ T7191] FAULT_INJECTION: forcing a failure.
[   86.972916][ T7191] name failslab, interval 1, probability 1, space 0, times 0
[   86.978020][ T7191] CPU: 2 UID: 0 PID: 7191 Comm: syz.0.462 Not tainted syzkaller #0 PREEMPT(full) 
[   86.978037][ T7191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   86.978044][ T7191] Call Trace:
[   86.978049][ T7191]  <TASK>
[   86.978054][ T7191]  dump_stack_lvl+0x100/0x190
[   86.978074][ T7191]  should_fail_ex.cold+0x5/0xa
[   86.978090][ T7191]  should_failslab+0xc2/0x120
[   86.978106][ T7191]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[   86.978122][ T7191]  ? __alloc_skb+0x5b7/0x710
[   86.978136][ T7191]  ? __alloc_skb+0x140/0x710
[   86.978151][ T7191]  __alloc_skb+0x140/0x710
[   86.978163][ T7191]  ? __alloc_skb+0x5b7/0x710
[   86.978176][ T7191]  ? __pfx___alloc_skb+0x10/0x10
[   86.978189][ T7191]  ? find_held_lock+0x2b/0x80
[   86.978224][ T7191]  ? avc_has_perm_noaudit+0x11e/0x3b0
[   86.978238][ T7191]  ? avc_has_perm_noaudit+0x11e/0x3b0
[   86.978253][ T7191]  alloc_skb_with_frags+0xdd/0x760
[   86.978268][ T7191]  ? avc_has_perm_noaudit+0x145/0x3b0
[   86.978285][ T7191]  sock_alloc_send_pskb+0x801/0x980
[   86.978302][ T7191]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[   86.978315][ T7191]  ? sock_has_perm+0x25a/0x2f0
[   86.978330][ T7191]  ? __pfx_sock_has_perm+0x10/0x10
[   86.978349][ T7191]  hci_sock_sendmsg+0x1c7/0x2620
[   86.978372][ T7191]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[   86.978385][ T7191]  ? selinux_socket_sendmsg+0x198/0x2f0
[   86.978404][ T7191]  sock_write_iter+0x53a/0x5b0
[   86.978421][ T7191]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[   86.978434][ T7191]  ? __pfx_sock_write_iter+0x10/0x10
[   86.978455][ T7191]  ? bpf_lsm_file_permission+0x9/0x10
[   86.978484][ T7191]  ? security_file_permission+0x76/0x210
[   86.978496][ T7191]  ? rw_verify_area+0xce/0x6d0
[   86.978514][ T7191]  vfs_write+0x6ac/0x1050
[   86.978532][ T7191]  ? __pfx_sock_write_iter+0x10/0x10
[   86.978551][ T7191]  ? __pfx_vfs_write+0x10/0x10
[   86.978567][ T7191]  ? find_held_lock+0x2b/0x80
[   86.978593][ T7191]  ksys_write+0x1f8/0x250
[   86.978611][ T7191]  ? __pfx_ksys_write+0x10/0x10
[   86.978632][ T7191]  do_syscall_64+0x115/0x870
[   86.978645][ T7191]  ? clear_bhb_loop+0x40/0x90
[   86.978659][ T7191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.978671][ T7191] RIP: 0033:0x7fd0e939df99
[   86.978681][ T7191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.978698][ T7191] RSP: 002b:00007fd0ea2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   86.978711][ T7191] RAX: ffffffffffffffda RBX: 00007fd0e9625fa0 RCX: 00007fd0e939df99
[   86.978718][ T7191] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000004
[   86.978725][ T7191] RBP: 00007fd0ea2be090 R08: 0000000000000000 R09: 0000000000000000
[   86.978731][ T7191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   86.978738][ T7191] R13: 00007fd0e9626038 R14: 00007fd0e9625fa0 R15: 00007fff245902c8
[   86.978752][ T7191]  </TASK>
[   87.076664][ T5984] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   87.225319][ T5984] usb 7-1: Using ep0 maxpacket: 8
[   87.228761][ T5984] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.232872][ T5984] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.236354][ T5984] usb 7-1: config 0 interface 0 has no altsetting 0
[   87.238478][ T5984] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   87.241335][ T5984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.246389][ T5984] usb 7-1: config 0 descriptor??
[   87.414549][   T42] audit: type=1400 audit(1785419549.416:569): avc:  denied  { mounton } for  pid=7204 comm="syz.3.468" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   87.424376][ T7205] affs: No valid root block on device nullb0
[   87.659537][ T5984] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[   87.661827][ T5984] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[   87.664015][ T5984] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[   87.666177][ T5984] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[   87.668419][ T5984] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[   87.671084][ T5984] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[   87.855001][   T42] audit: type=1400 audit(1785419549.856:570): avc:  denied  { create } for  pid=7172 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   87.865279][   T42] audit: type=1400 audit(1785419549.866:571): avc:  denied  { write } for  pid=7172 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   88.286555][ T5740] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   88.297231][ T5984] usb 7-1: USB disconnect, device number 6
[   88.435581][ T5740] usb 5-1: Using ep0 maxpacket: 8
[   88.439063][ T5740] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   88.442175][ T5740] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   88.445084][ T5740] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   88.448234][ T5740] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   88.452227][ T5740] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   88.454099][ T7220] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   88.454955][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.672917][ T5740] usb 5-1: GET_CAPABILITIES returned 0
[   88.674621][ T5740] usbtmc 5-1:16.0: can't read capabilities
[   88.864619][   T42] audit: type=1400 audit(1785419550.866:572): avc:  denied  { watch } for  pid=7240 comm="syz.2.483" path="/132/file0" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   88.882022][   T42] audit: type=1400 audit(1785419550.886:573): avc:  denied  { watch } for  pid=7242 comm="syz.3.484" path="/121/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[   88.903712][ T7243] FAULT_INJECTION: forcing a failure.
[   88.903712][ T7243] name failslab, interval 1, probability 1, space 0, times 0
[   88.908634][ T7243] CPU: 0 UID: 0 PID: 7243 Comm: syz.3.484 Not tainted syzkaller #0 PREEMPT(full) 
[   88.908653][ T7243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   88.908660][ T7243] Call Trace:
[   88.908665][ T7243]  <TASK>
[   88.908670][ T7243]  dump_stack_lvl+0x100/0x190
[   88.908691][ T7243]  should_fail_ex.cold+0x5/0xa
[   88.908706][ T7243]  should_failslab+0xc2/0x120
[   88.908723][ T7243]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[   88.908738][ T7243]  ? __alloc_skb+0x140/0x710
[   88.908754][ T7243]  __alloc_skb+0x140/0x710
[   88.908767][ T7243]  ? __alloc_skb+0x5b7/0x710
[   88.908779][ T7243]  ? __pfx___alloc_skb+0x10/0x10
[   88.908793][ T7243]  ? netlink_has_listeners+0x21b/0x430
[   88.908820][ T7243]  ? netlink_has_listeners+0x21b/0x430
[   88.908841][ T7243]  alloc_uevent_skb+0x7d/0x210
[   88.908871][ T7243]  kobject_uevent_env+0xd2d/0x18b0
[   88.908892][ T7243]  ? bus_to_subsys+0x114/0x150
[   88.908920][ T7243]  device_del+0x605/0x9b0
[   88.908935][ T7243]  ? __pfx_device_del+0x10/0x10
[   88.908952][ T7243]  device_unregister+0x1d/0xe0
[   88.908966][ T7243]  bdi_unregister+0x445/0x630
[   88.908980][ T7243]  ? __pfx_bdi_unregister+0x10/0x10
[   88.908993][ T7243]  ? generic_shutdown_super+0x1f2/0x360
[   88.909014][ T7243]  ? up_write+0x2e5/0x5c0
[   88.909031][ T7243]  generic_shutdown_super+0x2a8/0x360
[   88.909049][ T7243]  kill_anon_super+0x3a/0x60
[   88.909064][ T7243]  fuse_kill_sb_anon+0x1e8/0x350
[   88.909102][ T7243]  deactivate_locked_super+0xc1/0x1b0
[   88.909120][ T7243]  deactivate_super+0xe7/0x110
[   88.909137][ T7243]  cleanup_mnt+0x21f/0x450
[   88.909150][ T7243]  task_work_run+0x150/0x240
[   88.909172][ T7243]  ? __pfx_task_work_run+0x10/0x10
[   88.909188][ T7243]  exit_to_user_mode_loop+0x1d8/0x6f0
[   88.909210][ T7243]  ? rcu_is_watching+0x12/0xc0
[   88.909229][ T7243]  do_syscall_64+0x666/0x870
[   88.909242][ T7243]  ? clear_bhb_loop+0x40/0x90
[   88.909256][ T7243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.909268][ T7243] RIP: 0033:0x7f7f7b99df99
[   88.909279][ T7243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.909291][ T7243] RSP: 002b:00007f7f7c7f2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   88.909303][ T7243] RAX: 0000000000000000 RBX: 00007f7f7bc25fa0 RCX: 00007f7f7b99df99
[   88.909310][ T7243] RDX: 0000000000000000 RSI: 000000000000000b RDI: 00002000000002c0
[   88.909316][ T7243] RBP: 00007f7f7c7f2090 R08: 0000000000000000 R09: 0000000000000000
[   88.909323][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   88.909329][ T7243] R13: 00007f7f7bc26038 R14: 00007f7f7bc25fa0 R15: 00007ffd05b325d8
[   88.909343][ T7243]  </TASK>
[   89.101175][ T7250] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   89.164662][ T5740] usb 5-1: USB disconnect, device number 4
[   89.175671][ T7254] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   89.204876][   T42] audit: type=1800 audit(1785419551.206:574): pid=7256 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.489" name="enable" dev="configfs" ino=21682 res=0 errno=0
[   89.232959][   T42] audit: type=1400 audit(1785419551.236:575): avc:  denied  { connect } for  pid=7255 comm="syz.3.489" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   89.257892][   T42] audit: type=1400 audit(1785419551.266:576): avc:  denied  { append } for  pid=7258 comm="syz.2.490" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   89.271217][   T42] audit: type=1400 audit(1785419551.276:577): avc:  denied  { read write } for  pid=7258 comm="syz.2.490" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   89.274283][   T29] hid-generic 0362:07FF:7FFFFFFF.0006: item fetching failed at offset 0/1
[   89.283078][ T7259] loop3: detected capacity change from 0 to 7
[   89.284181][   T29] hid-generic 0362:07FF:7FFFFFFF.0006: probe with driver hid-generic failed with error -22
[   89.290898][ T7259] Dev loop3: unable to read RDB block 7
[   89.293667][ T7259]  loop3: unable to read partition table
[   89.296608][ T7259] loop3: partition table beyond EOD, truncated
[   89.299325][ T7259] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[   89.565783][ T6046] net_ratelimit: 34 callbacks suppressed
[   89.565801][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   89.675265][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   89.796330][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   89.833386][ T7257] bridge0: port 3(syz_tun) entered disabled state
[   89.852907][ T7257] syz_tun (unregistering): left allmulticast mode
[   89.861589][ T7257] syz_tun (unregistering): left promiscuous mode
[   89.864106][ T7257] bridge0: port 3(syz_tun) entered disabled state
[   89.871414][ T1166] smbdirect: ib_dev[syz1] removed
[   89.905060][   T29] infiniband syz1: ib_query_port failed (-19)
[   89.907138][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   89.966075][ T7269] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   90.015473][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   90.110925][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.500'.
[   90.114891][ T7275] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22)
[   90.135292][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   90.165878][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   90.173538][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   90.181540][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.185508][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   90.188470][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   90.196675][ T5095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   90.199085][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   90.200844][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'.
[   90.201992][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.206591][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   90.208988][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   90.212589][ T7275] sctp: [Deprecated]: syz.0.500 (pid 7275) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.212589][ T7275] Use struct sctp_sack_info instead
[   90.245985][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   90.366853][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   90.380858][ T7280] lo speed is unknown, defaulting to 1000
[   90.476566][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   90.548494][ T7305] netlink: 'syz.2.505': attribute type 21 has an invalid length.
[   90.557634][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'.
[   90.579984][ T7280] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.582563][ T7305] netlink: 'syz.2.505': attribute type 21 has an invalid length.
[   90.583626][ T7280] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.585062][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'.
[   90.587649][ T7280] bridge_slave_0: entered allmulticast mode
[   90.594326][ T7280] bridge_slave_0: entered promiscuous mode
[   90.598033][ T5584] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.602429][ T5584] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.604178][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'.
[   90.608974][ T7280] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.612275][ T7280] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.615104][ T7280] bridge_slave_1: entered allmulticast mode
[   90.618924][ T7280] bridge_slave_1: entered promiscuous mode
[   90.622479][ T5584] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.627205][ T5584] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.632046][ T7314] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   90.645826][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   90.671946][ T7280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.676710][ T7280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.691907][ T7280] team0: Port device team_slave_0 added
[   90.695538][ T7280] team0: Port device team_slave_1 added
[   90.715492][ T7280] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.717773][ T7280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.725465][ T7280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.755540][ T5584] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.767883][ T7280] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.770327][ T7280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.779026][ T7280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.810944][ T7280] hsr_slave_0: entered promiscuous mode
[   90.813222][ T7280] hsr_slave_1: entered promiscuous mode
[   90.815461][ T7280] debugfs: 'hsr0' already exists in 'hsr'
[   90.817302][ T7280] Cannot create hsr debugfs directory
[   90.819113][ T7320] netlink: 56 bytes leftover after parsing attributes in process `syz.0.509'.
[   90.864416][ T5584] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.899086][ T7326] ieee802154 phy0 wpan0: encryption failed: -22
[   90.974205][ T5584] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.002915][ T7280] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   91.007001][ T7280] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   91.009672][ T7280] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   91.013751][ T7280] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   91.016647][ T7280] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   91.020605][ T7280] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   91.023383][ T7280] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.029600][ T7280] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   91.073362][ T5584] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.125792][ T7280] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.140054][ T7280] 8021q: adding VLAN 0 to HW filter on device team0
[   91.160360][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.162872][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.171260][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.173539][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.244690][ T7338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7338 comm=syz.0.514
[   91.251590][ T5584] bridge_slave_1: left allmulticast mode
[   91.253396][ T5584] bridge_slave_1: left promiscuous mode
[   91.256146][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.261223][ T5584] bridge_slave_0: left allmulticast mode
[   91.263095][ T5584] bridge_slave_0: left promiscuous mode
[   91.264898][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.377123][ T7344] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   91.410613][ T5584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.415009][ T5584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.420297][ T5584] bond0 (unregistering): Released all slaves
[   91.566999][ T7356] FAULT_INJECTION: forcing a failure.
[   91.566999][ T7356] name failslab, interval 1, probability 1, space 0, times 0
[   91.571035][ T7356] CPU: 2 UID: 0 PID: 7356 Comm: syz.0.519 Not tainted syzkaller #0 PREEMPT(full) 
[   91.571053][ T7356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   91.571060][ T7356] Call Trace:
[   91.571065][ T7356]  <TASK>
[   91.571070][ T7356]  dump_stack_lvl+0x100/0x190
[   91.571109][ T7356]  should_fail_ex.cold+0x5/0xa
[   91.571130][ T7356]  should_failslab+0xc2/0x120
[   91.571152][ T7356]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[   91.571172][ T7356]  ? __alloc_skb+0x140/0x710
[   91.571201][ T7356]  __alloc_skb+0x140/0x710
[   91.571213][ T7356]  ? __alloc_skb+0x5b7/0x710
[   91.571225][ T7356]  ? __pfx___alloc_skb+0x10/0x10
[   91.571243][ T7356]  hci_sock_sendmsg+0x1b01/0x2620
[   91.571266][ T7356]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[   91.571279][ T7356]  ? selinux_socket_sendmsg+0x198/0x2f0
[   91.571304][ T7356]  sock_write_iter+0x53a/0x5b0
[   91.571326][ T7356]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[   91.571340][ T7356]  ? __pfx_sock_write_iter+0x10/0x10
[   91.571361][ T7356]  ? bpf_lsm_file_permission+0x9/0x10
[   91.571390][ T7356]  ? security_file_permission+0x76/0x210
[   91.571402][ T7356]  ? rw_verify_area+0xce/0x6d0
[   91.571425][ T7356]  vfs_write+0x6ac/0x1050
[   91.571443][ T7356]  ? __pfx_sock_write_iter+0x10/0x10
[   91.571462][ T7356]  ? __pfx_vfs_write+0x10/0x10
[   91.571478][ T7356]  ? find_held_lock+0x2b/0x80
[   91.571513][ T7356]  ksys_write+0x1f8/0x250
[   91.571531][ T7356]  ? __pfx_ksys_write+0x10/0x10
[   91.571553][ T7356]  do_syscall_64+0x115/0x870
[   91.571572][ T7356]  ? clear_bhb_loop+0x40/0x90
[   91.571586][ T7356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.571598][ T7356] RIP: 0033:0x7fd0e939df99
[   91.571609][ T7356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.571620][ T7356] RSP: 002b:00007fd0ea2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   91.571633][ T7356] RAX: ffffffffffffffda RBX: 00007fd0e9625fa0 RCX: 00007fd0e939df99
[   91.571640][ T7356] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000016
[   91.571646][ T7356] RBP: 00007fd0ea2be090 R08: 0000000000000000 R09: 0000000000000000
[   91.571653][ T7356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.571659][ T7356] R13: 00007fd0e9626038 R14: 00007fd0e9625fa0 R15: 00007fff245902c8
[   91.571674][ T7356]  </TASK>
[   91.616764][ T7280] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.668826][ T7361] FAULT_INJECTION: forcing a failure.
[   91.668826][ T7361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   91.680201][ T7361] CPU: 2 UID: 0 PID: 7361 Comm: syz.1.520 Not tainted syzkaller #0 PREEMPT(full) 
[   91.680228][ T7361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   91.680236][ T7361] Call Trace:
[   91.680241][ T7361]  <TASK>
[   91.680246][ T7361]  dump_stack_lvl+0x100/0x190
[   91.680267][ T7361]  should_fail_ex.cold+0x5/0xa
[   91.680284][ T7361]  _copy_from_user+0x2e/0xd0
[   91.680313][ T7361]  bpf_test_init.isra.0+0xaf/0x100
[   91.680342][ T7361]  bpf_prog_test_run_xdp+0x57e/0x1670
[   91.680367][ T7361]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   91.680391][ T7361]  ? fput+0x79/0x100
[   91.680406][ T7361]  ? __bpf_prog_get+0x97/0x2a0
[   91.680431][ T7361]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   91.680451][ T7361]  __sys_bpf+0x2a12/0x4e80
[   91.680467][ T7361]  ? __pfx___sys_bpf+0x10/0x10
[   91.680479][ T7361]  ? find_held_lock+0x2b/0x80
[   91.680498][ T7361]  ? get_pid_task+0xfc/0x250
[   91.680524][ T7361]  ? get_pid_task+0xfc/0x250
[   91.680553][ T7361]  ? find_held_lock+0x2b/0x80
[   91.680582][ T7361]  ? rcu_read_lock_any_held+0x6a/0xa0
[   91.680600][ T7361]  ? find_held_lock+0x2b/0x80
[   91.680619][ T7361]  ? ksys_write+0x190/0x250
[   91.680637][ T7361]  ? ksys_write+0x190/0x250
[   91.680666][ T7361]  ? fput+0x79/0x100
[   91.680683][ T7361]  ? __x64_sys_bpf+0xce/0x140
[   91.680694][ T7361]  __x64_sys_bpf+0xce/0x140
[   91.680707][ T7361]  ? do_syscall_64+0x90/0x870
[   91.680724][ T7361]  do_syscall_64+0x115/0x870
[   91.680737][ T7361]  ? clear_bhb_loop+0x40/0x90
[   91.680753][ T7361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.680765][ T7361] RIP: 0033:0x7f4406b9df99
[   91.680777][ T7361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.680789][ T7361] RSP: 002b:00007f4404df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   91.680802][ T7361] RAX: ffffffffffffffda RBX: 00007f4406e25fa0 RCX: 00007f4406b9df99
[   91.680809][ T7361] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[   91.680816][ T7361] RBP: 00007f4404df6090 R08: 0000000000000000 R09: 0000000000000000
[   91.680823][ T7361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.680830][ T7361] R13: 00007f4406e26038 R14: 00007f4406e25fa0 R15: 00007ffeab9598c8
[   91.680845][ T7361]  </TASK>
[   91.802986][   T42] kauditd_printk_skb: 115 callbacks suppressed
[   91.803001][   T42] audit: type=1400 audit(1785419553.806:693): avc:  denied  { mount } for  pid=7364 comm="syz.1.521" name="/" dev="autofs" ino=22052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[   91.922534][ T7280] veth0_vlan: entered promiscuous mode
[   91.928193][ T7280] veth1_vlan: entered promiscuous mode
[   91.938357][ T7376] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   91.947710][ T7280] veth0_macvtap: entered promiscuous mode
[   91.959957][ T7280] veth1_macvtap: entered promiscuous mode
[   91.973472][ T7280] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.987357][ T7280] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.008686][ T6046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.012297][   T42] audit: type=1400 audit(1785419554.016:694): avc:  denied  { mount } for  pid=7378 comm="syz.1.525" name="/" dev="hugetlbfs" ino=19087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   92.031164][ T6046] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.034818][ T6046] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.037365][   T42] audit: type=1400 audit(1785419554.046:695): avc:  denied  { unmount } for  pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   92.056659][ T5584] hsr_slave_0: left promiscuous mode
[   92.059012][ T5584] hsr_slave_1: left promiscuous mode
[   92.061058][ T5584] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.063567][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.069828][ T5584] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.072234][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.078816][ T5584] veth1_macvtap: left promiscuous mode
[   92.080615][ T5584] veth0_macvtap: left promiscuous mode
[   92.082398][ T5584] veth1_vlan: left promiscuous mode
[   92.084191][ T5584] veth0_vlan: left promiscuous mode
[   92.256490][ T5584] team0 (unregistering): Port device team_slave_1 removed
[   92.267653][ T5584] team0 (unregistering): Port device team_slave_0 removed
[   92.281743][ T7391] xt_hashlimit: size too large, truncated to 1048576
[   92.305336][ T5095] Bluetooth: hci1: command tx timeout
[   92.350945][ T6046] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.412267][ T7130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.417539][ T7130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.452066][ T7127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.454594][ T7127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.487322][   T42] audit: type=1400 audit(1785419554.496:696): avc:  denied  { mounton } for  pid=7280 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   92.578656][ T7401] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   92.694143][ T7405] ieee802154 phy0 wpan0: encryption failed: -22
[   92.751932][ T7411] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   92.773285][ T7409] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3108460079 (12433840316 ns) > initial count (4732552468 ns). Using initial count to start timer.
[   92.776460][ T5584] IPVS: stop unused estimator thread 0...
[   92.932548][ T7419] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7419 comm=syz.2.539
[   92.939934][ T7419] netlink: 'syz.2.539': attribute type 1 has an invalid length.
[   92.957982][   T42] audit: type=1400 audit(1785419554.966:697): avc:  denied  { bind } for  pid=7421 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   92.971960][ T7419] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.975537][   T42] audit: type=1400 audit(1785419554.966:698): avc:  denied  { mount } for  pid=7421 comm="syz.4.540" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   92.990692][   T42] audit: type=1400 audit(1785419554.996:699): avc:  denied  { bind } for  pid=7421 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   92.999862][ T7419] bond1: (slave dummy0): making interface the new active one
[   93.004950][ T7419] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   93.053827][   T42] audit: type=1400 audit(1785419555.056:700): avc:  denied  { write } for  pid=7423 comm="syz.4.542" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   93.062320][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.542'.
[   93.066575][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.542'.
[   93.169821][ T7429] FAULT_INJECTION: forcing a failure.
[   93.169821][ T7429] name failslab, interval 1, probability 1, space 0, times 0
[   93.173798][ T7429] CPU: 3 UID: 0 PID: 7429 Comm: syz.4.543 Not tainted syzkaller #0 PREEMPT(full) 
[   93.173815][ T7429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   93.173822][ T7429] Call Trace:
[   93.173827][ T7429]  <TASK>
[   93.173832][ T7429]  dump_stack_lvl+0x100/0x190
[   93.173870][ T7429]  should_fail_ex.cold+0x5/0xa
[   93.173890][ T7429]  should_failslab+0xc2/0x120
[   93.173911][ T7429]  kmem_cache_alloc_noprof+0x91/0x6a0
[   93.173931][ T7429]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[   93.173954][ T7429]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[   93.173972][ T7429]  mmu_topup_memory_caches+0x25/0x170
[   93.173995][ T7429]  kvm_mmu_load+0xe2/0x2570
[   93.174012][ T7429]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[   93.174029][ T7429]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[   93.174043][ T7429]  ? __pfx_kvm_mmu_load+0x10/0x10
[   93.174058][ T7429]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[   93.174072][ T7429]  ? kvm_check_and_inject_events+0x873/0x12a0
[   93.174090][ T7429]  ? record_steal_time+0x3a0/0xbb0
[   93.174105][ T7429]  vcpu_run+0x3aaa/0x5de0
[   93.174126][ T7429]  ? trace_event_raw_event_kvm_fpu+0x146/0x200
[   93.174142][ T7429]  ? __pfx_vcpu_run+0x10/0x10
[   93.174163][ T7429]  ? rcu_is_watching+0x12/0xc0
[   93.174189][ T7429]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[   93.174206][ T7429]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[   93.174227][ T7429]  kvm_vcpu_ioctl+0x730/0x1700
[   93.174241][ T7429]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   93.174254][ T7429]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   93.174276][ T7429]  ? do_vfs_ioctl+0x226/0x13e0
[   93.174297][ T7429]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   93.174314][ T7429]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   93.174342][ T7429]  ? __fget_files+0x215/0x3d0
[   93.174353][ T7429]  ? hook_file_ioctl_common+0x140/0x440
[   93.174371][ T7429]  ? selinux_file_ioctl+0x13b/0x290
[   93.174388][ T7429]  ? selinux_file_ioctl+0xb6/0x290
[   93.174406][ T7429]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   93.174419][ T7429]  __x64_sys_ioctl+0x18e/0x210
[   93.174437][ T7429]  do_syscall_64+0x115/0x870
[   93.174457][ T7429]  ? clear_bhb_loop+0x40/0x90
[   93.174472][ T7429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.174484][ T7429] RIP: 0033:0x7fae4e99df99
[   93.174494][ T7429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.174506][ T7429] RSP: 002b:00007fae4f94c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   93.174519][ T7429] RAX: ffffffffffffffda RBX: 00007fae4ec25fa0 RCX: 00007fae4e99df99
[   93.174526][ T7429] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   93.174533][ T7429] RBP: 00007fae4f94c090 R08: 0000000000000000 R09: 0000000000000000
[   93.174540][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.174546][ T7429] R13: 00007fae4ec26038 R14: 00007fae4ec25fa0 R15: 00007ffd93148878
[   93.174560][ T7429]  </TASK>
[   93.497560][ T7433] set_target_expiration: 2 callbacks suppressed
[   93.497573][ T7433] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   93.543922][ T7435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7435 comm=syz.4.546
[   93.549664][ T7435] netlink: 'syz.4.546': attribute type 1 has an invalid length.
[   93.554381][ T7435] batman_adv: batadv0: Adding interface: dummy0
[   93.557004][ T7435] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.565095][ T7435] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   93.645705][ T7443] FAULT_INJECTION: forcing a failure.
[   93.645705][ T7443] name failslab, interval 1, probability 1, space 0, times 0
[   93.649515][ T7443] CPU: 2 UID: 0 PID: 7443 Comm: syz.0.550 Not tainted syzkaller #0 PREEMPT(full) 
[   93.649532][ T7443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   93.649540][ T7443] Call Trace:
[   93.649544][ T7443]  <TASK>
[   93.649549][ T7443]  dump_stack_lvl+0x100/0x190
[   93.649569][ T7443]  should_fail_ex.cold+0x5/0xa
[   93.649584][ T7443]  should_failslab+0xc2/0x120
[   93.649601][ T7443]  kmem_cache_alloc_noprof+0x91/0x6a0
[   93.649617][ T7443]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[   93.649635][ T7443]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[   93.649653][ T7443]  mmu_topup_memory_caches+0x25/0x170
[   93.649677][ T7443]  kvm_mmu_load+0xe2/0x2570
[   93.649693][ T7443]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[   93.649706][ T7443]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[   93.649720][ T7443]  ? __pfx_kvm_mmu_load+0x10/0x10
[   93.649735][ T7443]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[   93.649749][ T7443]  ? kvm_check_and_inject_events+0x873/0x12a0
[   93.649767][ T7443]  ? record_steal_time+0x3a0/0xbb0
[   93.649781][ T7443]  vcpu_run+0x3aaa/0x5de0
[   93.649803][ T7443]  ? trace_event_raw_event_kvm_fpu+0x146/0x200
[   93.649818][ T7443]  ? __pfx_vcpu_run+0x10/0x10
[   93.649840][ T7443]  ? rcu_is_watching+0x12/0xc0
[   93.649860][ T7443]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[   93.649878][ T7443]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[   93.649899][ T7443]  kvm_vcpu_ioctl+0x730/0x1700
[   93.649913][ T7443]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   93.649926][ T7443]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   93.649942][ T7443]  ? do_vfs_ioctl+0x226/0x13e0
[   93.649960][ T7443]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   93.649977][ T7443]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   93.650003][ T7443]  ? __fget_files+0x215/0x3d0
[   93.650015][ T7443]  ? hook_file_ioctl_common+0x140/0x440
[   93.650032][ T7443]  ? selinux_file_ioctl+0x13b/0x290
[   93.650049][ T7443]  ? selinux_file_ioctl+0xb6/0x290
[   93.650068][ T7443]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   93.650082][ T7443]  __x64_sys_ioctl+0x18e/0x210
[   93.650100][ T7443]  do_syscall_64+0x115/0x870
[   93.650113][ T7443]  ? clear_bhb_loop+0x40/0x90
[   93.650128][ T7443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.650140][ T7443] RIP: 0033:0x7fd0e939df99
[   93.650150][ T7443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.650162][ T7443] RSP: 002b:00007fd0ea2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   93.650173][ T7443] RAX: ffffffffffffffda RBX: 00007fd0e9625fa0 RCX: 00007fd0e939df99
[   93.650181][ T7443] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   93.650188][ T7443] RBP: 00007fd0ea2be090 R08: 0000000000000000 R09: 0000000000000000
[   93.650194][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.650202][ T7443] R13: 00007fd0e9626038 R14: 00007fd0e9625fa0 R15: 00007fff245902c8
[   93.650216][ T7443]  </TASK>
[   93.666466][   T42] audit: type=1400 audit(1785419555.676:701): avc:  denied  { shutdown } for  pid=7440 comm="syz.4.549" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   93.795597][   T42] audit: type=1400 audit(1785419555.796:702): avc:  denied  { mmap_zero } for  pid=7448 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   93.815817][ T7449] bridge_slave_1: left allmulticast mode
[   93.818223][ T7449] bridge_slave_1: left promiscuous mode
[   93.823089][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.834304][ T7449] bridge_slave_0: left allmulticast mode
[   93.837574][ T7449] bridge_slave_0: left promiscuous mode
[   93.843338][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.892196][ T7456] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   93.933661][ T7458] FAULT_INJECTION: forcing a failure.
[   93.933661][ T7458] name failslab, interval 1, probability 1, space 0, times 0
[   93.937645][ T7458] CPU: 2 UID: 0 PID: 7458 Comm: syz.2.555 Not tainted syzkaller #0 PREEMPT(full) 
[   93.937662][ T7458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   93.937669][ T7458] Call Trace:
[   93.937674][ T7458]  <TASK>
[   93.937679][ T7458]  dump_stack_lvl+0x100/0x190
[   93.937717][ T7458]  should_fail_ex.cold+0x5/0xa
[   93.937740][ T7458]  should_failslab+0xc2/0x120
[   93.937763][ T7458]  __kmalloc_cache_noprof+0x91/0x6c0
[   93.937790][ T7458]  ? route4_change+0x26d/0x2510
[   93.937817][ T7458]  route4_change+0x26d/0x2510
[   93.937838][ T7458]  ? __pfx_route4_change+0x10/0x10
[   93.937861][ T7458]  ? __pfx_route4_change+0x10/0x10
[   93.937877][ T7458]  tc_new_tfilter+0x9df/0x24a0
[   93.937901][ T7458]  ? avc_has_perm_noaudit+0x11e/0x3b0
[   93.937920][ T7458]  ? __pfx_tc_new_tfilter+0x10/0x10
[   93.937945][ T7458]  ? find_held_lock+0x2b/0x80
[   93.937969][ T7458]  ? rtnetlink_rcv_msg+0x93a/0xe90
[   93.937991][ T7458]  ? __pfx_tc_new_tfilter+0x10/0x10
[   93.938003][ T7458]  rtnetlink_rcv_msg+0x95e/0xe90
[   93.938020][ T7458]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   93.938040][ T7458]  ? ref_tracker_free+0x37e/0x6c0
[   93.938059][ T7458]  netlink_rcv_skb+0x159/0x420
[   93.938071][ T7458]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   93.938088][ T7458]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   93.938105][ T7458]  ? netlink_deliver_tap+0x1ae/0xcc0
[   93.938126][ T7458]  netlink_unicast+0x585/0x850
[   93.938140][ T7458]  ? __pfx_netlink_unicast+0x10/0x10
[   93.938155][ T7458]  netlink_sendmsg+0x8b0/0xda0
[   93.938169][ T7458]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.938182][ T7458]  ? selinux_socket_sendmsg+0x198/0x2f0
[   93.938202][ T7458]  ____sys_sendmsg+0xa4d/0xbe0
[   93.938225][ T7458]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.938237][ T7458]  ? __pfx_____sys_sendmsg+0x10/0x10
[   93.938262][ T7458]  ___sys_sendmsg+0x190/0x1e0
[   93.938281][ T7458]  ? __pfx____sys_sendmsg+0x10/0x10
[   93.938299][ T7458]  ? __lock_acquire+0x49f/0x1a40
[   93.938313][ T7458]  ? get_pid_task+0x106/0x250
[   93.938352][ T7458]  __sys_sendmsg+0x160/0x210
[   93.938371][ T7458]  ? __pfx___sys_sendmsg+0x10/0x10
[   93.938393][ T7458]  do_syscall_64+0x115/0x870
[   93.938411][ T7458]  ? clear_bhb_loop+0x40/0x90
[   93.938426][ T7458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.938438][ T7458] RIP: 0033:0x7f3f0999df99
[   93.938449][ T7458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.938460][ T7458] RSP: 002b:00007f3f0a80d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   93.938474][ T7458] RAX: ffffffffffffffda RBX: 00007f3f09c25fa0 RCX: 00007f3f0999df99
[   93.938481][ T7458] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000007
[   93.938488][ T7458] RBP: 00007f3f0a80d090 R08: 0000000000000000 R09: 0000000000000000
[   93.938495][ T7458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.938502][ T7458] R13: 00007f3f09c26038 R14: 00007f3f09c25fa0 R15: 00007ffdba31fba8
[   93.938516][ T7458]  </TASK>
[   94.162460][ T7466] 
[   94.163538][ T7466] ======================================================
[   94.166326][ T7466] WARNING: possible circular locking dependency detected
[   94.169082][ T7466] syzkaller #0 Not tainted
[   94.170889][ T7466] ------------------------------------------------------
[   94.173503][ T7466] syz.0.558/7466 is trying to acquire lock:
[   94.175838][ T7466] ffffffff901d0908 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650
[   94.180115][ T7466] 
[   94.180115][ T7466] but task is already holding lock:
[   94.182948][ T7466] ffff88803af73580 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0
[   94.186886][ T7466] 
[   94.186886][ T7466] which lock already depends on the new lock.
[   94.186886][ T7466] 
[   94.190729][ T7466] 
[   94.190729][ T7466] the existing dependency chain (in reverse order) is:
[   94.194150][ T7466] 
[   94.194150][ T7466] -> #2 (&sb->s_type->i_mutex_key#24){++++}-{4:4}:
[   94.197577][ T7466]        lock_acquire+0x1b9/0x370
[   94.199822][ T7466]        down_write+0x8b/0x1f0
[   94.201122][ T7464] sctp: sctp_init_sock: sk:ffff88805e4fabc0
[   94.201757][ T7466]        configfs_depend_item_unlocked+0xf3/0x6a0
[   94.204321][ T7464] sctp: sctp_getsockopt: sk:ffff88805e4fabc0, optname:113
[   94.205797][ T7466]        usbg_make_tpg+0x261/0x620
[   94.205816][ T7466]        target_fabric_make_tpg+0xab/0x8c0
[   94.205843][ T7466]        configfs_mkdir+0x51e/0xb70
[   94.210773][ T7464] sctp: sctp_init_sock: sk:ffff888028136f00
[   94.212499][ T7466]        vfs_mkdir+0x361/0x850
[   94.215936][ T7464] sctp: sctp_init_sock: sk:ffff8880281365c0
[   94.216589][ T7466]        filename_mkdirat+0x48b/0x5e0
[   94.216615][ T7466]        __x64_sys_mkdir+0x6b/0x90
[   94.218837][ T7464] sctp: sctp_setsockopt: sk:ffff8880281365c0, optname:27
[   94.220529][ T7466]        do_syscall_64+0x115/0x870
[   94.220554][ T7466]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.223558][ T7464] sctp: sctp_close: sk:ffff888028136f00, timeout:0
[   94.224353][ T7466] 
[   94.224353][ T7466] -> #1
[   94.226759][ T7464] sctp: sctp_destroy_sock: sk:ffff888028136f00
[   94.228639][ T7466]  (&opts->dep_lock){+.+.}-{4:4}:
[   94.228675][ T7466]        lock_acquire+0x1b9/0x370
[   94.233181][ T7464] sctp: sctp_do_bind: sk:ffff8880281365c0, new addr:::, port:0, new port:0, len:28
[   94.234904][ T7466]        __mutex_lock+0x1a4/0x1bd0
[   94.236935][ T7464] sctp: sctp_get_port_local: begins, snum:0
[   94.238903][ T7466]        tcm_set_name+0x29/0xb0
[   94.248636][ T7466]        function_make+0x21c/0x3f0
[   94.250304][ T7466]        configfs_mkdir+0x51e/0xb70
[   94.251976][ T7466]        vfs_mkdir+0x361/0x850
[   94.253537][ T7466]        filename_mkdirat+0x48b/0x5e0
[   94.255256][ T7466]        __x64_sys_mkdirat+0x89/0xc0
[   94.256955][ T7466]        do_syscall_64+0x115/0x870
[   94.258588][ T7466]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.260620][ T7466] 
[   94.260620][ T7466] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}:
[   94.263190][ T7466]        check_prev_add+0xeb/0xe60
[   94.264794][ T7466]        __lock_acquire+0x136c/0x1a40
[   94.266518][ T7466]        lock_acquire+0x1b9/0x370
[   94.268107][ T7466]        __mutex_lock+0x1a4/0x1bd0
[   94.269743][ T7466]        uvcg_streaming_header_allow_link+0x7c/0x650
[   94.271853][ T7466]        configfs_symlink+0x540/0x11f0
[   94.273584][ T7466]        vfs_symlink+0x178/0x4d0
[   94.275162][ T7466]        filename_symlinkat+0x2a6/0x560
[   94.276912][ T7466]        __x64_sys_symlink+0x79/0xb0
[   94.278592][ T7466]        do_syscall_64+0x115/0x870
[   94.280215][ T7466]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.282234][ T7466] 
[   94.282234][ T7466] other info that might help us debug this:
[   94.282234][ T7466] 
[   94.285403][ T7466] Chain exists of:
[   94.285403][ T7466]   gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#24
[   94.285403][ T7466] 
[   94.289917][ T7466]  Possible unsafe locking scenario:
[   94.289917][ T7466] 
[   94.292258][ T7466]        CPU0                    CPU1
[   94.293954][ T7466]        ----                    ----
[   94.294710][ T7468] sctp: sctp_setsockopt: sk:ffff88805e4fabc0, optname:32
[   94.295632][ T7466]   lock(&sb->s_type->i_mutex_key#24);
[   94.295648][ T7466]                                lock(&opts->dep_lock);
[   94.295657][ T7466]                                lock(&sb->s_type->i_mutex_key#24);
[   94.295669][ T7466]   lock(gadget_subsys.su_mutex);
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   94.295677][ T7466] 
[   94.295677][ T7466]  *** DEADLOCK ***
[   94.295677][ T7466] 
[   94.295680][ T7466] 2 locks held by syz.0.558/7466:
[   94.295687][ T7466]  #0: ffff888023bac450 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400
[   94.295723][ T7466]  #1: ffff88803af73580 (&sb->s_type->i_mutex_key#24){++++}-{4:4}
[   94.301100][ T7468] ieee802154 phy0 wpan0: encryption failed: -22
[   94.301804][ T7466] , at: configfs_symlink+0x3c0/0x11f0
[   94.301825][ T7466] 
[   94.301825][ T7466] stack backtrace:
[   94.301833][ T7466] CPU: 1 UID: 0 PID: 7466 Comm: syz.0.558 Not tainted syzkaller #0 PREEMPT(full) 
[   94.301847][ T7466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   94.301855][ T7466] Call Trace:
[   94.301859][ T7466]  <TASK>
[   94.301864][ T7466]  dump_stack_lvl+0x100/0x190
[   94.301879][ T7466]  print_circular_bug.cold+0x178/0x1c7
[   94.301899][ T7466]  check_noncircular+0x146/0x160
[   94.301912][ T7466]  ? audit_log_end+0x24/0x30
[   94.301941][ T7466]  check_prev_add+0xeb/0xe60
[   94.301955][ T7466]  __lock_acquire+0x136c/0x1a40
[   94.301971][ T7466]  lock_acquire+0x1b9/0x370
[   94.301985][ T7466]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[   94.302000][ T7466]  ? __pfx___might_resched+0x10/0x10
[   94.302020][ T7466]  ? audit_inode_permission+0x1ea/0x2a0
[   94.302036][ T7466]  __mutex_lock+0x1a4/0x1bd0
[   94.302049][ T7466]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[   94.302063][ T7466]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[   94.302078][ T7466]  ? __lock_acquire+0x49f/0x1a40
[   94.302092][ T7466]  ? __pfx___mutex_lock+0x10/0x10
[   94.302105][ T7466]  ? selinux_inode_permission+0x14a/0x1130
[   94.302123][ T7466]  ? __pfx___might_resched+0x10/0x10
[   94.302136][ T7466]  ? make_vfsgid+0xf1/0x140
[   94.302154][ T7466]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[   94.302168][ T7466]  ? security_inode_permission+0xbf/0x250
[   94.302185][ T7466]  uvcg_streaming_header_allow_link+0x7c/0x650
[   94.302199][ T7466]  ? inode_permission+0x374/0x620
[   94.302214][ T7466]  ? mntput_no_expire+0xe7/0x220
[   94.302225][ T7466]  configfs_symlink+0x540/0x11f0
[   94.302243][ T7466]  ? __pfx_configfs_symlink+0x10/0x10
[   94.302260][ T7466]  vfs_symlink+0x178/0x4d0
[   94.302275][ T7466]  filename_symlinkat+0x2a6/0x560
[   94.302289][ T7466]  ? __pfx_filename_symlinkat+0x10/0x10
[   94.302306][ T7466]  ? strncpy_from_user+0x19d/0x2d0
[   94.302321][ T7466]  ? do_getname+0x191/0x390
[   94.302335][ T7466]  __x64_sys_symlink+0x79/0xb0
[   94.302349][ T7466]  do_syscall_64+0x115/0x870
[   94.302361][ T7466]  ? clear_bhb_loop+0x40/0x90
[   94.302374][ T7466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.302386][ T7466] RIP: 0033:0x7fd0e939df99
[   94.302396][ T7466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.302408][ T7466] RSP: 002b:00007fd0ea2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[   94.302419][ T7466] RAX: ffffffffffffffda RBX: 00007fd0e9625fa0 RCX: 00007fd0e939df99
[   94.302429][ T7466] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000200000001000
[   94.302436][ T7466] RBP: 00007fd0e9434ec4 R08: 0000000000000000 R09: 0000000000000000
[   94.302443][ T7466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.302450][ T7466] R13: 00007fd0e9626038 R14: 00007fd0e9625fa0 R15: 00007fff245902c8
[   94.302460][ T7466]  </TASK>
[   94.312739][ T7466] UDC core: g1: couldn't find an available UDC or it's busy
[   94.359226][ T7464] sctp: sctp_close: sk:ffff8880281365c0, timeout:0
[   94.415046][ T7464] sctp: sctp_destroy_sock: sk:ffff8880281365c0
[   94.417429][ T7464] sctp: sctp_close: sk:ffff88805e4fabc0, timeout:0
[   94.419615][ T7464] sctp: sctp_destroy_sock: sk:ffff88805e4fabc0
[   94.498891][ T7462] syz_tun (unregistering): left allmulticast mode
[   94.501314][ T7462] bridge0: port 3(syz_tun) entered disabled state
[   94.635285][   T13] net_ratelimit: 26 callbacks suppressed
[   94.635338][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   94.698914][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.745242][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   94.829532][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.855300][ T5584] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   94.952591][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.965246][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   95.075239][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   95.121374][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.185322][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   95.258879][   T13] bridge_slave_1: left allmulticast mode
[   95.260730][   T13] bridge_slave_1: left promiscuous mode
[   95.262601][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.266962][   T13] bridge_slave_0: left allmulticast mode
[   95.268789][   T13] bridge_slave_0: left promiscuous mode
[   95.270653][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.315357][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.320111][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.323994][   T13] bond0 (unregistering): Released all slaves
[   95.327952][   T13] bond1 (unregistering): Released all slaves
[   95.335405][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   95.445204][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   95.565273][ T6046] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   95.675257][ T5815] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   95.720098][ T7449] sctp: sctp_close: sk:ffff88802b901280, timeout:0
[   95.722356][ T7449] sctp: sctp_destroy_sock: sk:ffff88802b901280
[   95.732147][   T13] hsr_slave_0: left promiscuous mode
[   95.736431][   T13] hsr_slave_1: left promiscuous mode
[   95.738380][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.740778][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.744481][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.747755][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.753156][   T13] veth1_macvtap: left promiscuous mode
[   95.754938][   T13] veth0_macvtap: left promiscuous mode
[   95.757926][   T13] veth1_vlan: left promiscuous mode
[   95.760462][   T13] veth0_vlan: left promiscuous mode
[   95.822250][   T13] team0 (unregistering): Port device team_slave_1 removed
[   95.827039][   T13] team0 (unregistering): Port device team_slave_0 removed
[   96.247255][   T13] sctp: sctp_close: sk:ffff888024135340, timeout:0
[   96.255182][   T13] sctp: sctp_destroy_sock: sk:ffff888024135340
[   96.334639][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.409143][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.468518][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.555510][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.654940][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.658436][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.720290][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.723562][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.801137][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.804789][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.929486][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.932965][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.040137][   T13] bridge_slave_1: left allmulticast mode
[   97.042633][   T13] bridge_slave_1: left promiscuous mode
[   97.045077][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.049404][   T13] ¾x9ÿ: left allmulticast mode
[   97.051537][   T13] ¾x9ÿ: left promiscuous mode
[   97.053572][   T13] bridge0: port 1(
1¾x9ÿ) entered disabled state
[   97.107473][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.112003][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.117294][   T13] bond0 (unregistering): Released all slaves
[   97.123322][   T13] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[   97.131414][   T13] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[   97.155624][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.159573][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.162995][   T13] bond0 (unregistering): Released all slaves
[   97.166216][   T13] bond1 (unregistering): Released all slaves
[   97.668712][   T13] hsr_slave_0: left promiscuous mode
[   97.671148][   T13] hsr_slave_1: left promiscuous mode
[   97.673613][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.676507][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.679628][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.682201][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.685355][   T13] batman_adv: batadv0: Removing interface: dummy0
[   97.689803][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.692375][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.695332][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.697856][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.703089][   T13] veth1_macvtap: left promiscuous mode
[   97.704865][   T13] veth0_macvtap: left promiscuous mode
[   97.706687][   T13] veth1_vlan: left promiscuous mode
[   97.708350][   T13] veth0_vlan: left promiscuous mode
[   97.710678][   T13] veth1_macvtap: left promiscuous mode
[   97.712477][   T13] veth0_macvtap: left promiscuous mode
[   97.714523][   T13] veth1_vlan: left promiscuous mode
[   97.717616][   T13] veth0_vlan: left promiscuous mode
[   97.799995][   T13] team0 (unregistering): Port device team_slave_1 removed
[   97.814849][   T13] team0 (unregistering): Port device team_slave_0 removed
[   97.879134][   T13] team0 (unregistering): Port device team_slave_1 removed
[   97.884180][   T13] team0 (unregistering): Port device team_slave_0 removed
[   98.686881][   T13] sctp: sctp_close: sk:ffff88802728a500, timeout:0
[   98.689206][   T13] sctp: sctp_destroy_sock: sk:ffff88802728a500
[   98.691310][   T13] sctp: sctp_close: sk:ffff88802b905c80, timeout:0
[   98.693348][   T13] sctp: sctp_destroy_sock: sk:ffff88802b905c80