last executing test programs: 1m52.855636531s ago: executing program 2 (id=889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x22002, 0x0) write$fb(r2, &(0x7f0000000100)="657fe13d", 0x4) write$binfmt_script(r1, 0x0, 0x6f4000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd8000fddbdf25630000000c0099000600000018000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x1c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x79, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 1m52.533465441s ago: executing program 2 (id=893): r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000002780)) 1m52.53190029s ago: executing program 2 (id=895): socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x2, 0x1, @remote}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1610, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m52.42893427s ago: executing program 2 (id=896): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80801) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r1, 0x3, &(0x7f0000000040)) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0xe, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000140)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1d3}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/10, 0xa}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x62800, 0x0) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r3, 0x0, 0xd9, 0x1000, &(0x7f0000000500)="19c97ed95521c0443e2c53b6e75c38fbfe680fc05002c304175ad081fe207576191f5f60d69ccda9e48917dd1416a801da5430b6483713ebe49bbf5837ed4ef6d50332cfc291700357933ecc043559a51df3adccba2b9fad8194848d158d95508fba0195cd880fb7d34c443c263f09f9776d9df4d00d423edd9d1648cb74c5638f6276eca317a4a90c7ca13eba73c78be68385fcb4eda842887df707c2909890bbd90fcb19dfd807fd2e85c889aef08eac99d2b4933fd630e47c01be35d13d13dbc9a67281cb9c8917d90fec4ee23b74fbca140ef9f72feb1e", &(0x7f0000000800)=""/4096, 0x3, 0x0, 0xcd, 0x2a, &(0x7f0000001800)="2cfa2d7bcb9f7225a6e24177f15302d961097a230a83b26dd5162ece7feb597239f52e69e8b31961ff666e707f2c33587da02e3c92a50b5016a81c1e9ead77c8c61cf5e636161f43ac29b00b6164ff638cac96e09c629354a6ae46dc4ee4fba1e46bb0aef95955e6a81a7d2fa78a3d3059aeb457a7d64fb9c7056265a00438a89b0c5d61940e563aa2056e7c11d40fb23b832df3d1336086599c77fffb20548d124d815d988d4fd6e6fc367004f0d4125c138640f957f4b526554c2df7aa5716fa5b39010638a6a72fd5f0daed", &(0x7f0000001940)="09912fa4ef0534104e67ec9d596d2654ff920505298c64db9a687f6e65d4dd19468a213eefb3d8748416", 0x2, 0x0, 0x8000}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000700)='./file0/file0\x00', 0x0, 0x21bd8cb, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x4, [{0x3, 0x8b39, 0x3a, 0x3d}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x5, 0x3b7, 0x3}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x8, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) unshare(0x6020400) fcntl$notify(r4, 0x402, 0x8000003d) socket$nl_generic(0x10, 0x3, 0x10) 1m52.341720176s ago: executing program 2 (id=897): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb00000000000000000200010000fb00000000000300000000030005000000000002000000ac1414aa000000000000000001001500080000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x814) 1m52.130056699s ago: executing program 2 (id=902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) preadv(r3, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/209, 0xd1}], 0x1, 0x2, 0x7f) getresuid(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) io_setup(0x200, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) mount$binderfs(&(0x7f00000001c0), &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x20040, &(0x7f0000000480)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030343637312c73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d30303035303030303030303030303030303030303030302c6e6f6c617a7974696d652c7063723d30303030303030303030303030303030303033362c736d61636b66736861743d2e2c61707072616973652c6f626a5f726f6c653d2f812c2c6673757569643d64613535643361352d325763662d336238612d345f63612d30616431393336342c6f626a5f726f6c653d21275b7b292c666f776e65723daebf2f73ab6896d7af0f4218d8ffe72599b1ae09", @ANYRESDEC=r7, @ANYBLOB=',\x00']) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) r13 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r15, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) ioctl$TCXONC(r12, 0x5608, 0x3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r10, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x70, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a58000000080a010100000000000000000a0000060900020073797a31000000000900010073797a310000"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) r16 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r16, &(0x7f0000001040)={0x2020}, 0x2020) 1m51.975474878s ago: executing program 32 (id=902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) preadv(r3, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/209, 0xd1}], 0x1, 0x2, 0x7f) getresuid(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) io_setup(0x200, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) mount$binderfs(&(0x7f00000001c0), &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x20040, &(0x7f0000000480)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030343637312c73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d30303035303030303030303030303030303030303030302c6e6f6c617a7974696d652c7063723d30303030303030303030303030303030303033362c736d61636b66736861743d2e2c61707072616973652c6f626a5f726f6c653d2f812c2c6673757569643d64613535643361352d325763662d336238612d345f63612d30616431393336342c6f626a5f726f6c653d21275b7b292c666f776e65723daebf2f73ab6896d7af0f4218d8ffe72599b1ae09", @ANYRESDEC=r7, @ANYBLOB=',\x00']) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) r13 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r15, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) ioctl$TCXONC(r12, 0x5608, 0x3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r10, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x70, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a58000000080a010100000000000000000a0000060900020073797a31000000000900010073797a310000"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) r16 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r16, &(0x7f0000001040)={0x2020}, 0x2020) 1m9.766345819s ago: executing program 1 (id=1374): ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0xa6e) (async) poll(&(0x7f0000000040), 0x0, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x10000, 0x7ff, {{0x2a, 0x4, 0x1, 0x5, 0xa8, 0x65, 0x0, 0x6, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x27, 0x9f, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @rand_addr=0x64010101, @local, @multicast1, @rand_addr=0x64010101]}, @ssrr={0x89, 0x23, 0xee, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x18}, @remote, @local]}, @timestamp_addr={0x44, 0x24, 0xac, 0x1, 0x1, [{@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@local, 0x101}, {@loopback, 0x54}]}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0x7, 0xdd, [@local]}, @end, @ssrr={0x89, 0x17, 0xc7, [@rand_addr=0x64010102, @empty, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@can_newroute={0x60, 0x18, 0x100, 0x70bd29, 0x25dfdbfe, {0x1d, 0x1, 0x5}, [@CGW_DST_IF={0x8, 0xa, r1}, @CGW_MOD_UID={0x8}, @CGW_MOD_UID={0x8, 0xe, r2}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1}, 0x7, 0x3, 0x0, 0x0, "3869853b1b6ce0bc"}, 0x4}}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}}, @CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x20004000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6tnl0\x00', r1, 0x4, 0xdf, 0x1, 0x3000000, 0x28, @empty, @remote, 0x7800, 0x20, 0xef, 0x7}}) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000540)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000580)=@mmap={0x2, 0x3, 0x4, 0x8, 0x677, {0x0, 0xea60}, {0x3, 0x8, 0x5, 0x56, 0x1, 0xfd, "e1a1efd3"}, 0xd9, 0x1, {}, 0x62539082, 0x0, r8}) (async, rerun: 64) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000640)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @private=0xa010102}, {0x2, 0x4e24, @local}, 0x400, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000600)='macsec0\x00', 0x3, 0x8, 0xf3}) (async, rerun: 64) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r7) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r9, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040054}, 0x15) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockname$l2tp6(r7, &(0x7f0000000800)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000840)=0x20) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000900)={'gre0\x00', &(0x7f0000000880)={'sit0\x00', r6, 0x40, 0x1, 0x4, 0x0, {{0xb, 0x4, 0x0, 0x2f, 0x2c, 0x67, 0x0, 0xf, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x29}, {[@rr={0x7, 0x13, 0xb8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @broadcast, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) getsockopt$inet_opts(r7, 0x0, 0x0, &(0x7f0000000940)=""/146, &(0x7f0000000a00)=0x92) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xeab, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x40}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r7) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r13, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x369e, 0x11}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40000d0) (async) umount2(&(0x7f0000000d00)='./file0\x00', 0x0) (async) lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) write$FUSE_OPEN(r7, &(0x7f0000002ec0)={0x20, 0xfffffffffffffffe, 0x0, {0x0, 0x8}}, 0x20) 1m9.616624743s ago: executing program 1 (id=1379): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x11) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000002c0)=[{0x800000000}, {0x0, 0x6, 0x7}], 0x2, 0xbff, 0x1e, 0x0, 0xc, 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x50, r1, 0x4000) 1m9.508703612s ago: executing program 1 (id=1383): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000010c0)=@newtaction={0x88c, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x0, 0x9, 0x265, 0x0, {0x1, 0x0, 0xf, 0xc, 0x2, 0x1}, {0xe, 0x1, 0x9, 0x3, 0x400, 0xf992}, 0x0, 0x1, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x60, 0xd5b8, 0x8, 0x1000, 0x4, 0xfff, 0x8001, 0x20, 0x9, 0x9, 0x0, 0x7, 0x1, 0xe, 0xf1ba, 0xe, 0xfffffffb, 0x46, 0x9, 0x2, 0xd, 0x0, 0x3, 0xff, 0x400, 0x47, 0xcbd7, 0x1000, 0x6, 0x3, 0x7fffffff, 0xe9, 0x9d, 0xfff, 0x6, 0x8, 0x40, 0x100, 0xea9, 0x8786, 0x3, 0x5, 0x0, 0x8000, 0xffffffff, 0x1f3540, 0x4, 0x9, 0x1, 0x6, 0x1, 0x0, 0x81, 0x200, 0x1, 0x884, 0x0, 0x0, 0x5, 0x4, 0x1, 0x80000000, 0x0, 0xfffff106, 0x3, 0x6, 0x8, 0x800, 0x2, 0x6, 0x71b, 0xfffffffa, 0xe, 0x7, 0x1, 0x10001, 0x4, 0x8, 0xfffffffa, 0x800, 0x5, 0x3, 0x7, 0x2, 0x5, 0x0, 0x7, 0xfffffff6, 0x2, 0x80000000, 0x2, 0x7f, 0x7, 0x2, 0x6, 0x4, 0x9365, 0x740c172d, 0x7, 0x80000000, 0x58eb2774, 0x80000000, 0x8, 0x415, 0x8, 0x0, 0xff, 0x7f, 0x200, 0x7, 0x1, 0x8, 0xfffffffd, 0x80, 0xe1f, 0x4, 0x9, 0x7, 0x43b, 0x9, 0x12, 0x5, 0x7f, 0x97d, 0x4, 0x10000, 0x5, 0x7, 0x7, 0x0, 0x3b, 0x2, 0x8, 0x6, 0x5, 0x1000, 0x7, 0xbd14, 0xfffffff9, 0xf2, 0x8, 0x4d723a72, 0x3, 0x4, 0xffff, 0x103, 0x8, 0x800000, 0x2, 0x1, 0x4, 0x3, 0xd2, 0x1, 0x7, 0x3, 0x6, 0xfffffffd, 0x2, 0x800, 0x9, 0x72c, 0x983, 0xd613, 0x1000, 0xfff, 0x4, 0x5, 0x3, 0x10000, 0xf6f, 0x4, 0x0, 0x6, 0x9, 0x5, 0x2, 0x1c00, 0x4, 0x6, 0x6, 0x40, 0x401, 0x200, 0x81, 0x4, 0x1, 0xf, 0xf, 0x6, 0xdb, 0x1ff, 0x6, 0x6, 0xff, 0xe69, 0x3, 0x80000000, 0x8, 0x4, 0x6, 0x14, 0x5, 0x7fffffff, 0xac, 0x8, 0x5c74, 0xffff, 0x9, 0xfffffff9, 0x3ff, 0x200, 0x7, 0x6, 0x9, 0x401, 0x4, 0x8, 0xc75, 0x8e0, 0x0, 0x5, 0xff, 0x1, 0x53e8, 0x3, 0x1000, 0x1, 0xcea7, 0x7, 0xf2, 0x6, 0xfffff8d8, 0x7, 0x4, 0x53c3, 0x7fff, 0x0, 0xff, 0x9, 0xff, 0x7, 0x5, 0x0, 0x300000, 0x8, 0x7fff, 0x30e3, 0x3, 0x200, 0x3ff, 0x80, 0x2, 0x3, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x2, 0x9, 0x4, 0x3, 0x1, 0x2, 0x9, 0x41d, 0x9, 0x5, 0x5, 0xeb4, 0xd, 0x0, 0x5, 0x5, 0x1cc, 0x1, 0x9, 0x1000, 0x3, 0xb, 0x2, 0xfffffff8, 0x1ff, 0x4, 0x1, 0x6, 0x1, 0x1, 0x6, 0xa, 0x0, 0x7, 0x34, 0xfffffffb, 0x7, 0x101, 0x7fffffff, 0x1, 0x9, 0x0, 0x80000001, 0xa, 0xb, 0xe1bd, 0x0, 0x8c, 0x8, 0x436b, 0xfffff3bd, 0x834, 0x0, 0x9, 0xdc, 0x8, 0x7ff, 0x0, 0x81, 0x100, 0x2, 0x8, 0x9d34, 0xffffffff, 0xfffffffc, 0xfffff38e, 0x101, 0x200, 0x6, 0x4, 0xf0, 0x2, 0xfffffffc, 0x9, 0x7, 0x6, 0x8001, 0x5, 0x1, 0xabe5, 0x7fffffff, 0xffff04f7, 0x3, 0x9, 0x3, 0x4, 0x4c, 0x10000, 0x1, 0x80, 0x3, 0x9, 0x1, 0x7fff, 0x943, 0x7fff, 0xd5, 0x9, 0x81, 0x7fffffff, 0xdf, 0xd87e, 0x6, 0x6, 0x82, 0x7ff, 0x3, 0xffffffcb, 0x5, 0x2, 0xc, 0xfffffff4, 0xe, 0x2d25, 0x7f, 0xc206627, 0x2a, 0x4, 0xcf, 0x7ff, 0x4, 0xf, 0x1, 0xfffffffc, 0x8, 0x7, 0x800, 0x101, 0x3, 0xba6, 0x10000, 0x4, 0x7fff, 0x71, 0x7, 0x6, 0x9, 0x60, 0x2, 0x2, 0x0, 0x2, 0x2, 0x2, 0x5, 0x70c, 0xa0, 0x857, 0x1e000000, 0x8, 0x1e97, 0x4, 0x1, 0xf, 0x10000, 0x4, 0x6069, 0xf32, 0xfb9, 0x3, 0x3, 0x3, 0x80000000, 0x1, 0xc, 0x0, 0x100, 0x609c, 0x101, 0x1, 0xc, 0x90, 0x0, 0x8, 0x5, 0xd549, 0x200, 0x5, 0x4, 0x8, 0x6, 0x9, 0x329, 0x1, 0x2, 0x140, 0x5, 0x3, 0xfffffff9, 0x0, 0x9, 0xa141, 0x80000000, 0x1, 0x80000001, 0x9, 0x80, 0x2, 0x7370, 0x4, 0x3, 0x5, 0x4, 0x0, 0x4, 0x4, 0x7, 0x0, 0xfff, 0x3, 0x2, 0xffffffff, 0x7, 0x8, 0x800, 0x43a, 0x8, 0x68c, 0x7, 0x6, 0x5, 0x3, 0x1, 0x3, 0x33e8, 0x1, 0x7, 0x401, 0x8, 0x10, 0x0, 0x7fffffff, 0xffffffff, 0x6, 0x2, 0x8, 0x1000, 0x7, 0x4, 0x0, 0x3, 0x0, 0x6328, 0x2, 0x3000000, 0x8, 0x81, 0x0, 0xfffffffa, 0x7, 0xb, 0x1c000000, 0x8, 0x8, 0x8]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0) 1m9.322520428s ago: executing program 1 (id=1385): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x6a5a, 0x703}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) chdir(&(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x6a, &(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRES32=r1], 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e23, 0x6000000, @mcast2, 0x4}, 0x1c) sendto$inet6(r3, &(0x7f0000000500)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d4fda97d77d0039572a731ba94ac66c311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee05985389e6ada44a1de74cd2", 0xc1, 0xc0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r3, 0x604ab000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x8, &(0x7f0000000300)=[{0xfffd, 0xd, 0x5, 0x3}, {0x2, 0xc, 0x43, 0x10001}, {0xee, 0x1, 0x8, 0x6}, {0x5, 0x7, 0x1, 0xffffff2b}, {0xe6, 0x6, 0x30, 0x5}, {0x0, 0x2, 0x7, 0x10005}, {0x7fff, 0x1, 0xa0, 0x7fffffff}, {0x7fff, 0xf8, 0x8, 0x5}]}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4083, 0xff3, 0x0, 0x0}, &(0x7f0000000000)=0x40) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xd0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000fff000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8, 0x1, 0x0}, &(0x7f0000000780)=0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) setsockopt(r3, 0x9, 0xd0, &(0x7f0000000380)="9973be5bcdd9c733d6f97f596ceec54d3683d12b79eb531f1279f7bcc0aebf34f663f3bab9f58c8c9e4a0d484abd35de6cb3f326948813ef4f86bd04ea47c274c35ab36c994cfabc850b1a2ee40467d315ab904d08885f6542e9a3a20dad6943dfeacd4b0908c62385149e3eb7c6c7ab48ebcae574ee0eb32618", 0x7a) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r7, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x8, 0x0, 0x0}}, 0x10) write(r6, &(0x7f0000000200)="3399", 0x2) r8 = openat(r6, &(0x7f0000000040)='./file1\x00', 0x42, 0x102) openat$cgroup_ro(r8, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) sendfile(r4, r8, 0x0, 0xe32a6ec) 1m9.075770915s ago: executing program 1 (id=1388): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x84) (rerun: 32) write(r0, &(0x7f00000002c0)='0', 0x1) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) setns(0xc9, 0x0) (async) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, 0x0, 0x1b72f6beac3d767c, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x56}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x19}, 0x40) (async, rerun: 64) shutdown(r3, 0x0) (rerun: 64) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x9, 0x4) (async, rerun: 64) getpeername$inet6(r2, 0x0, &(0x7f0000000240)) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r5}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) (rerun: 32) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async, rerun: 32) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async, rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) write$selinux_load(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75786811c366c84fd950530bc0b1dcdede30c6b6d293bd5986afbe65f6b85da03bb62ac7d7c83653dffb865f6dc2f289934e0b1c25509269e84f0ecbc7b1d6013ca6f45e155076bb64251d43d415969a182406a39cc8f7ad5bca0b7d0ee16400000000000000"], 0x7a) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x5, &(0x7f00000003c0)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @alu={0x4, 0x0, 0x6, 0x5, 0x8, 0xfffffffffffffffe}, @map_fd={0x18, 0x6}], &(0x7f0000000500)='syzkaller\x00', 0x9, 0xf0, &(0x7f0000000540)=""/240, 0x41100, 0x18, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x3, 0x1, 0x10001, 0x1000}, 0x10, 0xad59, r0, 0x6, &(0x7f0000000880)=[r0, r0, r0, r0, r0, r0], &(0x7f00000006c0)=[{0x4, 0x1, 0x4, 0xc}, {0x3, 0x1, 0x0, 0x3}, {0x3, 0x2}, {0x4, 0x2, 0x0, 0x5}, {0x3, 0x4, 0x9, 0x6}, {0x1, 0x1, 0x6, 0x2}], 0x10, 0x8}, 0x94) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$TCGETA(r9, 0x5405, &(0x7f00000001c0)) 1m8.566464623s ago: executing program 1 (id=1393): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000010c0)=@newtaction={0x88c, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x0, 0x9, 0x265, 0x0, {0x1, 0x0, 0xf, 0xc, 0x2, 0x1}, {0xe, 0x1, 0x9, 0x3, 0x400, 0xf992}, 0x0, 0x1, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x60, 0xd5b8, 0x8, 0x1000, 0x4, 0xfff, 0x8001, 0x20, 0x9, 0x9, 0x0, 0x7, 0x1, 0xe, 0xf1ba, 0xe, 0xfffffffb, 0x46, 0x9, 0x2, 0xd, 0x0, 0x3, 0xff, 0x400, 0x47, 0xcbd7, 0x1000, 0x6, 0x3, 0x7fffffff, 0xe9, 0x9d, 0xfff, 0x6, 0x8, 0x40, 0x100, 0xea9, 0x8786, 0x3, 0x5, 0x0, 0x8000, 0xffffffff, 0x1f3540, 0x4, 0x9, 0x1, 0x6, 0x1, 0x0, 0x81, 0x200, 0x1, 0x884, 0x0, 0x0, 0x5, 0x4, 0x1, 0x80000000, 0x0, 0xfffff106, 0x3, 0x6, 0x8, 0x800, 0x2, 0x6, 0x71b, 0xfffffffa, 0xe, 0x7, 0x1, 0x10001, 0x4, 0x8, 0xfffffffa, 0x800, 0x5, 0x3, 0x7, 0x2, 0x5, 0x0, 0x7, 0xfffffff6, 0x2, 0x80000000, 0x2, 0x7f, 0x7, 0x2, 0x6, 0x4, 0x9365, 0x740c172d, 0x7, 0x80000000, 0x58eb2774, 0x80000000, 0x8, 0x415, 0x8, 0x0, 0xff, 0x7f, 0x200, 0x7, 0x1, 0x8, 0xfffffffd, 0x80, 0xe1f, 0x4, 0x9, 0x7, 0x43b, 0x9, 0x12, 0x5, 0x7f, 0x97d, 0x4, 0x10000, 0x5, 0x7, 0x7, 0x0, 0x3b, 0x2, 0x8, 0x6, 0x5, 0x1000, 0x7, 0xbd14, 0xfffffff9, 0xf2, 0x8, 0x4d723a72, 0x3, 0x4, 0xffff, 0x103, 0x8, 0x800000, 0x2, 0x1, 0x4, 0x3, 0xd2, 0x1, 0x7, 0x3, 0x6, 0xfffffffd, 0x2, 0x800, 0x9, 0x72c, 0x983, 0xd613, 0x1000, 0xfff, 0x4, 0x5, 0x3, 0x10000, 0xf6f, 0x4, 0x0, 0x6, 0x9, 0x5, 0x2, 0x1c00, 0x4, 0x6, 0x6, 0x40, 0x401, 0x200, 0x81, 0x4, 0x1, 0xf, 0xf, 0x6, 0xdb, 0x1ff, 0x6, 0x6, 0xff, 0xe69, 0x3, 0x80000000, 0x8, 0x4, 0x6, 0x14, 0x5, 0x7fffffff, 0xac, 0x8, 0x5c74, 0xffff, 0x9, 0xfffffff9, 0x3ff, 0x200, 0x7, 0x6, 0x9, 0x401, 0x4, 0x8, 0xc75, 0x8e0, 0x0, 0x5, 0xff, 0x1, 0x53e8, 0x3, 0x1000, 0x1, 0xcea7, 0x7, 0xf2, 0x6, 0xfffff8d8, 0x7, 0x4, 0x53c3, 0x7fff, 0x0, 0xff, 0x9, 0xff, 0x7, 0x5, 0x0, 0x300000, 0x8, 0x7fff, 0x30e3, 0x3, 0x200, 0x3ff, 0x80, 0x2, 0x3, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x2, 0x9, 0x4, 0x3, 0x1, 0x2, 0x9, 0x41d, 0x9, 0x5, 0x5, 0xeb4, 0xd, 0x0, 0x5, 0x5, 0x1cc, 0x1, 0x9, 0x1000, 0x3, 0xb, 0x2, 0xfffffff8, 0x1ff, 0x4, 0x1, 0x6, 0x1, 0x1, 0x6, 0xa, 0x0, 0x7, 0x34, 0xfffffffb, 0x7, 0x101, 0x7fffffff, 0x1, 0x9, 0x0, 0x80000001, 0xa, 0xb, 0xe1bd, 0x0, 0x8c, 0x8, 0x436b, 0xfffff3bd, 0x834, 0x0, 0x9, 0xdc, 0x8, 0x7ff, 0x0, 0x81, 0x100, 0x2, 0x8, 0x9d34, 0xffffffff, 0xfffffffc, 0xfffff38e, 0x101, 0x200, 0x6, 0x4, 0xf0, 0x2, 0xfffffffc, 0x9, 0x7, 0x6, 0x8001, 0x5, 0x1, 0xabe5, 0x7fffffff, 0xffff04f7, 0x3, 0x9, 0x3, 0x4, 0x4c, 0x10000, 0x1, 0x80, 0x3, 0x9, 0x1, 0x7fff, 0x943, 0x7fff, 0xd5, 0x9, 0x81, 0x7fffffff, 0xdf, 0xd87e, 0x6, 0x6, 0x82, 0x7ff, 0x3, 0xffffffcb, 0x5, 0x2, 0xc, 0xfffffff4, 0xe, 0x2d25, 0x7f, 0xc206627, 0x2a, 0x4, 0xcf, 0x7ff, 0x4, 0xf, 0x1, 0xfffffffc, 0x8, 0x7, 0x800, 0x101, 0x3, 0xba6, 0x10000, 0x4, 0x7fff, 0x71, 0x7, 0x6, 0x9, 0x60, 0x2, 0x2, 0x0, 0x2, 0x2, 0x2, 0x5, 0x70c, 0xa0, 0x857, 0x0, 0x8, 0x1e97, 0x4, 0x1f, 0xf, 0x10000, 0x4, 0x6069, 0xf32, 0xfb9, 0x3, 0x3, 0x3, 0x80000000, 0x1, 0xc, 0x0, 0x100, 0x609c, 0x101, 0x1, 0xc, 0x90, 0x0, 0x8, 0x5, 0xd549, 0x200, 0x5, 0x4, 0x8, 0x6, 0x9, 0x329, 0x1, 0x2, 0x140, 0x5, 0x3, 0xfffffff9, 0x0, 0x9, 0xa141, 0x80000000, 0x1, 0x80000001, 0x9, 0x80, 0x2, 0x7370, 0x4, 0x3, 0x5, 0x4, 0x0, 0x4, 0x4, 0x7, 0x0, 0xfff, 0x3, 0x2, 0xffffffff, 0x7, 0x8, 0x800, 0x43a, 0x8, 0x68c, 0x7, 0x6, 0x5, 0x3, 0x1, 0x3, 0x33e8, 0x1, 0x7, 0x401, 0x8, 0x10, 0x0, 0x7fffffff, 0xffffffff, 0x6, 0x2, 0x8, 0x1000, 0x7, 0x4, 0x0, 0x3, 0x0, 0x6328, 0x2, 0x3000000, 0x8, 0x81, 0x0, 0xfffffffa, 0x7, 0xb, 0x1c000000, 0x8, 0x8, 0x8]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0) 1m8.459662996s ago: executing program 33 (id=1393): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000010c0)=@newtaction={0x88c, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x0, 0x9, 0x265, 0x0, {0x1, 0x0, 0xf, 0xc, 0x2, 0x1}, {0xe, 0x1, 0x9, 0x3, 0x400, 0xf992}, 0x0, 0x1, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x60, 0xd5b8, 0x8, 0x1000, 0x4, 0xfff, 0x8001, 0x20, 0x9, 0x9, 0x0, 0x7, 0x1, 0xe, 0xf1ba, 0xe, 0xfffffffb, 0x46, 0x9, 0x2, 0xd, 0x0, 0x3, 0xff, 0x400, 0x47, 0xcbd7, 0x1000, 0x6, 0x3, 0x7fffffff, 0xe9, 0x9d, 0xfff, 0x6, 0x8, 0x40, 0x100, 0xea9, 0x8786, 0x3, 0x5, 0x0, 0x8000, 0xffffffff, 0x1f3540, 0x4, 0x9, 0x1, 0x6, 0x1, 0x0, 0x81, 0x200, 0x1, 0x884, 0x0, 0x0, 0x5, 0x4, 0x1, 0x80000000, 0x0, 0xfffff106, 0x3, 0x6, 0x8, 0x800, 0x2, 0x6, 0x71b, 0xfffffffa, 0xe, 0x7, 0x1, 0x10001, 0x4, 0x8, 0xfffffffa, 0x800, 0x5, 0x3, 0x7, 0x2, 0x5, 0x0, 0x7, 0xfffffff6, 0x2, 0x80000000, 0x2, 0x7f, 0x7, 0x2, 0x6, 0x4, 0x9365, 0x740c172d, 0x7, 0x80000000, 0x58eb2774, 0x80000000, 0x8, 0x415, 0x8, 0x0, 0xff, 0x7f, 0x200, 0x7, 0x1, 0x8, 0xfffffffd, 0x80, 0xe1f, 0x4, 0x9, 0x7, 0x43b, 0x9, 0x12, 0x5, 0x7f, 0x97d, 0x4, 0x10000, 0x5, 0x7, 0x7, 0x0, 0x3b, 0x2, 0x8, 0x6, 0x5, 0x1000, 0x7, 0xbd14, 0xfffffff9, 0xf2, 0x8, 0x4d723a72, 0x3, 0x4, 0xffff, 0x103, 0x8, 0x800000, 0x2, 0x1, 0x4, 0x3, 0xd2, 0x1, 0x7, 0x3, 0x6, 0xfffffffd, 0x2, 0x800, 0x9, 0x72c, 0x983, 0xd613, 0x1000, 0xfff, 0x4, 0x5, 0x3, 0x10000, 0xf6f, 0x4, 0x0, 0x6, 0x9, 0x5, 0x2, 0x1c00, 0x4, 0x6, 0x6, 0x40, 0x401, 0x200, 0x81, 0x4, 0x1, 0xf, 0xf, 0x6, 0xdb, 0x1ff, 0x6, 0x6, 0xff, 0xe69, 0x3, 0x80000000, 0x8, 0x4, 0x6, 0x14, 0x5, 0x7fffffff, 0xac, 0x8, 0x5c74, 0xffff, 0x9, 0xfffffff9, 0x3ff, 0x200, 0x7, 0x6, 0x9, 0x401, 0x4, 0x8, 0xc75, 0x8e0, 0x0, 0x5, 0xff, 0x1, 0x53e8, 0x3, 0x1000, 0x1, 0xcea7, 0x7, 0xf2, 0x6, 0xfffff8d8, 0x7, 0x4, 0x53c3, 0x7fff, 0x0, 0xff, 0x9, 0xff, 0x7, 0x5, 0x0, 0x300000, 0x8, 0x7fff, 0x30e3, 0x3, 0x200, 0x3ff, 0x80, 0x2, 0x3, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x2, 0x9, 0x4, 0x3, 0x1, 0x2, 0x9, 0x41d, 0x9, 0x5, 0x5, 0xeb4, 0xd, 0x0, 0x5, 0x5, 0x1cc, 0x1, 0x9, 0x1000, 0x3, 0xb, 0x2, 0xfffffff8, 0x1ff, 0x4, 0x1, 0x6, 0x1, 0x1, 0x6, 0xa, 0x0, 0x7, 0x34, 0xfffffffb, 0x7, 0x101, 0x7fffffff, 0x1, 0x9, 0x0, 0x80000001, 0xa, 0xb, 0xe1bd, 0x0, 0x8c, 0x8, 0x436b, 0xfffff3bd, 0x834, 0x0, 0x9, 0xdc, 0x8, 0x7ff, 0x0, 0x81, 0x100, 0x2, 0x8, 0x9d34, 0xffffffff, 0xfffffffc, 0xfffff38e, 0x101, 0x200, 0x6, 0x4, 0xf0, 0x2, 0xfffffffc, 0x9, 0x7, 0x6, 0x8001, 0x5, 0x1, 0xabe5, 0x7fffffff, 0xffff04f7, 0x3, 0x9, 0x3, 0x4, 0x4c, 0x10000, 0x1, 0x80, 0x3, 0x9, 0x1, 0x7fff, 0x943, 0x7fff, 0xd5, 0x9, 0x81, 0x7fffffff, 0xdf, 0xd87e, 0x6, 0x6, 0x82, 0x7ff, 0x3, 0xffffffcb, 0x5, 0x2, 0xc, 0xfffffff4, 0xe, 0x2d25, 0x7f, 0xc206627, 0x2a, 0x4, 0xcf, 0x7ff, 0x4, 0xf, 0x1, 0xfffffffc, 0x8, 0x7, 0x800, 0x101, 0x3, 0xba6, 0x10000, 0x4, 0x7fff, 0x71, 0x7, 0x6, 0x9, 0x60, 0x2, 0x2, 0x0, 0x2, 0x2, 0x2, 0x5, 0x70c, 0xa0, 0x857, 0x0, 0x8, 0x1e97, 0x4, 0x1f, 0xf, 0x10000, 0x4, 0x6069, 0xf32, 0xfb9, 0x3, 0x3, 0x3, 0x80000000, 0x1, 0xc, 0x0, 0x100, 0x609c, 0x101, 0x1, 0xc, 0x90, 0x0, 0x8, 0x5, 0xd549, 0x200, 0x5, 0x4, 0x8, 0x6, 0x9, 0x329, 0x1, 0x2, 0x140, 0x5, 0x3, 0xfffffff9, 0x0, 0x9, 0xa141, 0x80000000, 0x1, 0x80000001, 0x9, 0x80, 0x2, 0x7370, 0x4, 0x3, 0x5, 0x4, 0x0, 0x4, 0x4, 0x7, 0x0, 0xfff, 0x3, 0x2, 0xffffffff, 0x7, 0x8, 0x800, 0x43a, 0x8, 0x68c, 0x7, 0x6, 0x5, 0x3, 0x1, 0x3, 0x33e8, 0x1, 0x7, 0x401, 0x8, 0x10, 0x0, 0x7fffffff, 0xffffffff, 0x6, 0x2, 0x8, 0x1000, 0x7, 0x4, 0x0, 0x3, 0x0, 0x6328, 0x2, 0x3000000, 0x8, 0x81, 0x0, 0xfffffffa, 0x7, 0xb, 0x1c000000, 0x8, 0x8, 0x8]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0) 1m1.690609797s ago: executing program 5 (id=1461): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r0}) (async) open(&(0x7f0000000000)='./file0\x00', 0x200200, 0x8) 1m1.630386846s ago: executing program 5 (id=1463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000300)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x2806, 0x7, 0x0, 0xc}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0x2000082, 0xfea}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x5f3, 0x1, 0xf}}], 0xb0}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f00000002c0)=@attr_pmu_init) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000200)=""/65, &(0x7f0000000040)=0x41) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m1.464209003s ago: executing program 5 (id=1467): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdc02, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4018}, 0x40000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd24, 0x25dfdbfb, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x1) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x9801) r2 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r2) openat$rfkill(0xffffffffffffff9c, 0x0, 0x500, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f00090025bd700000000002040000000c000c"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000380)={0x2, 0x7, 0xee, &(0x7f0000000280)=""/238}) 1m1.217046685s ago: executing program 5 (id=1470): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd0f, &(0x7f0000000000)="0400000000000000000000003801") ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x4, 0x1, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6b05, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f002, 0x4}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0xf001, 0x5, 0x20, 0x3}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x100007ff, 0xf83, 0xd3}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaa"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dde681"], 0xfdef) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x70) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt(r6, 0xff, 0x1, 0x0, &(0x7f00000002c0)=0xfffffffffffffecd) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)=0x8) 1m0.883847627s ago: executing program 5 (id=1477): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195a420, &(0x7f00000001c0)={[{@uid={'uid', 0x3d, 0xee01}}]}) setns(0xc9, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2d00f3c22e6bd4528a726becb5970dac1e3272a5ee41fb451ca6300c69516c297091e7c6955d93a246dd815bc6"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r1, &(0x7f0000000200)="880000", 0x3) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e1f, 0x2200005, @local, 0x1}, 0x1c) getdents(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000000c0)={{}, "a0441f4991eaa4b4c65c660b160b8f33df015e6555cf89b4011d09f3e7da5eb9c589b2c5c3ff791935542ec88e3cdde9bbfde00519728ca4f0979394929bcc880ded9fc382c9ff42ff1297d2cb1ace4ec38d7cc4a6b4c5b0a1adf658f5065e67aea95e7bd5300ed7ff552cfdc63a51ab95e80fb183c89c5a0d4d889001c3eeb2d7ed99de5a52928740bfaf4f5537b7b7f38a52adcb5ec62d4a24bd2eede6c2c167a6a3de5e7d1de861e7fac9ade96836c21aec2ea779c58f02f45ce840fb0366a2078c2b53166d97f5f0604fb507921b3c92eb416048253cdfe7993708db8370bb96254ba717c7e1d101ee3b57b0928fca7d118461d870a160cbab81d3ad852789087e312726ae3c5daf8390172075f927aeb9e4ef24d405cbdbcde9000f9ca952513587bf0c056952c2ad0ce8756035142329afa3bc6d73a419a0f778e22d83821dd3dec809c98afb6e3b3b0d102417fd125db2fe738995b76f9c6ab5a0bbdce776d7c6702a2e653e0509322846b1530e8285c35398e4e1ef73c6d1b7a40e40f7e17a772f33652c0871c5890f095d872e52977937f290b358ce9aac0c7a081be18be4ce2f4e7d9b2332da2e280c9afc5b3440f10e670374121d68d9990ce53b1065dbf0983d3e66449501551bb1bc9d171be184e6f212d8e47969f6f9a34381007baac2316a1415c99142f8380c037f98c0e8c44a7cab0d19207d1b5ae1daab169a930f6eb972034224a999f5fc8b4e3563639da7e5b490f6258900b9cbd274025c082c7f5375efff2944ae2ecc45aec6d61e605ebd45106f116d51d4b731f38e34cf49ee7bd99a40e8cc764e7c384db7dd8c7af94f64c7e2b93318c7127fc55c1c5cee9ca3284ff11e7ab37645d49ade45db2c95f9de308348f8f10c860077ddc14749c3ccb11a361e3c550d948ec93dd8e694eabbd755c49c055824db926b74cd15194237348fc5efa166c7dac9cca85e4f8b82f5fe1f49198bd034877348a5b9b015221d3e02ca3f1b2f13ebb87a241f175eb934974cb3cd2603190964938bb0fa3cd7787a539894c9be2db05a370b52297620f8975f3986bf30dffbcd6b253b9e464267640cf513ea2b05c2189dc503c83a88334974f89f0cea95f9622e56c18eb7b3147caa8057743f084be70f06ee9d6874a48f54d699604c8ab23d0045ec21c577269e17125e4dc5016647fc709fb930225e1d3965eb6aa024d3a3c255360eb3a0a88cc176654a4a383d0ca77315014b1370a8f42abf087bc213ee27ec14cc9b389a6331f23054e0666dbb159a0671eb06313f5533d615b5373b1810e711b7ae9eb446d3c3ffd8136948f38f7ed180148ccbccebff615a560783b7b0427f24c0b5b15b3c24524cb317e5da81cb2b7d03ad07fe2e769010d2d3222bb05b9f9746921e60a0be7956350c779092e62229322e682cd2213241d53936cc3cc2f02059c49e94bb9113b4e83c79f729a0652cacad45dc772a5eed8438eafe2802a1f36177c79a8d0afaf4279b5196794a374674aac5ec6124ea4d6de24ccde78ab0b0cfd388ba58e6189299588e31d5c02db06b412333b7379079a7a6dc125d9603ae27ea94625f5e0f85609caf22d825b8d3b599553982e6006503160ab10f037c41809e885fa81d6f6d364707c2b4fe0a742a587eabd2425f82289898604a496a4f5f67dfcb803e004d63317088d0ed748bb1fd027c288df6179f26e80d4facdac01cb7b51bbe0a7915d19bdb1d96f51eacb9ba94e1df851c435939175db843137440cf5e21354cb3e61e6761eb6989423382026a73243dc3d17a119fe20560fc3b6b6963f8f1c2c39808b00202759a127ba34fc2bdded41ce4e96fafc29ce2517b4ecaec48a6b6458d006ff06522481a00ac950f144d5b31fd0e31ffe5222a45731eed241884f5eda87a1e3d83d83ab427d1c86ae7f3dfa648719426fa56105e74f3d3a63029cb21bb7f69bf79d8615f3d375b33095bfe6bf91a59fedd789ab37086c915ffb9d95b3f6e4efe19b8fda0e4b6252edd36417dbcf8e9850707a120cfec50f695bd319024848fdf94d0ea029b71be8419316ba9a07137d433de06fc272b5a8ac4f28dd74150dd328f8165ad26d38d60a9467d12f5d7e48a0209aac1b9e4541dc5d40fd9fdaac6f52cf7beb4fe7a710fb4540b61681e5a7f72d37a41f0d236483d362415d73ac3042f60d7e010c837354ff7531c199f8c67b344f5bfd23155aaffe13021cffbcf4a318ec860542855c91abf36c71861229ba1c0c1df6093cbf6afd2c7b1660a85c191cc445377a28619f63ab736c3e1b1ea7a45c95b0deb6f5d257907948e84eb8c509abc3d0b2139af1d5a87b8a5f46968e77c7955c0b4fff5c11455f393946cf07728b0e1281a4cb67724a427c822ba1be6a469ad70b73fdf87c44fd31714861a5ac734518b111084aecd4dab37cb60a23d2ad3982a850620e47840f1093c205aad5897dab1c181930caaf3f3da585b8f4293fda72ec45bed08c6b5eb493ddea63f00141fec116300f0083492029642273f76610d14655a3c8ff35558c59a8ee34f5f4706f3eed5b270cb2d3bb5fe23d154db3a97fdc87d53f3597168eeb57aa9fea862a1798dc5378984fe747a09122c0275a13da0248776fe66731de57fc30e052a02f56162fe3e1bec96992b78a967c6f1c880bfe0057e0bb9fd4f3f73e4b360145845ff5cae2c3bfa96eb7dfd34ae2933eb378cd50e8255d4a015b915e4ce8a30967a0256c313431c455202c4945212a26d24ff153e653b6c114ca1e7603df42058907f392227d3676a9744ac3b80716b26a8455fb840ad7aef092aa18bda7a9e8a11d086b90f7be3e3390c633afed3480c07617bd6804de6053361285675483f34e25e53f33923494471e332c2e6aee020e30c3c08f9be219859169276d6f82a79fc7fd2ea746dfb9cf5cafc6fc2c1565b6f324d7899a5fea26f8b9231b352ba88606a8a292699716b6640d33f7db3a86a1c85ceaa8a0b995efc1e41ff3e23c029a0b811333ccb09c8db3b40ff35e27f6bf3c898ab3b743f026ed4ef7cd8c89ed2d949f71555755fd517efcbdb97f855d42a765407ad0d6b1b66e64c48653cf1934060e19e28418c9bb876dcb0868f4c0ff70dcd4d73e60acdac5c8785251e57f6e4c6852f359ff2a3d42e53d2da83be7c667cee9647a0dafbf81c30388c1b2da831ca7f0fd59b353295fd93097256f4f44bc6cf7c7a24d1d776cd7853b22783293421ae324ea4f10dce551b443c19b1eda49a9d337bfd721d5b86694c1caee332acf51cc0b6c60bcccf257734b301ccc2a38285f3ceecadeda631eb571d1a59310d30b3e1854399f17cc7e62173475061b625c67731ed4f5cb4a31f7a7f7ec7c8562de9ce9b923f2c619261683fb585ce3e05124ec32f20628d76ca234e9529865ee19d4a1b07a27bb76cf7c0d1b40335cfa1c64a09aee7c8c4cc6a75d9405bf64db83b8b91320ce0966ff9784adadd2e3364e7589c8fb4aa80373aeab5b09241715a0b0b68607ca3f92406ef4c17e6d7b5c4cc043aee9d42e348120632efdb037bc32a1bd14237c678f650de62bf06653407d80165a93b4becaae26294a3ed6ef6a18ae3bf976a23d93b62cb665494a7294a60136ebab63eafb6b559395d72426cddbcc406e2670a6207c2e9be87d48b770cad5d6e30b615f671b052ae528cdd932a3b956fb2d0e7f9096cea2a652760928807342e6c49cc53a51e5b69b27b32bf0a19ff9b7b31c040e76505285f9fabd49235e28cbc2a9943f3083760692e824d10f087bcbfcb162d8ae58ce5a5f198b8ac5a36f019a91106499dab128b3c649f59cbede47a1a4d08970ce72882aa777c1b62c6962b9108ffd76f389c0b047de745982324a65790e5c0366fcc351c850909054780a862ea77e8a1deb7eae9bf21adda217999c4b431ae23aaff87c3067acfcad8293d5e9dadc53eb61a545247c516a60143f244f3c2c85b69f1e0b2e57cc3effdc9ca64168060c087e9bd4b786dae7995b3615e8b6c028890ddf7d9d8be5b730465e1dd602792404e04ec300656f61b83f9a4634b138a7a23a9a347d7a363a6b6b9408946b5725c1f11ad8e5c8140bb55d9207a17216fea5b751b9f1fcc5d3e94fd0e988d47a93382b40b914ba0f153eca89888fabeba27bc392c2cd104d203be7369ac714818e102a73ed6fec96c8ddf7a890b26d8ed6b10f263ecf38a66d1fcda33d7cff027118c66f04a00a465eafd59d657f29a6040aeed21d94383f9945c534509e507b0e48505f6bc7b67a754214e222319576fa97293ba20b861e7f8e4d0616288819b24fcea5a7e11beb65a5c0a351df40da63d8991f88386acad6f4290f79cc52bfcb311198421243f88ce585e466e5e3b86500d9fcf95013d3ab2b48450a341d37f09bb7fb9fb549ce97645469ca856567870a30d0b51650e2ff8802d34ef4ff6f6ec0ec696113d792e46664d23636281173dc274a654b7a7e25329108f5e29cdd7c823b8e85e0cfd892244766519fb950993f10a899709584e4ec21c5fae7f6c6e0cd50fc50abffb406873704351a57bb4020b68ce9e6987d0a0bb4bc3555eccf749d5c26d95acfea3666d780cf317b6562d3aeb059b1e93da4776ba846f9ae5a398a0171ba427537381501b1e5b366fed3cc92bf68f7527c1de453bf8332a63f41bbbfed01fbf122cd5dc5eebae6a208e834c7f94d1fa2c217cf1879c3d1ccb7cdfda9496756acb45d194e9e8888286626c7f47350a2b2d45d04f00c030e647dd6507f8888fb6ae185c2c4e4804d5f0f729084343bf752466c19f82a43a551b942e8bf76053177cb4313b727228b117525fdeee797b8e00682c0f30b23ae3c3429f2680bf1fc2662077068a6e1bca2c5668a61b92c11d67718e882654c5408dd55898dd3a8fee0073d1486680aac109e691b678569cae22a2f621b3fa8a0617d8d414b9f72b20a9422579dcc5db77cdb652bff0628d620a3c38637c11993bc1ead8e1457d513c0fe7c6f00f427e2e550d60d1cd43eda9fa5732f4bac890a34f51f0e30701f458e1b4a158ce461e0c18cf040d1febc3a926e329b00f36ba9f92321ae93dc995765f161fd5c8df8ed87d0b2accfc6ed9f9645fa124d9f3cd8f326ae8717603b072d282661f7124da8855f050f8c21841f19ea6fc2c8db0d1857114f41362c1547e2c7fc2cbd4a09947fc591ec0837ae6ffc5ecf7c1330f3754aeca637962109dbb17cfc08a559f10756a13503ef615c05cfd19d5fc572db0ee4a3511e75f16e75d06ddb7d425ceaa1bb8fe7965a42fa09e1df8f4fe7d56cfa1b8f5f5584c8a9415dc68084345175c0c1d549b48ba0dafd202fd6b36093aefa94e96da0ba74f6e8bec2c81aec8950c2e4555dce36add86a98a5ea9e34fbdc2ea9c62e37096d803e9e962caa3380b6e0c58525c58b2a56b7b298170ec1c24a5eb0461a4c77bb498c24c8c51a1bc034e70f6bf6c05eed9e72850a68dd95a3879747c15ac42e8a0962d6ce5b0bd4335293c7c6e3313670578d833b0c7a217a54e3e7c70ac4ec8e1d8531d73825b183c1bf213f46173a834bb80a0a970496812bd64c3db33b257f9e5b1459680e1a9bb91beb61a4aabae6c3bcb01e71ec04a86855852cf1b49c786cb6e75594623445b03a1e6733e552a1f8c0bc3c77c39795f24c6b0e78971c5f7461d524f336770a508e7f317d3e4d1c819947d087839f57ffb1f4fbc7b1b07d9d015f37a04f6a524051bffb63cf59d686cd6fd7ab4a8038dd699049deeb91efacb861c5ba61063fa7e"}) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000001001000050000000500000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000004a0be5caf427202d250ee5011962e1904f5a9aa58d695673432f61d507365552ac0e0c4b51824204eb9bfb853a4d11ab11248d1960869520d043407ce538588002df2f4399eec3b9fb9c1fc8252ab783e6c07f4d3c9c"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000100), 0x20000402, r3}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x3ff, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x939f, 0x10000000000ae3, 0x10, r4, r5, 0xc000, '\x00', 0x6, 0x181, 0x1, 0xffffffffffffffff, {0x4, 0x6}, {0x1, 0x7}, {0x2000001, 0x20000d}, {0x1000000000, 0xa00}, 0x2, 0x6, 0xfff, 0x5}}}}) r6 = getuid() keyctl$get_persistent(0x16, r6, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x3) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r8, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 1m0.76901003s ago: executing program 5 (id=1479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000040)="c4a1ff12bd92fb000066baf80cb8201dea85ef66bafc0ced8f297883e7b8010000000f01c1f30f09c4c1e9c265b87bf40fc75ffcc744240030010000c7442402327bbe16ff2c24c74424009c000000c7442402f81913f3ff1c24", 0x5a}], 0x1, 0x200000000000000, 0x0, 0x0) 45.666243072s ago: executing program 34 (id=1479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000040)="c4a1ff12bd92fb000066baf80cb8201dea85ef66bafc0ced8f297883e7b8010000000f01c1f30f09c4c1e9c265b87bf40fc75ffcc744240030010000c7442402327bbe16ff2c24c74424009c000000c7442402f81913f3ff1c24", 0x5a}], 0x1, 0x200000000000000, 0x0, 0x0) 4.84171156s ago: executing program 4 (id=1961): r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0xc1200) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2b, 'rdma'}]}, 0x6) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xfff1}, {0xfff3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000200)={0xc, r3}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) 4.841323548s ago: executing program 4 (id=1963): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x9, 0x401, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) syz_usb_connect(0x1, 0x153, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0xb2, 0xda, 0x5d, 0xff, 0x5c6, 0x9070, 0xb83c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x141, 0x1, 0x7f, 0x1, 0xb0, 0x0, "", [{{0x9, 0x4, 0x4, 0x3, 0x7, 0xd6, 0xcf, 0xc5, 0x1, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'p'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x8000, 0x81, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x3}, [@country_functional={0xe, 0x24, 0x7, 0x0, 0x2, [0x6, 0x3, 0x401, 0x9f0]}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x8, 0x7, 0xfe}]}], [{{0x9, 0x5, 0x80, 0x10, 0x10, 0xf, 0x9, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0xc1, 0x0, 0x6, [@generic={0x9a, 0xe, "890de1f25d1c94c9d3bbc15d64d5013dd02fb6227e0014a4e54647c2f510047a7aec1e937cb4950bfe6baef4501810e1b7fe5d9bce908afd5bc464551b2fe86f6bd6454b0a0e25a68a7a41b820d6de99f759e1696e72421936ab2404646bab1ea4a5efd252dc5492a69af858bd7cb1338bc04397afc4af47dd5d5c1b6519f2c5fda1bbb59bada0c051879e952a567a9e1a6ea584d59b1a29"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x646}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0x2, 0x2, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3c19}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x8, 0xfe}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x5, 0x8, 0x80}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x4, 0x35, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x8915}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x5, 0x3a, 0x8}}]}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x4, 0x1, 0x5, 0xff, 0x3}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x2, [{0x69, &(0x7f0000000500)=@string={0x69, 0x3, "051bfb85baf1409ed3267652bc730b36757703a61bf13cac6514bd657dabcf207f7b31890c971ad95c428da3b27ba4d00b6bfd098c5f441077d93feb12a14bdd86e1bf2093666b593aeab7a40312463a63177aaabb68d56fa7278ead98b6c8772ee3d790a64616"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42c}}]}) 4.354529206s ago: executing program 3 (id=1974): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, r0, &(0x7f0000000040)) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time\x00') setns(r1, 0x40000000) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x218402, 0x14, 0x20}, 0x18) r3 = open_tree(r2, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x48001) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x5fbde000) r4 = syz_usb_connect(0x2, 0xf57, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0xff, 0xee, 0xa5, 0x20, 0x411, 0x9, 0x9108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf45, 0x4, 0x9, 0x7, 0x50, 0x4, "", [{{0x9, 0x4, 0xd8, 0x6, 0x10, 0x97, 0x1b, 0x3, 0x2, [@hid_hid={0x9, 0x21, 0x5, 0x9e, 0x1, {0x22, 0xe90}}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x1001}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3c, 0x2, 0x6d, 0x6, '*s'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x2, 0x4, 0x80, "c7", ']S'}, @as_header={0x7, 0x24, 0x1, 0x2b, 0xf, 0x3}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0x8, 0x4, "d404", "a0c22f"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8, 0xd, 0x6, 'J'}]}], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0x10, 0xb}}, {{0x9, 0x5, 0x8, 0xb, 0x20, 0x3, 0xed, 0x7}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x4, 0x80, 0x29}}, {{0x9, 0x5, 0xc, 0x8, 0x0, 0xf, 0x0, 0xe2, [@generic={0xbd, 0xd, "507d3f0f1678a7743d0b20583ae2b2be415c8f0e8225733158d49d9716c7ed77f10ea4e4679f6e4ec1a9f877a8b64737cdff2e6040e3ac015d72e77519e1ebc77cb3a5c0f8bf708dc2597788e5fa9836117f7709688f8547d918a1070091782504a9977bb1e5d9771bd21f6a38379296b12ff9bdae944f359c918a186f68721033277e200b9339e6ee9ec03181b04aedfe5148a8834ba11194a8317ca92c9536c754635197b8f88eda8b80506c34e47eded9d231d678b60c666584"}, @generic={0x59, 0xb, "b769aa74f0b73399490ffc74e9604e20d1efe76c1cbd1a8e1ecf2a382fe9be25336713fdae26f80ba8957c879135ee03ff562a0c4adae6b6e21d3322f981b4d3439bc197f3430d38e3b3a1ef71c324d16a0a67d72370e7"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x7f, 0x32}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x0, 0x10, 0x28, [@generic={0x91, 0x21, "e40c0ffc01954c0feceaabf0f32244796f582d7926e7727fbeea8960cfd77a144c6682e56b11c513ea50c7387832bdfd37431c6343774295f61b4beb74f27c876f84d8346a61e804dd9efbd818c75ed8d0602df32572d3c67e8bffcee95ffb130dc4e2ed4e2d6d4692b0bc51d00954b71e72b4d2a81108968db29737be35f3eeb1c001c6bdefce835bd33636be8a7b"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0x2, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x1}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x9, 0xb1, 0xff}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x7, 0x7f, 0x9}}, {{0x9, 0x5, 0x8a, 0x10, 0x3ff, 0x6, 0x0, 0x8}}, {{0x9, 0x5, 0x7, 0x4, 0x20, 0x7, 0x9}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x4, 0x0, 0x9, [@generic={0xf2, 0x7, "c9ac374fec334c5d5da9665c30baf88c97f34a48a9556c06be96e057c6d83b71dc9c8d9e0d10740429c252838c03dfdf418095ff45683343661b63b9222799885542738e0118cd9cf671f081ed90c9c9248fd3bb51fb5353e562ed27b9da6afe0183a6770a9b4d419ed5d2fc04db16e8398343cc26fe78e9f61b7a87607b42a1dc940fc30d51bfd3aab2f9cde8d2c9f0df439c0b1e54a6881357804dcaac1f6db6f90b100df97ebb7a7665379f41ea37fc5c690674cc60dc7eac6315c109cff86972ab957eb259b81efe11447d221bbe7d0b994cf79ff429da277ba5953d9747c024fc77ac8552f24a0dc04d6849e185"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x2, 0x0, 0x4a}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x80, 0x0, 0x3, [@generic={0x3b, 0xa, "d0ba7054eb46bfb96ecf7877d25cc9f019d87ad2942b6bf802b5fb4060e72d13d4bbf43e3f6fbcef7b80bb7929c4379c989d3f4a81c12bf59e"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x5, 0x0, 0x0, [@generic={0x1e, 0xc, "1159dbfcdfacc1b0c48020df0d8e2e32d9c8ef24163009e48c1244f8"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x5, 0x5, 0x80, [@generic={0xd6, 0x0, "500a7e5a044aa8c88f2a5ab2f5096eab344e3d50073c9d9518862e7174f2bf58d0bbddeee8bd844c27690fe9dc66343bd51617037eaec9026f0147681abb70f4141cfebaa2ee8bdab76dc202bc4424a695764b0b4e91a35528d28a93f33b9e51998b2dc2ea8a34ea46727cade7348bf8c25f5d64ce6d4f5c7e5c218bc109936e54545e983ab753b63d878c95db4a484e090d1f7dff0708529be9d61920367948111d0f7f46ee0a450817a283bc761f7c8710df56af2a9fe16d229cb8ef88731bdccc71277a6c012f22831c349876571f8f0f916a"}]}}]}}, {{0x9, 0x4, 0x88, 0xbe, 0xc, 0xda, 0x7c, 0xd8, 0x0, [], [{{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x0, 0x10, 0x9, [@generic={0xb1, 0xd, "6c995e849c74cf59e41a4267560a7c724123289bc7d25e8a78ea486e5ce325a96f067c3c20112d0fcac7eefbe13c3fc79ecf46891e506b38327f1e774b0ea5811c645c29248a695d87c79338554843f8b67e067fdf5fe323a1109802ed86cc30504e302831d3e512be87a56e6fdd27345332c9153115112dc2f8c5fe20d6a81de8823e61389ff02e88ba6c768057633eb767d76bad85fde74d29affa65613c22785127feb1c0494fbd5dc04ad5af88"}, @uac_iso={0x7, 0x25, 0x1, 0xa}]}}, {{0x9, 0x5, 0x2, 0x11, 0x400, 0x3, 0xf3, 0x7, [@generic={0xa4, 0x24, "1e60e03351718f5a90711d5b698e7bec3f5646d808d2e165e2e71c1bd642ed35a0b753c132065c1f02d3ed1be8b26c19a71c22364c073cd979eb084e640acd4d163ab30069945954b9c27440a9d77ae5f7cd0fb63f5fc3583f858e57a1db74dce2ccdee11dd76d5369740fee8a943160f118d49f839e525ec2c222e88aa3a1f0ac6f63f2bc0590443c0f304a6deb2744c67773c72346a964509cfad22db40d2c425c"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x6b, 0x7, 0x5, [@generic={0x96, 0xa, "f5fa8e887f062db38aec09c5b31e607cfde749b89d141bd6559ad53ef64353ab7b1de723576832e2c0c5253a236d2e0490083ba87d8227b2ccd51dfc5268f10680c57f8438185a4af07b4355cd8a8014be932c1380f99176455aed14b9c248082a56fd9a7b5d743a66517ea05d6d32b604732c4db0147b652e214d6327494f52218e40313caaff5faa8614026c48c5468fc245dd"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x4, 0x5, 0x81, [@generic={0xac, 0xc, "0c1ba95f74b7c52c0e59dbfee334169a6d69dea851a03283a3608bc52d81b6a51da7633dc3816ca4620dc079c1853c8b3cd5c07bb2a34552c54f0639037b7377bb84cb5b65c76aebdb5cdd3476358316195c22eeb728a6f5492c579eb01c3ee04de4cfc3d4f40999e56a8719d6b30c04dd5542b5769ab6ea3385bf8e05ed30ca0deed43588cf6a27095a62a72f4271018a32dd47281779175b5d5226f4e1e7f65160f367ed090c3ceb6e"}, @generic={0x56, 0x31, "7814ae01de63b8d21c840e142c412375e4c61062511c93d078fc1bcf3373ab2cc74ae8c1fe30220ae26c0a136ac2a8a574e39f9937d6ea52b7fb34fa465b5b2123a4ba214bc090ae44d3dff74614316046720b54"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x200, 0x5, 0x72, 0x6, [@generic={0xbc, 0x24, "5d22ff06d758308a157472f402e12ffda2924fd16360b1681ea19e5ccf7bb3a62fc316288e0fa4d8ad9c9ffae866bd4a9d1f001c00d82406c5cc86e0732d373a863b87e91d086525135c428af83ab2fd350682ec0368193120b19eb7d0a987ebeda9db1e5808a4fd656616d3435978d4159fc444329d467e0a7a28c6e80d74a6e4dc5953a76bd300161411c86906f386a30c4cb8be4f72c42a0dbb675a7dfc4bdb2a85b7f0d4f1675e9851f414f25a573c4dfb24cd9b0890a77f"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x401}]}}, {{0x9, 0x5, 0x80, 0x2, 0x400, 0x0, 0x99, 0x2, [@generic={0x23, 0x21, "cb78e48452b50692db821be8e24c4237c5efe3acf2c6f8e9f0ec57ee4bf7d0b636"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xc6, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x40, 0x8, 0xfc, [@generic={0x3b, 0x10, "8ee46d1e2712f7d197c54c69089fc2250d88501fc4f79c9dc0beafc807298ea4eff29b6342fd236ed6f227ac5691d0c428c9c0ccdd3d2f34d5"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x4, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x94d8}]}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0xbf, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x4, 0x1, 0x6, [@generic={0x4b, 0x4, "e64818f8fde2cddcc3431918055725a4cf034d6f9a6b6ccd90858ec4364987b16baefe41a15b218cb2af3894bc5bd08845ac990d908187fa731975750eaea88a53248d2ed3cff94ca3"}, @generic={0xab, 0x4, "4a751682ca317616da5c9ed02fbac5524061d04d3b82fb4521a5279a3f530e802b67daf7c39191f833bdb0c99e9a084f3a6636a871c569bbb544fa79d2f4b36616d2ec4f7b7028d9a57fa418dddc866ca97df7aecc141264e0418300226490aae569def54d79a59855fea5309e2ae588887b8cb847475267657ad71011537e28afdadd4e30b597b590552aac80fd5b20e048824b6c5a0b2cca0f6477e74687537afad65d57c67debe4"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0x8, 0xb8, 0x2, [@generic={0xfa, 0x22, "9b216b2408337498de6b3145de59c7341c383d16ef9f8a1136087975fbda53e78472d0600931a0613f3ba03673d75c0b79216fd876433465aa7b688bb4620553c24bec963c3b0e6cbb1dce0425536e86666e7d38859ccd363210e7194e53b34ea507617989881b7e2b5518b39250f5ebd19a01c4de82f7297ed6c07ccaba119e6ef7e998b1197a34e98f4fec9d513bde29468f0b6ca304361d34d65b7dde44bfd12d97d3740dcee7e8dce795796d7c22c5d73c195840b581081330a594afacc35a6978f0f89080f029e7e9226faccbaa038ad1b168013a1b454311fdcdfbc285a42888173d279d64374bd3092917487b49ced44fe36c45ff"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x2, 0xf, 0x2, [@generic={0x90, 0xe, "a136219302cfd8e3a0b01c584b95c0f1449bff4f2f96bc2844bc8b3e16f90e5297146009bc05606987d0742502426ebf82a4b9ba2bf7924e3a05d6a67b394ca35dc85b9df637d11d7b7927f7efc2e4c01fae0bae84d6ebb3fb861909a2789f6f8e28a1fe9d7625be8ef2b152f07621a9d63fe6b76da758415eaf34e4acaa0069ab8a6d80f6a37b86f0dbbade8731"}]}}]}}, {{0x9, 0x4, 0x71, 0xbe, 0x9, 0xea, 0xc7, 0x8b, 0xfd, [], [{{0x9, 0x5, 0xe, 0xc, 0x3ff, 0xff, 0x10, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x5}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x4, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x40}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x81, 0x3, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x7, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf7}, @generic={0x2c, 0x21, "7a6f85e76a9181b79090b92f74e80c1a03392ef83c59bcfa01f233f7a64bbd2c267b49de18d5e26685ad"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0x2, 0x0, 0x2a}}, {{0x9, 0x5, 0x6, 0x0, 0x3e7, 0x9, 0xe, 0x40, [@generic={0x23, 0x24, "64577bf68068ef2ab90265b3eebf7ba0f2ad4deb830305a230c68eef54ad2282ff"}, @generic={0x7e, 0x3, "2a7b7c4a9eebaf90921ebca08180c0146ff371c4e625a30411c164f8796c0946c40ea486f94c1c48d7d710178a27d77fc733ad02123a90061472ab6a9c8bce6f548828bc644ec91fef7fdfaac9711262f13a9785b0d698570452ae914529d7645e3adf294a7d26b5e7e86bc55c0cc8a34b925f9113159828734fceee"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x81, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x54, 0xce0}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x1, 0x39, 0x4, [@generic={0xdb, 0xb, "036ebbcba27838a152fb828179e61e5348dabd0866490426f7ea147a983af8092f74b0565ad1357e4ed98088ba4e5d5b41acacd0eed024933e0394ab5c4c41a6915c413bb0420d098168f620cd95116932453202eb1103da6886e13291d06c3f14ba48f533162704ba3cdda8a69cee49fb100331c37a2a7b7b0a6e3a2826c8eaf913b42b65d37cd0bad62d3442794ca9cd302467699215e1f92cdf223b055b627adc911ae27fbb6095cfdf1176ac241c82e4f18ca69c92175093418c029b37c187d5d29488b44f1dfb4b8d9a35cdf959d5ee761428c37f29b4"}, @uac_iso={0x7, 0x25, 0x1, 0x4}]}}, {{0x9, 0x5, 0x9, 0x1c, 0x8, 0xa, 0x9}}]}}, {{0x9, 0x4, 0xa4, 0x9, 0x9, 0x9e, 0xbe, 0x32, 0xf2, [@hid_hid={0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x76d}}, @uac_control={{0xa, 0x24, 0x1, 0xfffb, 0xa}}], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0x4, 0xe5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xff1c}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x7, 0x66, 0x2, [@generic={0xf, 0x21, "f3d429792bf70e5b653626e64a"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x40, 0x8000}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x5, 0x9, 0xd, [@generic={0x46, 0x30, "6fdd62d21ffa5d720711eb1324562f8b7d514693d9f0dae732b538b62a803ba07a7044d07c5c2ca2d2cd0258c1b6ec337a2c5d49f685a345c1f7cf4c851c13e1d0e15271"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xb}]}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0xb9, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x9}]}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x3, 0x97, 0x1}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0xff, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x40}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x3, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x200}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x0, 0x0, 0x9c}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x3, 0x1, 0x5, [@generic={0x53, 0x23, "f7100546c86c3ea113eff9f477333df599715c2226532c0427dd058257786c7e4121732aed273a0420d1802d3fb95d0bd800a04eb7dc03cad4dcea57bb2f041b28aa5561fbc5b5f30a286dc6b505dddd5b"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xd}]}}]}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x600, 0xc5, 0x7, 0x2, 0x8}, 0x6c, &(0x7f0000001240)={0x5, 0xf, 0x6c, 0x1, [@generic={0x67, 0x10, 0xb, "00a32bd07b2e79bdfea3cb1fbf88541e2b88685645d653e8a92583588c1b593db7d17475e6e9825eb99e48711d8722b4a28101bc3b6798243b1b401be3f89bb84c68966cded130a8438a1797e6929f0bba55dbf752027b6de924ba0725728316b5a5cf11"}]}, 0x2, [{0xbe, &(0x7f00000012c0)=@string={0xbe, 0x3, "1e5119f0a1e79f779abfdd17b8edb50db123a8c15c14a45e6c0b817dfe22ff0cbbb6cd8fedd3c9e3394cc0597f3019b3fe51a044be3631dc1726a3410cdca56c308b745cc69f68a4c44a19a98dce67f3a704af7ffdc6cb681032a782162c17cf39069e8d9509f0da7bb208303e53f9abd4ae1260c9be877918f77a1baa2be4f03dab39adb4436f9e8b8eaef9c02e7c3a33acec36ab43494f538732a01355f78f614a060086610b022eaccb2278ae2dc9c43ea78a1566a474e3cd2efa"}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0xf8ff}}]}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x0, &(0x7f0000001440)={0x10007a, 0x1, 0x180000, {r1}}, 0x20) mknodat(r2, &(0x7f0000001480)='./file0\x00', 0x8000, 0x291) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0), 0x40c800, 0x0) ioctl$FICLONE(r5, 0x40049409, r1) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000001500)) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001540)=0x3ff) syz_usb_control_io$sierra_net(r4, &(0x7f0000001640)={0x14, &(0x7f0000001580)={0x20, 0xe, 0x77, {0x77, 0x21, "ee066d300427af55e675da12073edc4ce6f4a5508ef387f982fec6fd5968c2c5833c6d2320e8e25f31c2cd999103dae13e5608d164a583ecc5cd281aacdbdb435f4d275b41a0692d2f7468e9a4a6f41b4bd38da0b9f0ba954cecfb688ca1b6583a26e20faa8b59df1a0cc46b69d709697118cd35fb"}}, &(0x7f0000001600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}}, &(0x7f0000001c00)={0x1c, &(0x7f0000001680)={0x40, 0xa, 0xbe, "4fbd4646927c3e4aa4b105967644253b51b412c6d3a070c4c5c19286bfca798b576c9b23c40405d27307ae4ae743b815bf97006030f8f53489121ca551e0cd3a85a8dedf3db13c55d962e91e2a2cc9fccede1e221d1e58e469e5bc3f2c728240386309310d2e347bbb9eb91e648d548603e00be1f2f8f619aa83374e495b12efae024aaf62a22ba7a1f412a5301f4066aa0e23a1ad804f6641179ef3a29b6211652cc488cc614d42f658a3438603a0217bf174ebdf6dd2d799a9a2a7ac6f"}, &(0x7f0000001780)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001bc0)={0x21, 0x0, 0x1, "d4"}}) link(&(0x7f0000001c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_control_io$uac3(r4, &(0x7f0000002040)={0x14, &(0x7f0000001ec0)={0x40, 0x23, 0xff, {0xff, 0x9, "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"}}, &(0x7f0000002000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}}, &(0x7f0000002340)={0x44, &(0x7f0000002080)={0x40, 0x10, 0xd4, "de36fb2bfa27df7894fa6e32764b07f348c5ebea1e4f6c0801a9564b851866034ebdeac84a45e5b7b81b8811a21c20e69233d959fe5d78a76b8c9f7769bc805b84cbbfa843382ea55f178cee20290def5ab06174266c6be82ea0df20ef7cdacd621ddfe30bf68f86a8fc78598f717372b17a3df740b0e8cee7d9aca3fac90af3ffcf3fc7a63cd004facc220aba85426d32f12d58e3084bf52dfb7024ceae410f2d9f84bcc6cbd8dd685a804676d7afc4b160baf5635dc786dfcf2f868a0130ec080f193990dfde99be91cad50df842d4e54753d4"}, &(0x7f0000002180)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000021c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000002200)={0x20, 0x81, 0x3, "0ac8b4"}, &(0x7f0000002240)={0x20, 0x82, 0x3, "89509b"}, &(0x7f0000002280)={0x20, 0x83, 0x2, "608d"}, &(0x7f00000022c0)={0x20, 0x84, 0x3, '!9:'}, &(0x7f0000002300)={0x20, 0x85, 0x3, "7c1cea"}}) syz_usb_disconnect(r4) r6 = fanotify_init(0x1, 0x80000) syz_usb_control_io(r4, &(0x7f00000025c0)={0x2c, &(0x7f00000023c0)={0x20, 0x6, 0xf1, {0xf1, 0x8, "bc09d45b48d5398eb7d1940c71481950437b376ea937bca0459521b21828f8ff4d98b42c93dbb254052b4a52b1a63fb2886b857d26cbdf2d64ed8e884cbd2778b1f8173fab43d1be1d09429ad4a029b88a5be1509e30aabf7739e80c3aadc66e9cd5540c45b4344e64f001e910a3cc3bc5d98abfa9f52f65bb482fe6f5e5290205ecc6d11fc87d72e2a59fbb6f6d4afff92ad4e9d55d6424cd7cbf208c2eaecef6165ad6dc4e729cf245b8cde9a8a0c55680e693dc8eaa7adda931559136643b5756e4107c22c06d61e2fbb93520b5114168a6e4878ca148594902db821e6ec578284eab68b1c6463121b17b029dfa"}}, &(0x7f00000024c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xa0ff}}, &(0x7f0000002500)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000002540)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd9, 0x80, 0xbd, 0xaa, "fcd973e9", "2ffa7993"}}, &(0x7f0000002580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf1, 0x60, 0x4, 0x4d, 0x7, 0x7, 0x93d}}}, &(0x7f0000002a00)={0x84, &(0x7f0000002600)={0x40, 0x16, 0x21, "9b365eefa3a48c9532922e44188c3aeb134cda53102bf6fffd7d9c39fff62a9224"}, &(0x7f0000002640)={0x0, 0xa, 0x1, 0x6d}, &(0x7f0000002680)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000026c0)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000002700)={0x20, 0x0, 0x8, {0x8, 0x10, [0xf00]}}, &(0x7f0000002740)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000002780)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000027c0)={0x40, 0xb, 0x2, "f2ae"}, &(0x7f0000002800)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000002840)={0x40, 0x13, 0x6, @remote}, &(0x7f0000002880)={0x40, 0x17, 0x6, @random="03c0141cb0e8"}, &(0x7f00000028c0)={0x40, 0x19, 0x2, "a758"}, &(0x7f0000002900)={0x40, 0x1a, 0x2, 0x80}, &(0x7f0000002940)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000002980)={0x40, 0x1e, 0x1, 0xe}, &(0x7f00000029c0)={0x40, 0x21, 0x1}}) listxattr(&(0x7f0000002ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002c00)=""/130, 0x82) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000002cc0)={0x0, 0x0, {0x100, 0x0, 0x3, 0x1bbc}}) r7 = socket(0xb, 0x1, 0x5) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000002d00)={{r6}, 0x7ea, 0x3f7ea949, 0x7f}) syz_open_dev$char_usb(0xc, 0xb4, 0x7) recvmsg$can_bcm(r5, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002d40)=""/204, 0xcc}, {&(0x7f0000002e40)=""/187, 0xbb}], 0x2, &(0x7f0000002f40)=""/128, 0x80}, 0x143) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003280)={0xa, 0x12, &(0x7f0000003000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x71}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000030c0)='syzkaller\x00', 0xa, 0x0, &(0x7f0000003100), 0x41000, 0x40, '\x00', 0x0, @fallback=0x2d, r6, 0x8, &(0x7f0000003140)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000003180)={0x4, 0x6, 0x1, 0xe229}, 0x10, 0x0, r3, 0x6, &(0x7f00000031c0)=[r3, r3, r3, 0x1, r3, r3], &(0x7f0000003200)=[{0x1, 0x1, 0x10, 0xc}, {0x0, 0x5, 0xb, 0xb}, {0x3, 0x1, 0x8, 0x7}, {0x3, 0x3, 0x3, 0x5}, {0x2, 0x4, 0x0, 0xa}, {0x0, 0x5, 0xd, 0x7}], 0x10, 0x56}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003580)={r8, 0x0, 0x51, 0xf4, &(0x7f0000003340)="d12f76c53a5c609d07e56f2ef08f8726113349283779b83d5a83afab24b4a2387fc43ceee1ff3a5dc471366daac2886db03b7923a0d031f6f61b3e2a4bb9134929f4299468d2d7e589ed8aaae3b1c6172a", &(0x7f00000033c0)=""/244, 0x4, 0x0, 0x38, 0x7a, &(0x7f00000034c0)="f741d8dd4472c944a0559b1a3132ea12ebedeeeb272d32bb406d0cc3730b7e7a4c0644ce9652dcf13db04a966cc912875a115a4d2e795340", &(0x7f0000003500)="4810e6f70f75eda43c26ee909e6fc50546a55d82df7e3db9d7490c88adf7aedd86fa4c3364d15d8ff5de7dd39135327f414dd52a90dceab000811857f22d78a02ea700bc12c3664351909135a360909b4db6ab2f8e6d07477e7d8b4478457763e37fff50ea45099753fdb6d96fa963c4bd2815f91ece2c8dada7", 0x0, 0x0, 0x18000}, 0x50) getpgid(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) 2.77447115s ago: executing program 6 (id=1979): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x8000, 0x7, 0x0, 0x8000, {{0x16, 0x4, 0x0, 0x9, 0x58, 0x64, 0x0, 0x8, 0x29, 0x0, @broadcast, @multicast2, {[@cipso={0x86, 0x23, 0x2, [{0x6, 0x4, "b04b"}, {0x0, 0x3, "b1"}, {0x2, 0xb, "bad907af8dbfbbd818"}, {0x2, 0xb, "14a239f95d5d8fb7e3"}]}, @cipso={0x86, 0xc, 0x0, [{0x2, 0x6, "cddd7120"}]}, @rr={0x7, 0x13, 0xd2, [@dev={0xac, 0x14, 0x14, 0x35}, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@local, 0x18, r4}) 2.3529741s ago: executing program 6 (id=1980): r0 = socket(0x29, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000037c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r1, &(0x7f0000000000)='3', 0x4e) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}]}, 0x80}, 0x1, 0x7}, 0x0) io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) dup2(r0, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000002c0)={0x3, 'wlan1\x00', {0x9}, 0x3ff}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031682d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0x7, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.213960224s ago: executing program 6 (id=1981): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8008044) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r6, 0x501, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000680), 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x210, r7, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_IE={0x2d, 0x2a, [@dsss={0x3, 0x1, 0x99}, @rann={0x7e, 0x15, {{0x0, 0x2a}, 0x81, 0x7, @broadcast, 0x7, 0x8e, 0x6}}, @chsw_timing={0x68, 0x4, {0x3, 0x101}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x12, 0x40}}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}, @NL80211_ATTR_IE={0x18f, 0x2a, [@dsss={0x3, 0x1, 0x78}, @supported_rates={0x1, 0x8, [{0x36, 0x1}, {0x24, 0x1}, {0x16, 0x1}, {0x18}, {0x4}, {0x9, 0x1}, {0x48}, {0x4}]}, @preq={0x82, 0x4c, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x89, 0x0, 0x5fb, @device_a, 0x7, @value, 0x5, 0x81, 0x4, [{{0x1}, @device_b, 0xfffffff0}, {{0x0, 0x0, 0x1}, @device_b, 0x7fff}, {{}, @device_a, 0xffffffff}, {{0x0, 0x0, 0x1}, @device_b, 0xc640}]}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x28}}, @fast_bss_trans={0x37, 0x114, {0x9, 0x9, "c304f5f61a9c16f270553a6c4555aa6c", "caa9fc439c3bd274eff45f83d61d876a678a691edf8f1479b0cadbedabada1be", "a091710d45a88a29f0c50b9b6582daae9227593ac318ceac66eac0be733a2cab", [{0x2, 0x19, "f1046f8aa2b4bc467241a78cd8c9f8ed380f5c6da0f7f6e31e"}, {0x1, 0x22, "526b3281ee093761ae70024c64cc733b985f2c3c73871f491d60794c59be72aa9073"}, {0x1, 0x1b, "96dbfac7e9409365e50eb9276da4c88cc3ae856b6344bd29ddbb8b"}, {0x4, 0xd, "d768c637199dc784788ad3a318"}, {0x2, 0x3, "66dc2b"}, {0x3, 0x1a, "c5d21c9294c17fd88a98d8c0ff8b44bf8bbf3c74dde731cd7b90"}, {0x4, 0xc, "68e9c2377217154288e6d7c5"}, {0x4, 0x3, "4222be"}, {0x2, 0x21, "7f78469d7ddb8cdf601fdd1c15c363da20c57af43ff73bf262851ad20c551e142f"}]}}, @challenge={0x10, 0x1, 0x66}, @chsw_timing={0x68, 0x4, {0xf9ee, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x10}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x210}}, 0x20000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000a80)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r8, &(0x7f0000000d40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x238, r9, 0x3343c362c262bdf7, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_SDP={0x1b0, 0x13, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [{0x7, 0x1, '@@*'}]}, {0x50, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan0\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0x6, 0x1, '/^'}, {0xc, 0x1, './{\xd8\',):'}, {0x5, 0x1, '#'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, 'wpan0\x00'}]}, {0x5c, 0x0, 0x0, 0x1, [{0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}, {0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}, {0xa, 0x1, 'wpan0\x00'}, {0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}, {0x6, 0x1, '*@'}, {0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}, {0xb, 0x1, 'TIPCv2\x00'}, {0x7, 0x1, '#*@'}]}, {0x20, 0x0, 0x0, 0x1, [{0x8, 0x1, '{,-['}, {0x4}, {0xb, 0x1, 'TIPCv2\x00'}, {0x4}]}, {0x24, 0x0, 0x0, 0x1, [{0x7, 0x1, '\\&('}, {0xd, 0x1, ',\\\\{^[(^('}, {0x8, 0x1, '[t%)'}]}, {0x40, 0x0, 0x0, 0x1, [{0x9, 0x1, '\\!^-{'}, {0x4}, {0xa, 0x1, 'wpan0\x00'}, {0xb, 0x1, ':-(\xa1^[,'}, {0x9, 0x1, '[}\'$['}, {0x7, 0x1, '](-'}]}, {0x20, 0x0, 0x0, 0x1, [{0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x3c, 0x0, 0x0, 0x1, [{0x7, 0x1, '(!-'}, {0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}, {0x11, 0x1, '\\&:-(\\-$/%&$\\'}, {0x5, 0x1, 'K'}, {0x5, 0x1, '$'}]}, {0x14, 0x0, 0x0, 0x1, [{0xd, 0x1, '*^}-+)++\x9e'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_LLC_SDP={0x6c, 0x13, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [{0x5, 0x1, ')'}, {0xd, 0x1, 'nl802154\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [{0xb, 0x1, 'batadv\x00'}, {0xa, 0x1, 'wpan0\x00'}]}, {0x20, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0xd, 0x1, 'nl802154\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan4\x00'}]}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004004) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000dc0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000e00)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r11, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x50, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r15 = getpgrp(0x0) ptrace(0x210b, r15) sendmsg$NFC_CMD_VENDOR(r8, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0xac, r9, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_DATA={0x80, 0x1f, "43b179521ab47852655c87d40bd6477187a262e9444c3e394031265f33f870028e6c066dc84ce604352ad800e4c0d50a2ad0a30eb69c1024d263d82cf5ea88f0e634b44dc8ddf3a7c82640c2ac324d0ad28e664769496b75cd0f8f94c6be20e8c6f9818a8a81dfa1d8d4be06ea2206032a8471091fc00b7d44867466"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0xac}, 0x1, 0x0, 0x0, 0xc880}, 0x10000000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x94, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x57, 0x6, 0x1, 0x0, "f0583436df57a5d237894eb23d4de92b4573c8a662280b0803729b8b7496aee327da4b638a1f3f3e8bb73d0331da7dcd006b8727c0fc46757c8ae868fa6e413279adbac259625bb203dc963d3d039f73d9e7b0"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x94}}, 0x4000080) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 2.071298698s ago: executing program 6 (id=1982): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x146) pwrite64(r0, &(0x7f00000000c0)="d3", 0x1, 0xc899) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000140)='./bus\x00', 0x4000000) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) (fail_nth: 2) 2.028834405s ago: executing program 6 (id=1983): r0 = socket$igmp6(0xa, 0x3, 0x2) syz_usb_connect(0x0, 0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) ioctl(r1, 0xc4c85512, &(0x7f0000000200)) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffe3c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r2, &(0x7f0000000000)="1fd9a13fcb", 0x5, 0x844, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) 1.76276102s ago: executing program 4 (id=1985): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x82200, 0x0) ioctl$FE_READ_STATUS(r1, 0x80046f45, &(0x7f0000000280)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @private=0xa010100}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000080), 0x81, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x80a0a124016018bc) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8010}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000206010400000000000000000000000505000400030000009b2ddadd60ca69d5823e481f61fa604a481cc688863366c8d0d9"], 0x1c}, 0x1, 0x0, 0x0, 0x4048085}, 0x8000) syz_80211_inject_frame(0x0, 0x0, 0x18) 1.593028052s ago: executing program 0 (id=1987): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x6, 0x5, 0x1, 0x5}}) (fail_nth: 1) 1.518089756s ago: executing program 0 (id=1988): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) sendfile(r0, r0, 0x0, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x8) write(r1, &(0x7f0000000080)='4', 0x1) close(0x3) 1.203382645s ago: executing program 3 (id=1989): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x146) pwrite64(r0, &(0x7f00000000c0)="d3", 0x1, 0xc899) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r1, 0x0, 0x32, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000140)='./bus\x00', 0x4000000) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) 1.09442116s ago: executing program 4 (id=1990): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)=0x6) (async) setrlimit(0x7, &(0x7f0000000080)={0x0, 0xfffffffffffffffe}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x50) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4}) r3 = socket(0xa, 0x1, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x237, 0x1a, 0x2, 0x12, 0x2}) (async) setrlimit(0x6, &(0x7f00000001c0)={0x8000000000000000, 0x3d}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000340)={@empty, @empty, r6}, 0xc) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 982.115685ms ago: executing program 3 (id=1991): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xff03, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x525880, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/80, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000004100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x25000}) syz_emit_ethernet(0x66, &(0x7f0000001080)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb08004571005800680000c02f9078ac1414aaffffffff0420880b0000000000000800040086dd080088be000000001596dd020100000000000009080022eb00000002260475a20200000000001c04000d9a1c0800655800000000"], 0x0) 881.635814ms ago: executing program 3 (id=1992): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000300000000030005000003000002000000ac1414aa000000000000000001001500080000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x814) 711.671615ms ago: executing program 3 (id=1993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 711.431171ms ago: executing program 6 (id=1994): openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x8000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r4, 0x8914, &(0x7f0000000400)="736c300000000000000000000000000001") ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0xbe) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) (async) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, &(0x7f00000005c0)="c4c2113b8022000000420f09dbe1b97e0b0000b83f000000ba000000000f300f015c2bc1c4415572e00bb9e3020000b802000000ba000000000f303e643e26660fee2f410fc7a9008000002e2664410f2261", 0x52}], 0x1, 0x6c, &(0x7f0000000680)=[@cstype3={0x5, 0xf}], 0x1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, &(0x7f00000005c0)="c4c2113b8022000000420f09dbe1b97e0b0000b83f000000ba000000000f300f015c2bc1c4415572e00bb9e3020000b802000000ba000000000f303e643e26660fee2f410fc7a9008000002e2664410f2261", 0x52}], 0x1, 0x6c, &(0x7f0000000680)=[@cstype3={0x5, 0xf}], 0x1) read$hidraw(r7, &(0x7f0000000740)=""/169, 0xa9) ioctl$FIBMAP(r6, 0x5387, &(0x7f0000000040)=0x85) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r5, 0x2af1, 0xfffffffffffffff9, 0x5}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r5, 0x2af1, 0xfffffffffffffff9, 0x5}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000000c0)={[0xfffffffffffffffd, 0x4, 0x0, 0x5, 0x5, 0x2, 0x1, 0x7fffffffffffffff, 0x3, 0xfff, 0x0, 0xc1, 0x2, 0xffffffffffff3240, 0x6, 0x3], 0x41000, 0x12181}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000000c0)={[0xfffffffffffffffd, 0x4, 0x0, 0x5, 0x5, 0x2, 0x1, 0x7fffffffffffffff, 0x3, 0xfff, 0x0, 0xc1, 0x2, 0xffffffffffff3240, 0x6, 0x3], 0x41000, 0x12181}) 593.178357ms ago: executing program 4 (id=1995): r0 = socket(0x29, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000037c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r1, &(0x7f0000000000)='3', 0x4e) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}]}, 0x80}, 0x1, 0x7}, 0x0) io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) dup2(r0, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000002c0)={0x3, 'wlan1\x00', {0x9}, 0x3ff}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031682d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0x7, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 592.878702ms ago: executing program 3 (id=1996): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000001c0)=""/182) (async) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000012008188e6b42aa73772cc9f1b2f8b48430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x600, 0x1}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="8509f83288e1aaaaaaaaaa1c08004515001c00670000000290780a010102e08000011181000001"], 0x0) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x200000, 0x1800, 0x7, 0x1}, 0x20) 504.215278ms ago: executing program 0 (id=1997): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x5, @empty, 0xd}}, 0xf, 0x3}, &(0x7f00000002c0)=0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000b77000/0x2000)=nil, 0x3000}) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 414.720878ms ago: executing program 0 (id=1998): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x6, 0x5, 0x1, 0x5}}) 312.919315ms ago: executing program 0 (id=1999): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) pipe2(&(0x7f0000000500)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000014)="0500010001000000", 0x8) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000600)='trigger_packet', 0xe, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x146) pwrite64(r4, &(0x7f00000000c0)="d3", 0x1, 0xc899) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000140)='./bus\x00', 0x4000000) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f0000000000)=0xbf4b, 0x4) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000a00)=0x1, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) 112.68319ms ago: executing program 0 (id=2000): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd0f, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x4, 0x1, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6b05, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f002, 0x4}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x100007ff, 0xf83, 0xd3}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaa"], 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dde681"], 0xfdef) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x70) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt(r7, 0xff, 0x1, 0x0, &(0x7f00000002c0)=0xfffffffffffffecd) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200)=0x8) 0s ago: executing program 4 (id=2001): syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) r0 = syz_open_dev$evdev(0x0, 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x9, 0x2, 0xefff, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) kernel console output (not intermixed with test programs): 5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.250852][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.250881][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.250910][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.445371][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.445391][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.471486][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.471507][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.496960][ T43] audit: type=1400 audit(1789738354.857:25458): avc: denied { mounton } for pid=10866 comm="syz-executor" path="/syzkaller.7IO7Lt/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 187.730747][T11016] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 187.730774][T11016] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.730835][T11016] vhci_hcd vhci_hcd.0: Device attached [ 187.757585][T11017] bond0: (slave ip_vti0): Error: Device can not be enslaved while up [ 187.758141][T11017] sctp: [Deprecated]: syz.5.1394 (pid 11017) Use of int in max_burst socket option. [ 187.758141][T11017] Use struct sctp_assoc_value instead [ 187.766283][ T5745] Bluetooth: hci1: command tx timeout [ 187.800120][T11017] sctp: [Deprecated]: syz.5.1394 (pid 11017) Use of int in maxseg socket option. [ 187.800120][T11017] Use struct sctp_assoc_value instead [ 187.931873][ T43] audit: type=1400 audit(1789738355.293:25459): avc: denied { mount } for pid=11027 comm="syz.5.1422" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 187.949968][ T43] audit: type=1400 audit(1789738355.312:25460): avc: denied { listen } for pid=11027 comm="syz.5.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.950510][T11028] vivid-000: ================= START STATUS ================= [ 187.950529][T11028] vivid-000: Radio HW Seek Mode: Bounded [ 187.950550][T11028] vivid-000: Radio Programmable HW Seek: false [ 187.950569][T11028] vivid-000: RDS Rx I/O Mode: Block I/O [ 187.950588][T11028] vivid-000: Generate RBDS Instead of RDS: false [ 187.950607][T11028] vivid-000: RDS Reception: true [ 187.950624][T11028] vivid-000: RDS Program Type: 0 inactive [ 187.950646][T11028] vivid-000: RDS PS Name: inactive [ 187.950667][T11028] vivid-000: RDS Radio Text: inactive [ 187.950688][T11028] vivid-000: RDS Traffic Announcement: false inactive [ 187.950709][T11028] vivid-000: RDS Traffic Program: false inactive [ 187.950729][T11028] vivid-000: RDS Music: false inactive [ 187.950750][T11028] vivid-000: ================== END STATUS ================== [ 188.000640][ T8903] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 188.017407][ T43] audit: type=1400 audit(1789738355.372:25461): avc: denied { unmount } for pid=10866 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 188.054629][T11032] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 188.054674][T11032] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 188.138336][ T43] audit: type=1400 audit(1789738355.491:25462): avc: denied { create } for pid=11036 comm="syz.5.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 188.233005][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1428'. [ 188.235674][T11048] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 188.394728][T11060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.394935][T11060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.498965][T11073] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 188.595291][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1440'. [ 188.608900][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1440'. [ 188.639529][ T5839] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 188.652392][T11093] bond0: (slave ip_vti0): Error: Device can not be enslaved while up [ 188.786715][ T5839] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 188.787991][ T5839] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.788028][ T5839] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 188.788047][ T5839] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 188.788063][ T5839] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 188.788095][ T5839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.797592][T11061] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 188.797796][T11061] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 188.799572][ T5839] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 188.801370][ T5839] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 188.801434][ T5839] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 188.802888][ T5839] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 188.812189][ T5839] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 188.812252][ T5839] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 188.834866][ T5839] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 188.967806][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.143479][ T9] usb 9-1: USB disconnect, device number 5 [ 189.178906][T11115] IPVS: length: 120 != 24 [ 189.196984][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 189.204765][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 189.205456][ T9] keyspan 9-1:1.0: device disconnected [ 189.579145][T11127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=11127 comm=syz.3.1453 [ 189.626930][T11130] uprobe: syz.5.1454:11130 failed to unregister, leaking uprobe [ 189.862831][T11148] netlink: 'syz.5.1458': attribute type 1 has an invalid length. [ 189.932723][T11144] fuse: Bad value for 'rootmode' [ 190.341207][ T5745] Bluetooth: hci1: command tx timeout [ 190.398936][T11175] netlink: 'syz.4.1466': attribute type 58 has an invalid length. [ 190.468898][T11181] netlink: 'syz.5.1467': attribute type 12 has an invalid length. [ 190.660373][T11198] FAULT_INJECTION: forcing a failure. [ 190.660373][T11198] name failslab, interval 1, probability 0, space 0, times 0 [ 190.660397][T11198] CPU: 0 UID: 0 PID: 11198 Comm: syz.4.1472 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.660427][T11198] Tainted: [L]=SOFTLOCKUP [ 190.660431][T11198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.660438][T11198] Call Trace: [ 190.660443][T11198] [ 190.660448][T11198] dump_stack_lvl+0x100/0x190 [ 190.660482][T11198] should_fail_ex.cold+0x5/0xa [ 190.660502][T11198] should_failslab+0xc2/0x120 [ 190.660521][T11198] __kvmalloc_node_noprof+0x113/0x9b0 [ 190.660536][T11198] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 190.660554][T11198] ? percpu_ref_init+0xec/0x3f0 [ 190.660571][T11198] ? io_alloc_cache_init+0x38/0x170 [ 190.660591][T11198] io_alloc_cache_init+0x38/0x170 [ 190.660609][T11198] io_uring_setup.cold+0x450/0x1cde [ 190.660622][T11198] ? lock_acquire+0x1d1/0x380 [ 190.660634][T11198] ? avc_has_perm_noaudit+0x56/0x3b0 [ 190.660649][T11198] ? __pfx_io_uring_setup+0x10/0x10 [ 190.660664][T11198] ? find_held_lock+0x2b/0x80 [ 190.660680][T11198] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 190.660694][T11198] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 190.660718][T11198] ? xfd_validate_state+0x129/0x190 [ 190.660734][T11198] __x64_sys_io_uring_setup+0xc2/0x170 [ 190.660748][T11198] do_syscall_64+0x123/0x790 [ 190.660769][T11198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.660780][T11198] RIP: 0033:0x7efc4f99e159 [ 190.660792][T11198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.660803][T11198] RSP: 002b:00007efc508f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 190.660815][T11198] RAX: ffffffffffffffda RBX: 00007efc4fc25fa0 RCX: 00007efc4f99e159 [ 190.660822][T11198] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000020 [ 190.660829][T11198] RBP: 00007efc4fa3503b R08: 0000000000000000 R09: 0000000000000000 [ 190.660836][T11198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.660843][T11198] R13: 00007efc4fc26038 R14: 00007efc4fc25fa0 R15: 00007ffdbcee7448 [ 190.660858][T11198] [ 190.692637][T11194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=11194 comm=syz.3.1471 [ 190.768401][T11019] vhci_hcd: connection reset by peer [ 190.768636][ T5812] vhci_hcd vhci_hcd.0: stop threads [ 190.768651][ T5812] vhci_hcd vhci_hcd.0: release socket [ 190.768679][ T5812] vhci_hcd vhci_hcd.0: disconnect device [ 190.798624][T11206] 9p: Invalid gid '0x00000000ffffffff' [ 190.964122][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 190.964141][ T43] audit: type=1400 audit(1789738358.284:25473): avc: denied { remount } for pid=11216 comm="syz.5.1477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 190.973106][T11219] fuse: Bad value for 'group_id' [ 190.973121][T11219] fuse: Bad value for 'group_id' [ 190.976553][ T43] audit: type=1400 audit(1789738358.294:25474): avc: denied { mounton } for pid=11216 comm="syz.5.1477" path="/26/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 191.051608][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'. [ 191.061688][T11228] gretap1: entered allmulticast mode [ 191.789307][T11214] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 192.729363][T11248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.734072][T11248] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 193.059343][T11267] FAULT_INJECTION: forcing a failure. [ 193.059343][T11267] name failslab, interval 1, probability 0, space 0, times 0 [ 193.059366][T11267] CPU: 0 UID: 0 PID: 11267 Comm: syz.4.1491 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.059384][T11267] Tainted: [L]=SOFTLOCKUP [ 193.059389][T11267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.059396][T11267] Call Trace: [ 193.059401][T11267] [ 193.059406][T11267] dump_stack_lvl+0x100/0x190 [ 193.059427][T11267] should_fail_ex.cold+0x5/0xa [ 193.059443][T11267] should_failslab+0xc2/0x120 [ 193.059459][T11267] __kvmalloc_node_noprof+0x113/0x9b0 [ 193.059471][T11267] ? __kmalloc_cache_noprof+0x201/0x6d0 [ 193.059495][T11267] ? percpu_ref_init+0xec/0x3f0 [ 193.059512][T11267] ? io_alloc_cache_init+0x38/0x170 [ 193.059532][T11267] io_alloc_cache_init+0x38/0x170 [ 193.059550][T11267] io_uring_setup.cold+0x46e/0x1cde [ 193.059563][T11267] ? lock_acquire+0x1d1/0x380 [ 193.059576][T11267] ? avc_has_perm_noaudit+0x56/0x3b0 [ 193.059591][T11267] ? __pfx_io_uring_setup+0x10/0x10 [ 193.059605][T11267] ? find_held_lock+0x2b/0x80 [ 193.059620][T11267] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 193.059635][T11267] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 193.059658][T11267] ? xfd_validate_state+0x129/0x190 [ 193.059674][T11267] __x64_sys_io_uring_setup+0xc2/0x170 [ 193.059688][T11267] do_syscall_64+0x123/0x790 [ 193.059703][T11267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.059715][T11267] RIP: 0033:0x7efc4f99e159 [ 193.059725][T11267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.059735][T11267] RSP: 002b:00007efc508f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 193.059747][T11267] RAX: ffffffffffffffda RBX: 00007efc4fc25fa0 RCX: 00007efc4f99e159 [ 193.059755][T11267] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000020 [ 193.059762][T11267] RBP: 00007efc4fa3503b R08: 0000000000000000 R09: 0000000000000000 [ 193.059768][T11267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.059775][T11267] R13: 00007efc4fc26038 R14: 00007efc4fc25fa0 R15: 00007ffdbcee7448 [ 193.059789][T11267] [ 193.163408][ T8903] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 193.211719][T11270] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 193.211743][T11270] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.213426][T11270] vhci_hcd vhci_hcd.0: Device attached [ 193.314479][T11274] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1493'. [ 193.507431][ T8903] usb 37-1: device descriptor read/64, error -110 [ 193.747663][ T8903] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 194.325975][T11307] veth1_macvtap: mtu greater than device maximum [ 194.395175][ T43] audit: type=1400 audit(1789738361.698:25475): avc: denied { setopt } for pid=11309 comm="syz.4.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 194.414547][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1501'. [ 194.414575][T11313] bridge: RTM_NEWNEIGH with invalid ether address [ 194.439268][T11314] comedi comedi0: pcl818: a I/O base address must be specified [ 194.796993][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.797024][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.821107][T11331] netlink: 'syz.4.1503': attribute type 8 has an invalid length. [ 194.853584][T11333] FAULT_INJECTION: forcing a failure. [ 194.853584][T11333] name failslab, interval 1, probability 0, space 0, times 0 [ 194.853607][T11333] CPU: 0 UID: 0 PID: 11333 Comm: syz.4.1504 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.853623][T11333] Tainted: [L]=SOFTLOCKUP [ 194.853628][T11333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.853634][T11333] Call Trace: [ 194.853639][T11333] [ 194.853645][T11333] dump_stack_lvl+0x100/0x190 [ 194.853669][T11333] should_fail_ex.cold+0x5/0xa [ 194.853686][T11333] should_failslab+0xc2/0x120 [ 194.853703][T11333] __kvmalloc_node_noprof+0x113/0x9b0 [ 194.853715][T11333] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 194.853732][T11333] ? percpu_ref_init+0xec/0x3f0 [ 194.853748][T11333] ? io_alloc_cache_init+0x38/0x170 [ 194.853766][T11333] io_alloc_cache_init+0x38/0x170 [ 194.853783][T11333] io_uring_setup.cold+0x450/0x1cde [ 194.853796][T11333] ? lock_acquire+0x1d1/0x380 [ 194.853808][T11333] ? avc_has_perm_noaudit+0x56/0x3b0 [ 194.853824][T11333] ? __pfx_io_uring_setup+0x10/0x10 [ 194.853836][T11333] ? find_held_lock+0x2b/0x80 [ 194.853851][T11333] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 194.853865][T11333] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 194.853888][T11333] ? xfd_validate_state+0x129/0x190 [ 194.853904][T11333] __x64_sys_io_uring_setup+0xc2/0x170 [ 194.853917][T11333] do_syscall_64+0x123/0x790 [ 194.853933][T11333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.853946][T11333] RIP: 0033:0x7efc4f99e159 [ 194.853955][T11333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.853966][T11333] RSP: 002b:00007efc508f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 194.853978][T11333] RAX: ffffffffffffffda RBX: 00007efc4fc25fa0 RCX: 00007efc4f99e159 [ 194.853986][T11333] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000020 [ 194.853993][T11333] RBP: 00007efc4fa3503b R08: 0000000000000000 R09: 0000000000000000 [ 194.853999][T11333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.854006][T11333] R13: 00007efc4fc26038 R14: 00007efc4fc25fa0 R15: 00007ffdbcee7448 [ 194.854021][T11333] [ 195.301285][T11340] Bluetooth: ISO socket layer initialized [ 195.795879][T11343] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1508'. [ 195.999854][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 196.003424][T11345] tipc: Started in network mode [ 196.003440][T11345] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 196.003532][T11345] tipc: Enabled bearer , priority 0 [ 196.033385][ T5839] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 196.168022][T11351] VFS: Mount too revealing [ 196.194532][ T5839] usb 9-1: Using ep0 maxpacket: 8 [ 196.195056][ T5839] usb 9-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 196.195998][ T5839] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 196.196021][ T5839] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.196034][ T5839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 196.196047][ T5839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 196.198388][ T5839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.198401][ T5839] usb 9-1: Product: syz [ 196.198408][ T5839] usb 9-1: Manufacturer: syz [ 196.198416][ T5839] usb 9-1: SerialNumber: syz [ 196.202011][ T5839] usb 9-1: config 0 descriptor?? [ 196.202878][T11343] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 196.242209][T11354] jffs2: notice: (11354) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 196.256253][T11271] vhci_hcd: connection reset by peer [ 196.256698][ T5812] vhci_hcd vhci_hcd.0: stop threads [ 196.256713][ T5812] vhci_hcd vhci_hcd.0: release socket [ 196.256739][ T5812] vhci_hcd vhci_hcd.0: disconnect device [ 196.323162][T11360] Invalid source name [ 196.412709][ T5839] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 196.418110][ T5839] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input16 [ 196.433809][T11362] fuse: Bad value for 'user_id' [ 196.433821][T11362] fuse: Bad value for 'user_id' [ 196.450588][ T43] audit: type=1400 audit(1789738363.735:25476): avc: denied { write } for pid=11361 comm="syz.0.1515" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 196.566903][ T5839] hid_parser_main: 4 callbacks suppressed [ 196.566918][ T5839] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 196.616815][ T5839] wiimote 0005:057E:0306.0003: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 196.629368][ T5839] wiimote 0005:057E:0306.0003: New device registered [ 196.656848][T11361] wiimote 0005:057E:0306.0003: Device removed [ 196.684048][T11365] fido_id[11365]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 196.825340][ C2] powermate: config urb returned -71 [ 196.825683][ C2] powermate: config urb returned -71 [ 196.825751][ T5850] usb 9-1: USB disconnect, device number 6 [ 196.825864][ C2] powermate: config urb returned -71 [ 196.825882][ C2] powermate 9-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 197.031065][ T5839] tipc: Node number set to 11578026 [ 197.593120][T11368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1517'. [ 197.687503][ T5615] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) [ 197.703474][T11371] fuse: fd is not a fuse device [ 197.947377][ T43] audit: type=1400 audit(1789738365.226:25477): avc: denied { remount } for pid=11379 comm="syz.4.1520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 197.985142][ T43] audit: type=1400 audit(1789738365.266:25478): avc: denied { write } for pid=11378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.986369][ T5615] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input18 [ 198.169439][T11392] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 198.169482][T11392] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.172770][T11392] vhci_hcd vhci_hcd.0: Device attached [ 198.204390][ T43] audit: type=1400 audit(1789738365.475:25479): avc: denied { write } for pid=11386 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.212634][ T5615] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input19 [ 198.220085][T11387] Cannot find map_set index 135 as target [ 198.221437][ T5615] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input17 [ 198.436339][ T9229] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 198.436491][ T3274] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 198.589146][ T9229] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 198.589871][ T9229] usb 9-1: config 0 has no interfaces? [ 198.589900][ T9229] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.611118][ T9229] usb 9-1: config 0 descriptor?? [ 198.741037][ T43] audit: type=1400 audit(1789738366.022:25480): avc: denied { write } for pid=11410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.820844][T11393] usbip_core: unknown command [ 198.820856][T11393] vhci_hcd: unknown pdu 1768961652 [ 198.820864][T11393] usbip_core: unknown command [ 198.821819][ T13] vhci_hcd vhci_hcd.4: stop threads [ 198.821833][ T13] vhci_hcd vhci_hcd.4: release socket [ 198.821865][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 198.827104][ T50] usb 9-1: USB disconnect, device number 7 [ 198.869468][ T8903] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 199.000538][ T43] audit: type=1400 audit(1789738366.281:25481): avc: denied { write } for pid=11419 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.657450][ T43] audit: type=1400 audit(1789738366.928:25482): avc: denied { write } for pid=11434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.858407][ T43] audit: type=1400 audit(1789738367.127:25483): avc: denied { write } for pid=11443 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.209587][ T43] audit: type=1400 audit(1789738367.475:25484): avc: denied { write } for pid=11451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.442816][ T43] audit: type=1400 audit(1789738367.704:25485): avc: denied { write } for pid=11457 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.743622][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1528'. [ 200.745319][T11478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1528'. [ 200.755995][T11478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1528'. [ 200.756349][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1528'. [ 200.768458][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.768555][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.768583][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.768611][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.087283][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1529'. [ 201.087301][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1529'. [ 201.087401][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1529'. [ 201.087411][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1529'. [ 201.088319][T11485] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 201.223751][T11496] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 201.224695][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'. [ 201.224707][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1531'. [ 201.506266][ T43] audit: type=1400 audit(1789738368.769:25486): avc: denied { create } for pid=11506 comm="syz.4.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 201.508310][ T43] audit: type=1400 audit(1789738368.769:25487): avc: denied { bind } for pid=11506 comm="syz.4.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 201.962242][ T43] audit: type=1400 audit(1789738369.217:25488): avc: denied { write } for pid=11513 comm="syz.3.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 202.018302][ T43] audit: type=1800 audit(1789738369.277:25489): pid=11519 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1540" name="nullb0" dev="tmpfs" ino=1926 res=0 errno=0 [ 202.603390][ T43] audit: type=1400 audit(1789738369.855:25490): avc: denied { cmd } for pid=11541 comm="iou-wrk-11542" path="socket:[55036]" dev="sockfs" ino=55036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 202.680249][T11542] trusted_key: encrypted_key: master key parameter 'â'' is invalid [ 202.903246][ T43] audit: type=1400 audit(1789738370.163:25491): avc: denied { read } for pid=11555 comm="syz.4.1552" dev="sockfs" ino=55041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.103373][ T43] audit: type=1400 audit(1789738370.363:25492): avc: denied { name_bind } for pid=11577 comm="syz.4.1557" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 203.225054][ T43] audit: type=1400 audit(1789738370.482:25493): avc: denied { read } for pid=11582 comm="syz.4.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 203.302547][T11590] netlink: 'syz.3.1559': attribute type 10 has an invalid length. [ 203.320029][T11590] netlink: 'syz.3.1559': attribute type 10 has an invalid length. [ 203.420964][ T43] audit: type=1400 audit(1789738370.681:25494): avc: denied { create } for pid=11592 comm="syz.3.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 203.618524][ T3274] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 203.639863][ T50] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 203.800078][ T50] usb 9-1: Invalid ep0 maxpacket: 64 [ 203.941382][ T50] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 204.093235][ T50] usb 9-1: Invalid ep0 maxpacket: 64 [ 204.093643][ T50] usb usb9-port1: attempt power cycle [ 204.176803][T11611] cgroup: fork rejected by pids controller in /syz3 [ 204.442989][ T50] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 204.475491][ T50] usb 9-1: Invalid ep0 maxpacket: 64 [ 204.602942][ T50] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 204.635492][ T50] usb 9-1: Invalid ep0 maxpacket: 64 [ 204.635757][ T50] usb usb9-port1: unable to enumerate USB device [ 204.789666][T11656] gretap2: entered allmulticast mode [ 204.791293][T11656] team0: Port device gretap2 added [ 204.798074][T11656] bridge0: port 4(team0) entered blocking state [ 204.798148][T11656] bridge0: port 4(team0) entered disabled state [ 204.798230][T11656] team0: entered allmulticast mode [ 204.798241][T11656] team_slave_0: entered allmulticast mode [ 204.798251][T11656] team_slave_1: entered allmulticast mode [ 204.800896][T11656] team0: entered promiscuous mode [ 204.800906][T11656] team_slave_0: entered promiscuous mode [ 204.801030][T11656] team_slave_1: entered promiscuous mode [ 204.801104][T11656] gretap2: entered promiscuous mode [ 204.818019][T11656] bridge0: port 4(team0) entered blocking state [ 204.818064][T11656] bridge0: port 4(team0) entered forwarding state [ 205.026733][ T43] audit: type=1400 audit(1789738372.276:25495): avc: denied { bind } for pid=11670 comm="syz.3.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.198275][T11692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11692 comm=syz.3.1578 [ 206.026587][T11723] program syz.0.1586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.476563][ T5740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.496368][ T5740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.499432][ T5740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.523101][ T5740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.525042][ T5740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.234635][T11767] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 207.234653][T11767] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.234695][T11767] vhci_hcd vhci_hcd.0: Device attached [ 207.363630][T11777] __nla_validate_parse: 5 callbacks suppressed [ 207.363644][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 207.364019][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.437338][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 207.482256][ T5850] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 207.534904][ T5615] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 207.684093][ T5615] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 207.684771][ T5615] usb 9-1: config 0 has no interfaces? [ 207.684799][ T5615] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.711217][ T5615] usb 9-1: config 0 descriptor?? [ 207.927412][T11768] vhci_hcd: cannot find a urb of seqnum 12288 max seqnum 2 [ 207.927909][ T5812] vhci_hcd vhci_hcd.4: stop threads [ 207.927925][ T5812] vhci_hcd vhci_hcd.4: release socket [ 207.927963][ T5812] vhci_hcd vhci_hcd.4: disconnect device [ 207.934264][ T5615] usb 9-1: USB disconnect, device number 12 [ 208.111563][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.356372][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.481095][T11803] syzkaller1: entered promiscuous mode [ 208.481112][T11803] syzkaller1: entered allmulticast mode [ 208.596003][ T5745] Bluetooth: hci4: command tx timeout [ 208.608119][T11816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11816 comm=syz.4.1606 [ 208.608175][T11816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11816 comm=syz.4.1606 [ 208.608263][T11816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11816 comm=syz.4.1606 [ 208.608311][T11816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11816 comm=syz.4.1606 [ 208.608359][T11816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11816 comm=syz.4.1606 [ 208.608406][T11816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11816 comm=syz.4.1606 [ 208.608452][T11816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11816 comm=syz.4.1606 [ 208.608497][T11816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11816 comm=syz.4.1606 [ 208.608547][T11816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11816 comm=syz.4.1606 [ 208.685275][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.686398][T11815] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 209.091763][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 209.091775][ T43] audit: type=1400 audit(1789738376.333:25498): avc: denied { setopt } for pid=11828 comm="syz.3.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.325884][T11840] netlink: 'syz.3.1611': attribute type 2 has an invalid length. [ 209.349895][ T12] bridge_slave_1: left allmulticast mode [ 209.349920][ T12] bridge_slave_1: left promiscuous mode [ 209.350088][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.367827][ T12] bridge_slave_0: left allmulticast mode [ 209.367868][ T12] bridge_slave_0: left promiscuous mode [ 209.368014][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.522924][T11844] openvswitch: netlink: Key type 30 is not supported [ 209.705711][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.713891][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.716063][ T12] bond0 (unregistering): Released all slaves [ 209.813031][T11735] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.813076][T11735] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.813158][T11735] bridge_slave_0: entered allmulticast mode [ 209.815085][T11735] bridge_slave_0: entered promiscuous mode [ 209.825807][T11735] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.825876][T11735] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.825947][T11735] bridge_slave_1: entered allmulticast mode [ 209.835755][T11735] bridge_slave_1: entered promiscuous mode [ 209.974059][T11735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.982814][T11735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.038082][T11735] team0: Port device team_slave_0 added [ 210.043214][T11735] team0: Port device team_slave_1 added [ 210.048649][ T43] audit: type=1400 audit(1789738377.271:25499): avc: denied { write } for pid=11861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.074868][ T43] audit: type=1400 audit(1789738377.311:25500): avc: denied { wake_alarm } for pid=11862 comm="syz.3.1619" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 210.092819][ T8903] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 210.156528][T11735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.156546][T11735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.156568][T11735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.190700][T11735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.190714][T11735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.190729][T11735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.229482][ T8903] usb 9-1: device descriptor read/64, error -71 [ 210.263372][ T43] audit: type=1400 audit(1789738377.500:25501): avc: denied { write } for pid=11868 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.295256][T11735] hsr_slave_0: entered promiscuous mode [ 210.295916][T11735] hsr_slave_1: entered promiscuous mode [ 210.297362][T11735] debugfs: 'hsr0' already exists in 'hsr' [ 210.297379][T11735] Cannot create hsr debugfs directory [ 210.371647][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 210.473726][ T8903] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 210.478642][ T12] hsr_slave_0: left promiscuous mode [ 210.479567][ T12] hsr_slave_1: left promiscuous mode [ 210.479944][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.479955][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.500373][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.500393][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.506838][ T12] veth1_macvtap: left promiscuous mode [ 210.506869][ T12] veth0_macvtap: left promiscuous mode [ 210.506964][ T12] veth1_vlan: left promiscuous mode [ 210.506997][ T12] veth0_vlan: left promiscuous mode [ 210.557074][ T43] audit: type=1400 audit(1789738377.790:25502): avc: denied { write } for pid=11871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.600829][ T8903] usb 9-1: device descriptor read/64, error -71 [ 210.607199][ T43] audit: type=1400 audit(1789738377.840:25503): avc: denied { write } for pid=11874 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.683873][ T5745] Bluetooth: hci4: command tx timeout [ 210.712613][ T8903] usb usb9-port1: attempt power cycle [ 210.793132][ T12] team0 (unregistering): Port device team_slave_1 removed [ 210.806955][ T12] team0 (unregistering): Port device team_slave_0 removed [ 210.828273][ T43] audit: type=1400 audit(1789738378.059:25504): avc: denied { ioctl } for pid=11876 comm="syz.3.1620" path="socket:[57567]" dev="sockfs" ino=57567 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 210.958314][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 211.073400][ T8903] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 211.094196][ T8903] usb 9-1: device descriptor read/8, error -71 [ 211.243731][T11889] netlink: 'syz.3.1624': attribute type 5 has an invalid length. [ 211.266162][T11735] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 211.280026][T11735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.280783][T11735] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 211.308091][ T43] audit: type=1400 audit(1789738378.538:25505): avc: denied { write } for pid=11887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.308394][T11735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.311689][T11735] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 211.334939][ T8903] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 211.354921][ T8903] usb 9-1: device descriptor read/8, error -71 [ 211.361302][T11735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.363325][T11735] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 211.390399][T11735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.432114][ T43] audit: type=1400 audit(1789738378.658:25506): avc: denied { write } for pid=11895 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.462842][ T8903] usb usb9-port1: unable to enumerate USB device [ 211.518131][T11735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.549343][T11735] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.560578][T11681] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.560663][T11681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.585212][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 211.590861][T11681] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.590911][T11681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.764170][ T43] audit: type=1400 audit(1789738378.997:25507): avc: denied { write } for pid=11914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.817207][T11923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.038014][ T5448] 8021q: adding VLAN 0 to HW filter on device eth9 [ 212.104944][T11735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.283745][T11735] veth0_vlan: entered promiscuous mode [ 212.298202][T11735] veth1_vlan: entered promiscuous mode [ 212.334680][T11735] veth0_macvtap: entered promiscuous mode [ 212.337701][T11735] veth1_macvtap: entered promiscuous mode [ 212.351725][T11735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.373711][T11735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.408447][ T5812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.607090][ T5850] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 212.642246][T11677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.642269][T11677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.718795][T11681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.718815][T11681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.725717][ T5812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.725952][ T5812] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.725973][ T5812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.766821][ T5745] Bluetooth: hci4: command tx timeout [ 212.812104][ T5745] Bluetooth: Wrong link type (-71) [ 212.860865][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.860940][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.861029][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.861090][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.861150][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.861210][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.861275][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.861375][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.861443][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.861512][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.861577][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.861637][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.861699][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.861765][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.861830][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.861893][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.861955][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.862016][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.862078][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.862139][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.862201][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.862266][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.862464][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.862537][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.862599][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.862666][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.862731][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.863116][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.863181][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.863244][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.863310][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.863427][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.863493][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.863566][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.863634][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.863697][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.863760][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.863821][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.863911][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.863977][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.864040][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.864103][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.864166][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.864231][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.864296][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.864403][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.864472][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.864542][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.864610][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.864676][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.864744][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.864811][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.864877][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.864941][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.865009][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.865077][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.865144][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.865212][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.865284][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.866758][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.867126][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.867761][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.867854][ T5745] Bluetooth: Unexpected start frame (len 0) [ 212.867924][ T5745] Bluetooth: Unexpected start frame (len 0) [ 213.108961][T11975] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 213.108989][T11975] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 213.109883][T11975] vhci_hcd vhci_hcd.0: Device attached [ 213.348366][ T1233] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 213.356745][ T5884] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 213.507575][ T5884] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 213.508193][ T5884] usb 11-1: config 0 has no interfaces? [ 213.508224][ T5884] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.514601][ T5884] usb 11-1: config 0 descriptor?? [ 213.556435][T12007] FAULT_INJECTION: forcing a failure. [ 213.556435][T12007] name failslab, interval 1, probability 0, space 0, times 0 [ 213.556468][T12007] CPU: 0 UID: 0 PID: 12007 Comm: syz.0.1646 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.556520][T12007] Tainted: [L]=SOFTLOCKUP [ 213.556528][T12007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.556541][T12007] Call Trace: [ 213.556549][T12007] [ 213.556558][T12007] dump_stack_lvl+0x100/0x190 [ 213.556608][T12007] should_fail_ex.cold+0x5/0xa [ 213.556635][T12007] should_failslab+0xc2/0x120 [ 213.556667][T12007] __kvmalloc_node_noprof+0x113/0x9b0 [ 213.556690][T12007] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 213.556708][T12007] ? __kmalloc_cache_noprof+0x201/0x6d0 [ 213.556729][T12007] ? io_alloc_cache_init+0x38/0x170 [ 213.556753][T12007] io_alloc_cache_init+0x38/0x170 [ 213.556775][T12007] io_rsrc_cache_init+0x26/0x50 [ 213.556793][T12007] io_uring_setup.cold+0x4c0/0x1cde [ 213.556811][T12007] ? lock_acquire+0x1d1/0x380 [ 213.556834][T12007] ? avc_has_perm_noaudit+0x56/0x3b0 [ 213.556861][T12007] ? __pfx_io_uring_setup+0x10/0x10 [ 213.556880][T12007] ? find_held_lock+0x2b/0x80 [ 213.556903][T12007] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 213.556927][T12007] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 213.556968][T12007] ? xfd_validate_state+0x129/0x190 [ 213.556997][T12007] __x64_sys_io_uring_setup+0xc2/0x170 [ 213.557020][T12007] do_syscall_64+0x123/0x790 [ 213.557053][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.557074][T12007] RIP: 0033:0x7f680399e159 [ 213.557091][T12007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.557110][T12007] RSP: 002b:00007f6804837028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 213.557129][T12007] RAX: ffffffffffffffda RBX: 00007f6803c25fa0 RCX: 00007f680399e159 [ 213.557142][T12007] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000020 [ 213.557153][T12007] RBP: 00007f6803a3503b R08: 0000000000000000 R09: 0000000000000000 [ 213.557164][T12007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.557175][T12007] R13: 00007f6803c26038 R14: 00007f6803c25fa0 R15: 00007ffebe83c938 [ 213.557201][T12007] [ 213.718265][T11977] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 213.718491][ T12] vhci_hcd vhci_hcd.6: stop threads [ 213.718501][ T12] vhci_hcd vhci_hcd.6: release socket [ 213.718556][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 213.719590][ T5884] usb 11-1: USB disconnect, device number 2 [ 213.904510][T11972] [U] ^F [ 213.945974][T12021] selinux_netlink_send: 27 callbacks suppressed [ 213.945992][T12021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12021 comm=syz.4.1650 [ 213.946295][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1650'. [ 213.997149][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 213.997215][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.997223][T12025] IPv6: NLM_F_CREATE should be set when creating new route [ 213.997238][T12025] IPv6: NLM_F_CREATE should be set when creating new route [ 214.001057][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 214.001095][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.001180][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 214.001207][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.001312][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 214.001339][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.001508][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 214.001537][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.001619][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 214.001646][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.001718][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 214.001744][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.001817][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 214.001842][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.001917][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 214.001947][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.002038][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.002145][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.002238][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.002331][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.002426][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.002519][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.002617][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.002713][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.002817][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.002919][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.003057][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.003153][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.003245][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.003338][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.003436][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.003541][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.003640][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.003731][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.003849][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.003946][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.004039][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.004131][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.004232][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.004345][T12025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.172534][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 214.172548][ T43] audit: type=1400 audit(1789738381.402:25522): avc: denied { write } for pid=12035 comm="syz.4.1654" name="/" dev="9p" ino=82051115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.174134][ T43] audit: type=1400 audit(1789738381.402:25523): avc: denied { write } for pid=12035 comm="syz.4.1654" name="/" dev="9p" ino=82051115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.241856][T12040] overlayfs: failed to clone upperpath [ 214.312419][T12046] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 214.367505][ T43] audit: type=1400 audit(1789738381.592:25524): avc: denied { read } for pid=12050 comm="syz.4.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 214.776394][T12072] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 214.776409][T12072] UDF-fs: Scanning with blocksize 2048 failed [ 214.785133][T12072] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 214.785153][T12072] UDF-fs: Scanning with blocksize 4096 failed [ 214.849460][ T5745] Bluetooth: hci4: command tx timeout [ 215.243294][T12050] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 215.306918][T12076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.433492][T12087] netlink: 'syz.4.1672': attribute type 28 has an invalid length. [ 215.433506][T12087] netlink: 'syz.4.1672': attribute type 3 has an invalid length. [ 215.880813][T12120] netlink: 'syz.6.1685': attribute type 12 has an invalid length. [ 215.906945][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.906994][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.907024][ T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.907141][ T12] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.413030][T12132] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 216.413111][T12132] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 216.413124][T12132] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 216.687072][T12136] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.030880][T12147] debugfs: Invalid uid '0x00000000ffffffff' [ 217.030935][ T43] audit: type=1400 audit(1789738384.247:25525): avc: denied { remount } for pid=12144 comm="syz.6.1694" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 217.564714][ T5813] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 217.714208][ T5813] usb 11-1: Using ep0 maxpacket: 8 [ 217.714999][ T5813] usb 11-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 217.716086][ T5813] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.716098][ T5813] usb 11-1: config 0 has no interfaces? [ 217.718167][ T5813] usb 11-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 217.718180][ T5813] usb 11-1: Product: syz [ 217.718188][ T5813] usb 11-1: Manufacturer: syz [ 217.718195][ T5813] usb 11-1: SerialNumber: syz [ 217.754361][ T5813] usb 11-1: config 0 descriptor?? [ 218.066473][T12178] netlink: 'syz.3.1703': attribute type 1 has an invalid length. [ 218.067694][ T5850] usb 11-1: USB disconnect, device number 3 [ 218.102218][T12178] bond7: entered promiscuous mode [ 218.102452][T12178] 8021q: adding VLAN 0 to HW filter on device bond7 [ 218.136497][T12178] 8021q: adding VLAN 0 to HW filter on device bond7 [ 218.136792][T12178] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 218.136810][T12178] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 218.156745][T12178] bond7: (slave ip6gre2): making interface the new active one [ 218.156769][T12178] ip6gre2: entered promiscuous mode [ 218.158086][T12178] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 218.177605][T12178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48029 sclass=netlink_route_socket pid=12178 comm=syz.3.1703 [ 218.407283][ T43] audit: type=1400 audit(1789738385.625:25526): avc: denied { setopt } for pid=12196 comm="syz.3.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 218.413031][T12198] bridge0: entered promiscuous mode [ 218.445633][ T1233] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 218.523565][T12203] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.553872][T12208] tipc: Enabled bearer , priority 0 [ 219.050708][T12233] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 219.050737][T12233] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 219.053370][T12233] vhci_hcd vhci_hcd.0: Device attached [ 219.306354][ T5884] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 219.360718][ T43] audit: type=1400 audit(1789738386.584:25527): avc: denied { map } for pid=12246 comm="syz.0.1724" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 219.361699][T12247] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.446895][ T1233] usb 49-1: device descriptor read/64, error -110 [ 219.467408][ T5884] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.467922][ T5884] usb 11-1: config 0 has no interfaces? [ 219.467952][ T5884] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.487335][ T5884] usb 11-1: config 0 descriptor?? [ 219.641882][T12260] usb 2-1: USB disconnect, device number 2 [ 219.689547][T12234] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 219.689912][ T5547] vhci_hcd vhci_hcd.6: stop threads [ 219.689927][ T5547] vhci_hcd vhci_hcd.6: release socket [ 219.689955][ T5547] vhci_hcd vhci_hcd.6: disconnect device [ 219.691701][ T9] usb 11-1: USB disconnect, device number 4 [ 219.714024][ T1233] usb 49-1: new low-speed USB device number 3 using vhci_hcd [ 219.714078][ T1233] usb 49-1: enqueue for inactive port 0 [ 219.779033][ T1233] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 220.434496][T12303] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 220.458075][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.743064][T12310] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.784187][ T43] audit: type=1400 audit(1789738388.002:25528): avc: denied { ioctl } for pid=12314 comm="syz.4.1745" path="/dev/input/mouse0" dev="devtmpfs" ino=1079 ioctlcmd=0x4d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 220.840446][ T5745] Bluetooth: Unexpected start frame (len 18) [ 220.861901][T12321] overlayfs: missing 'lowerdir' [ 220.935677][T12327] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 220.935701][T12327] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 220.938192][T12327] vhci_hcd vhci_hcd.0: Device attached [ 221.168337][T12333] xt_hashlimit: size too large, truncated to 1048576 [ 221.199212][ T9] usb 45-1: new low-speed USB device number 5 using vhci_hcd [ 221.200044][ T5839] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 221.349892][ T5839] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 221.350890][ T5839] usb 9-1: config 0 has no interfaces? [ 221.350920][ T5839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.358380][ T5839] usb 9-1: config 0 descriptor?? [ 221.566743][T12328] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 221.568076][ T5547] vhci_hcd vhci_hcd.4: stop threads [ 221.568096][ T5547] vhci_hcd vhci_hcd.4: release socket [ 221.568138][ T5547] vhci_hcd vhci_hcd.4: disconnect device [ 221.574405][ T5615] usb 9-1: USB disconnect, device number 17 [ 221.962802][T12354] geneve2: entered allmulticast mode [ 222.216966][T12362] overlayfs: failed to resolve './bus': -2 [ 222.522023][ T43] audit: type=1400 audit(1789738389.740:25529): avc: denied { bind } for pid=12369 comm="syz.3.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.528028][T12375] netlink: 'syz.3.1760': attribute type 10 has an invalid length. [ 222.678836][T12375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.686874][T12375] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 222.859648][ T43] audit: type=1400 audit(1789738390.069:25530): avc: denied { write } for pid=12388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.940988][T12395] netlink: 'syz.4.1768': attribute type 1 has an invalid length. [ 222.944122][ T43] audit: type=1400 audit(1789738390.159:25531): avc: denied { write } for pid=12396 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.030670][T12395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.077701][T12395] __nla_validate_parse: 30 callbacks suppressed [ 223.077723][T12395] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1768'. [ 223.105893][T12407] jffs2: notice: (12407) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 223.207849][ T43] audit: type=1400 audit(1789738390.419:25532): avc: denied { write } for pid=12410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.286281][ T43] audit: type=1400 audit(1789738390.499:25533): avc: denied { write } for pid=12416 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.596989][ T43] audit: type=1400 audit(1789738390.809:25534): avc: denied { write } for pid=12424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.806593][T12446] 9pnet_virtio: no channels available for device syz [ 223.819085][T12444] overlayfs: failed to resolve './bus': -2 [ 223.857087][ T43] audit: type=1400 audit(1789738391.068:25535): avc: denied { write } for pid=12443 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.963799][ T43] audit: type=1400 audit(1789738391.178:25536): avc: denied { write } for pid=12452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.108823][T12457] hfs: can't find a HFS filesystem on dev sr0 [ 224.133094][T12457] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 224.419809][T12475] block nbd6: shutting down sockets [ 224.593411][T12481] syzkaller0: entered promiscuous mode [ 224.593426][T12481] syzkaller0: entered allmulticast mode [ 224.608125][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 224.608143][ T43] audit: type=1400 audit(1789738391.808:25538): avc: denied { name_bind } for pid=12480 comm="syz.4.1785" src=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 224.825278][T12488] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 225.232448][T12505] bonding: no command found in bonding_masters - use +ifname or -ifname [ 225.757981][T12519] fuse: fd is not a fuse device [ 225.769654][ T43] audit: type=1400 audit(1789738392.976:25539): avc: denied { write } for pid=12518 comm="syz.3.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 225.769706][ T43] audit: type=1400 audit(1789738392.976:25540): avc: denied { read } for pid=12518 comm="syz.3.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 225.820599][ T43] audit: type=1400 audit(1789738393.026:25541): avc: denied { setopt } for pid=12518 comm="syz.3.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 225.887250][ T9229] logitech-hidpp-device 0005:046D:B012.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 225.982672][T12533] fido_id[12533]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 225.993290][ T5745] Bluetooth: hci4: unexpected cc 0x200b length: 2 > 1 [ 226.038487][T12534] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 226.054176][T12537] FAULT_INJECTION: forcing a failure. [ 226.054176][T12537] name failslab, interval 1, probability 0, space 0, times 0 [ 226.054211][T12537] CPU: 0 UID: 0 PID: 12537 Comm: syz.0.1803 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.054239][T12537] Tainted: [L]=SOFTLOCKUP [ 226.054246][T12537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.054257][T12537] Call Trace: [ 226.054264][T12537] [ 226.054272][T12537] dump_stack_lvl+0x100/0x190 [ 226.054343][T12537] should_fail_ex.cold+0x5/0xa [ 226.054381][T12537] should_failslab+0xc2/0x120 [ 226.054413][T12537] __kvmalloc_node_noprof+0x113/0x9b0 [ 226.054433][T12537] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 226.054459][T12537] ? percpu_ref_init+0xec/0x3f0 [ 226.054484][T12537] ? io_alloc_cache_init+0x38/0x170 [ 226.054516][T12537] io_alloc_cache_init+0x38/0x170 [ 226.054544][T12537] io_uring_setup.cold+0x450/0x1cde [ 226.054566][T12537] ? lock_acquire+0x1d1/0x380 [ 226.054587][T12537] ? avc_has_perm_noaudit+0x56/0x3b0 [ 226.054612][T12537] ? __pfx_io_uring_setup+0x10/0x10 [ 226.054633][T12537] ? find_held_lock+0x2b/0x80 [ 226.054659][T12537] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 226.054682][T12537] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 226.054725][T12537] ? xfd_validate_state+0x129/0x190 [ 226.054754][T12537] __x64_sys_io_uring_setup+0xc2/0x170 [ 226.054778][T12537] do_syscall_64+0x123/0x790 [ 226.054816][T12537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.054838][T12537] RIP: 0033:0x7f680399e159 [ 226.054855][T12537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.054874][T12537] RSP: 002b:00007f6804837028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 226.054894][T12537] RAX: ffffffffffffffda RBX: 00007f6803c25fa0 RCX: 00007f680399e159 [ 226.054908][T12537] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000020 [ 226.054920][T12537] RBP: 00007f6803a3503b R08: 0000000000000000 R09: 0000000000000000 [ 226.054933][T12537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.054945][T12537] R13: 00007f6803c26038 R14: 00007f6803c25fa0 R15: 00007ffebe83c938 [ 226.054971][T12537] [ 226.179180][T12540] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 226.179213][T12540] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.180197][T12540] vhci_hcd vhci_hcd.0: Device attached [ 226.286655][T12547] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1807'. [ 226.298461][ T9] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 226.414596][T11956] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 226.415045][ T5850] usb 49-1: new low-speed USB device number 4 using vhci_hcd [ 226.569821][T11956] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 226.570318][T11956] usb 11-1: config 0 has no interfaces? [ 226.570348][T11956] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.575439][T11956] usb 11-1: config 0 descriptor?? [ 226.792530][T12540] xt_REDIRECT: bad MAP_IPS. [ 226.795103][T12542] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 226.797085][ T12] vhci_hcd vhci_hcd.6: stop threads [ 226.797105][ T12] vhci_hcd vhci_hcd.6: release socket [ 226.797138][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 226.798816][ T25] usb 11-1: USB disconnect, device number 5 [ 227.232636][T12565] netlink: 'syz.3.1813': attribute type 23 has an invalid length. [ 227.835475][ T25] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 227.990696][ T25] usb 11-1: unable to get BOS descriptor or descriptor too short [ 227.990738][ T25] usb 11-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6f.98 [ 227.992303][ T25] usb 11-1: config 4 has an invalid interface number: 13 but max is 0 [ 227.992325][ T25] usb 11-1: config 4 has no interface number 0 [ 227.992358][ T25] usb 11-1: config 4 interface 13 has no altsetting 0 [ 227.996427][ T25] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.996451][ T25] usb 11-1: Product: syz [ 227.996464][ T25] usb 11-1: Manufacturer: syz [ 227.996477][ T25] usb 11-1: SerialNumber: syz [ 228.251672][ T25] ums-realtek 11-1:4.13: USB Mass Storage device detected [ 228.260668][T12588] FAULT_INJECTION: forcing a failure. [ 228.260668][T12588] name failslab, interval 1, probability 0, space 0, times 0 [ 228.260700][T12588] CPU: 0 UID: 0 PID: 12588 Comm: syz.4.1819 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.260726][T12588] Tainted: [L]=SOFTLOCKUP [ 228.260733][T12588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.260743][T12588] Call Trace: [ 228.260750][T12588] [ 228.260757][T12588] dump_stack_lvl+0x100/0x190 [ 228.260803][T12588] should_fail_ex.cold+0x5/0xa [ 228.260828][T12588] should_failslab+0xc2/0x120 [ 228.260857][T12588] __kvmalloc_node_noprof+0x113/0x9b0 [ 228.260877][T12588] ? __kmalloc_cache_noprof+0x201/0x6d0 [ 228.260903][T12588] ? percpu_ref_init+0xec/0x3f0 [ 228.260926][T12588] ? io_alloc_cache_init+0x38/0x170 [ 228.260954][T12588] io_alloc_cache_init+0x38/0x170 [ 228.260980][T12588] io_uring_setup.cold+0x48c/0x1cde [ 228.261000][T12588] ? lock_acquire+0x1d1/0x380 [ 228.261018][T12588] ? avc_has_perm_noaudit+0x56/0x3b0 [ 228.261043][T12588] ? __pfx_io_uring_setup+0x10/0x10 [ 228.261062][T12588] ? find_held_lock+0x2b/0x80 [ 228.261085][T12588] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 228.261107][T12588] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 228.261144][T12588] ? xfd_validate_state+0x129/0x190 [ 228.261169][T12588] __x64_sys_io_uring_setup+0xc2/0x170 [ 228.261191][T12588] do_syscall_64+0x123/0x790 [ 228.261224][T12588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.261244][T12588] RIP: 0033:0x7efc4f99e159 [ 228.261259][T12588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.261276][T12588] RSP: 002b:00007efc508f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 228.261295][T12588] RAX: ffffffffffffffda RBX: 00007efc4fc25fa0 RCX: 00007efc4f99e159 [ 228.261306][T12588] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000020 [ 228.261318][T12588] RBP: 00007efc4fa3503b R08: 0000000000000000 R09: 0000000000000000 [ 228.261328][T12588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.261339][T12588] R13: 00007efc4fc26038 R14: 00007efc4fc25fa0 R15: 00007ffdbcee7448 [ 228.261363][T12588] [ 228.347098][ T25] usb 11-1: USB disconnect, device number 6 [ 228.462799][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 228.558612][T12594] nbd4: detected capacity change from 0 to 1 [ 228.563101][T11789] Buffer I/O error on dev nbd4, logical block 0, async page read [ 228.563148][T11789] Buffer I/O error on dev nbd4, logical block 0, async page read [ 228.563203][T11789] Buffer I/O error on dev nbd4, logical block 0, async page read [ 228.563244][T11789] Buffer I/O error on dev nbd4, logical block 0, async page read [ 228.563270][T11789] Buffer I/O error on dev nbd4, logical block 0, async page read [ 228.563284][T11789] ldm_validate_partition_table(): Disk read failed. [ 228.563308][T11789] Buffer I/O error on dev nbd4, logical block 0, async page read [ 228.563334][T11789] Buffer I/O error on dev nbd4, logical block 0, async page read [ 228.563360][T11789] Buffer I/O error on dev nbd4, logical block 0, async page read [ 228.563385][T11789] Buffer I/O error on dev nbd4, logical block 0, async page read [ 228.563400][T11789] Dev nbd4: unable to read RDB block 0 [ 228.563423][T11789] Buffer I/O error on dev nbd4, logical block 0, async page read [ 228.568502][T11789] nbd4: unable to read partition table [ 228.568608][T11789] nbd4: partition table beyond EOD, truncated [ 228.603569][T12596] block nbd4: shutting down sockets [ 228.774621][T12602] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 228.774649][T12602] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.784000][T12602] vhci_hcd vhci_hcd.0: Device attached [ 229.006296][ T9] usb 45-1: new low-speed USB device number 6 using vhci_hcd [ 229.036182][ T10] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 229.197270][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.198196][ T10] usb 9-1: config 0 has no interfaces? [ 229.198230][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.201147][ T10] usb 9-1: config 0 descriptor?? [ 229.258458][T12606] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 229.319659][ T43] audit: type=1400 audit(1789738396.534:25542): avc: denied { setopt } for pid=12611 comm="syz.0.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 229.410900][ T10] usb 9-1: USB disconnect, device number 18 [ 229.415864][T12603] vhci_hcd: connection reset by peer [ 229.419093][ T13] vhci_hcd vhci_hcd.4: stop threads [ 229.419116][ T13] vhci_hcd vhci_hcd.4: release socket [ 229.419158][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 229.542821][T12620] sctp: [Deprecated]: syz.6.1825 (pid 12620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.542821][T12620] Use struct sctp_sack_info instead [ 229.570122][T12620] SELinux: ebitmap: truncated map [ 229.570511][T12620] SELinux: invalid class [ 229.589516][T12620] SELinux: failed to load policy [ 229.681778][T12626] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1831'. [ 229.962648][T12638] FAULT_INJECTION: forcing a failure. [ 229.962648][T12638] name failslab, interval 1, probability 0, space 0, times 0 [ 229.962684][T12638] CPU: 0 UID: 0 PID: 12638 Comm: syz.6.1836 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.962711][T12638] Tainted: [L]=SOFTLOCKUP [ 229.962719][T12638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.962729][T12638] Call Trace: [ 229.962737][T12638] [ 229.962745][T12638] dump_stack_lvl+0x100/0x190 [ 229.962775][T12638] should_fail_ex.cold+0x5/0xa [ 229.962800][T12638] should_failslab+0xc2/0x120 [ 229.962825][T12638] __kvmalloc_node_noprof+0x113/0x9b0 [ 229.962844][T12638] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 229.962869][T12638] ? percpu_ref_init+0xec/0x3f0 [ 229.962893][T12638] ? io_alloc_cache_init+0x38/0x170 [ 229.962934][T12638] io_alloc_cache_init+0x38/0x170 [ 229.962958][T12638] io_uring_setup.cold+0x450/0x1cde [ 229.962979][T12638] ? lock_acquire+0x1d1/0x380 [ 229.962999][T12638] ? avc_has_perm_noaudit+0x56/0x3b0 [ 229.963027][T12638] ? __pfx_io_uring_setup+0x10/0x10 [ 229.963046][T12638] ? find_held_lock+0x2b/0x80 [ 229.963092][T12638] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 229.963121][T12638] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 229.963163][T12638] ? xfd_validate_state+0x129/0x190 [ 229.963192][T12638] __x64_sys_io_uring_setup+0xc2/0x170 [ 229.963213][T12638] do_syscall_64+0x123/0x790 [ 229.963239][T12638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.963257][T12638] RIP: 0033:0x7fbb15f9e159 [ 229.963274][T12638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.963291][T12638] RSP: 002b:00007fbb16dfa028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 229.963310][T12638] RAX: ffffffffffffffda RBX: 00007fbb16225fa0 RCX: 00007fbb15f9e159 [ 229.963322][T12638] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000020 [ 229.963333][T12638] RBP: 00007fbb1603503b R08: 0000000000000000 R09: 0000000000000000 [ 229.963344][T12638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.963355][T12638] R13: 00007fbb16226038 R14: 00007fbb16225fa0 R15: 00007ffc0ac75678 [ 229.963382][T12638] [ 230.309638][ T43] audit: type=1400 audit(1789738397.523:25543): avc: denied { ioctl } for pid=12648 comm="syz.6.1839" path="socket:[60056]" dev="sockfs" ino=60056 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 230.312951][ T43] audit: type=1400 audit(1789738397.523:25544): avc: denied { getopt } for pid=12648 comm="syz.6.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 230.332372][T12649] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1839'. [ 230.350364][T12649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1839'. [ 230.550556][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1841'. [ 230.675956][T12663] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1844'. [ 230.700736][ T43] audit: type=1400 audit(1789738397.913:25545): avc: denied { write } for pid=12651 comm="syz.6.1840" name="functions" dev="configfs" ino=22700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 230.701083][T12652] LUN: removable file: (no medium) [ 230.702042][ T43] audit: type=1400 audit(1789738397.913:25546): avc: denied { write } for pid=12651 comm="syz.6.1840" name="functions" dev="configfs" ino=22700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 230.712255][ T43] audit: type=1400 audit(1789738397.913:25547): avc: denied { remove_name } for pid=12651 comm="syz.6.1840" name="mass_storage.usb0" dev="configfs" ino=61155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 230.740862][ T43] audit: type=1400 audit(1789738397.953:25548): avc: denied { rmdir } for pid=12651 comm="syz.6.1840" name="mass_storage.usb0" dev="configfs" ino=61155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 230.975975][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1846'. [ 230.976023][T12670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.976030][T12670] IPv6: NLM_F_CREATE should be set when creating new route [ 230.976044][T12670] IPv6: NLM_F_CREATE should be set when creating new route [ 231.065702][T12672] FAULT_INJECTION: forcing a failure. [ 231.065702][T12672] name failslab, interval 1, probability 0, space 0, times 0 [ 231.065736][T12672] CPU: 0 UID: 0 PID: 12672 Comm: syz.4.1847 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.065762][T12672] Tainted: [L]=SOFTLOCKUP [ 231.065770][T12672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.065782][T12672] Call Trace: [ 231.065789][T12672] [ 231.065798][T12672] dump_stack_lvl+0x100/0x190 [ 231.065830][T12672] should_fail_ex.cold+0x5/0xa [ 231.065858][T12672] should_failslab+0xc2/0x120 [ 231.065882][T12672] __kvmalloc_node_noprof+0x113/0x9b0 [ 231.065904][T12672] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 231.065934][T12672] ? percpu_ref_init+0xec/0x3f0 [ 231.065960][T12672] ? io_alloc_cache_init+0x38/0x170 [ 231.065991][T12672] io_alloc_cache_init+0x38/0x170 [ 231.066021][T12672] io_uring_setup.cold+0x450/0x1cde [ 231.066043][T12672] ? lock_acquire+0x1d1/0x380 [ 231.066063][T12672] ? avc_has_perm_noaudit+0x56/0x3b0 [ 231.066088][T12672] ? __pfx_io_uring_setup+0x10/0x10 [ 231.066109][T12672] ? find_held_lock+0x2b/0x80 [ 231.066152][T12672] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 231.066179][T12672] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 231.066221][T12672] ? xfd_validate_state+0x129/0x190 [ 231.066248][T12672] __x64_sys_io_uring_setup+0xc2/0x170 [ 231.066272][T12672] do_syscall_64+0x123/0x790 [ 231.066301][T12672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.066321][T12672] RIP: 0033:0x7efc4f99e159 [ 231.066345][T12672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.066363][T12672] RSP: 002b:00007efc508f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 231.066384][T12672] RAX: ffffffffffffffda RBX: 00007efc4fc25fa0 RCX: 00007efc4f99e159 [ 231.066400][T12672] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000020 [ 231.066414][T12672] RBP: 00007efc4fa3503b R08: 0000000000000000 R09: 0000000000000000 [ 231.066425][T12672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.066437][T12672] R13: 00007efc4fc26038 R14: 00007efc4fc25fa0 R15: 00007ffdbcee7448 [ 231.066463][T12672] [ 231.125562][T12674] overlayfs: missing 'lowerdir' [ 231.300222][ T43] audit: type=1400 audit(1789738398.512:25549): avc: denied { read } for pid=12677 comm="syz.6.1850" name="trace" dev="tracefs" ino=6180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 231.426446][ T43] audit: type=1400 audit(1789738398.632:25550): avc: denied { create } for pid=12684 comm="syz.4.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 231.460231][T12685] netlink: 'syz.4.1851': attribute type 1 has an invalid length. [ 231.509176][ T5850] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 231.837778][T12700] overlayfs: missing 'lowerdir' [ 231.893316][ T43] audit: type=1400 audit(1789738399.102:25551): avc: denied { read } for pid=12701 comm="syz.4.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 232.012023][T12702] kvm: pic: single mode not supported [ 232.012818][T12707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1860'. [ 232.013952][T12707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1860'. [ 232.421802][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.439956][ T5740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.442951][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.467523][ T5740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.468205][ T5740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.665233][T12723] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 232.665262][T12723] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.667068][T12723] vhci_hcd vhci_hcd.0: Device attached [ 232.719444][ T9559] bridge0: port 3(syz_tun) entered disabled state [ 232.756770][ T9559] syz_tun (unregistering): left allmulticast mode [ 232.756790][ T9559] syz_tun (unregistering): left promiscuous mode [ 232.756832][ T9559] bridge0: port 3(syz_tun) entered disabled state [ 232.898691][ T5850] usb 49-1: new low-speed USB device number 5 using vhci_hcd [ 232.921123][ T25] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 232.927699][T12731] overlayfs: missing 'lowerdir' [ 233.052789][T12737] FAULT_INJECTION: forcing a failure. [ 233.052789][T12737] name fail_futex, interval 1, probability 0, space 0, times 0 [ 233.052822][T12737] CPU: 2 UID: 0 PID: 12737 Comm: syz.0.1868 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.052844][T12737] Tainted: [L]=SOFTLOCKUP [ 233.052851][T12737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.052861][T12737] Call Trace: [ 233.052869][T12737] [ 233.052876][T12737] dump_stack_lvl+0x100/0x190 [ 233.052909][T12737] should_fail_ex.cold+0x5/0xa [ 233.052934][T12737] get_futex_key+0x1d0/0x14f0 [ 233.052960][T12737] ? __pfx_get_futex_key+0x10/0x10 [ 233.052984][T12737] ? find_held_lock+0x2b/0x80 [ 233.053009][T12737] ? futex_wake+0x4ea/0x5e0 [ 233.053043][T12737] futex_wake+0xf4/0x5e0 [ 233.053072][T12737] ? __lock_acquire+0x5c0/0x1f40 [ 233.053093][T12737] ? __pfx_futex_wake+0x10/0x10 [ 233.053128][T12737] ? lock_acquire+0x1d1/0x380 [ 233.053150][T12737] do_futex+0x2b2/0x440 [ 233.053176][T12737] ? __pfx_do_futex+0x10/0x10 [ 233.053203][T12737] ? __fget_files+0x21f/0x3d0 [ 233.053229][T12737] __x64_sys_futex+0x34f/0x4d0 [ 233.053258][T12737] ? __pfx___x64_sys_futex+0x10/0x10 [ 233.053300][T12737] do_syscall_64+0x123/0x790 [ 233.053328][T12737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.053348][T12737] RIP: 0033:0x7f680399e159 [ 233.053365][T12737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.053383][T12737] RSP: 002b:00007f68048370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 233.053403][T12737] RAX: ffffffffffffffda RBX: 00007f6803c25fa8 RCX: 00007f680399e159 [ 233.053417][T12737] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6803c25fac [ 233.053430][T12737] RBP: 00007f6803c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 233.053441][T12737] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 233.053452][T12737] R13: 00007f6803c26038 R14: 00007ffebe83c850 R15: 00007ffebe83c938 [ 233.053477][T12737] [ 233.117887][ T25] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.123547][ T25] usb 11-1: config 0 has no interfaces? [ 233.123580][ T25] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.175802][ T43] audit: type=1400 audit(1789738400.381:25552): avc: denied { bind } for pid=12738 comm="syz.4.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 233.188409][ T25] usb 11-1: config 0 descriptor?? [ 233.407100][T12724] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 233.407472][ T12] vhci_hcd vhci_hcd.6: stop threads [ 233.407486][ T12] vhci_hcd vhci_hcd.6: release socket [ 233.407521][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 233.425552][ T25] usb 11-1: USB disconnect, device number 7 [ 233.612917][T12752] nftables ruleset with unbound set [ 234.149617][ T9] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 234.184730][T12749] Process accounting resumed [ 234.272121][T12717] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.272256][T12717] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.272467][T12717] bridge_slave_0: entered allmulticast mode [ 234.277885][T12717] bridge_slave_0: entered promiscuous mode [ 234.287522][T12717] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.287609][T12717] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.287757][T12717] bridge_slave_1: entered allmulticast mode [ 234.301381][T12717] bridge_slave_1: entered promiscuous mode [ 234.451513][T12765] raw_sendmsg: syz.6.1871 forgot to set AF_INET. Fix it! [ 234.483205][T12717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.502590][T12717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.542025][T12717] team0: Port device team_slave_0 added [ 234.544596][T12717] team0: Port device team_slave_1 added [ 234.559662][ T5745] Bluetooth: hci1: command tx timeout [ 234.582983][T12717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.583001][T12717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.583022][T12717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.584779][T12717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.584792][T12717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.584811][T12717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.633437][T12717] hsr_slave_0: entered promiscuous mode [ 234.634372][T12717] hsr_slave_1: entered promiscuous mode [ 234.635756][T12717] debugfs: 'hsr0' already exists in 'hsr' [ 234.635779][T12717] Cannot create hsr debugfs directory [ 234.832506][T12717] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.832544][T12717] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.933478][T12717] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.933511][T12717] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.047453][T12717] bond0: (slave netdevsim1): Releasing backup interface [ 235.063610][T12717] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.063641][T12717] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.158175][T12774] netlink: 'syz.6.1874': attribute type 10 has an invalid length. [ 235.256072][T12717] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.256108][T12717] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.283849][T12776] overlayfs: missing 'lowerdir' [ 235.550779][T12717] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 235.563695][T12717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.568860][T12717] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 235.577866][T12717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.578508][T12717] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 235.591309][T12717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 235.591802][T12717] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.599412][T12717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 235.691367][T12717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.711974][T12717] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.732804][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.732899][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.745823][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.745919][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.007463][T12793] FAULT_INJECTION: forcing a failure. [ 236.007463][T12793] name fail_futex, interval 1, probability 0, space 0, times 0 [ 236.007497][T12793] CPU: 0 UID: 0 PID: 12793 Comm: syz.6.1877 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.007522][T12793] Tainted: [L]=SOFTLOCKUP [ 236.007529][T12793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.007539][T12793] Call Trace: [ 236.007546][T12793] [ 236.007554][T12793] dump_stack_lvl+0x100/0x190 [ 236.007586][T12793] should_fail_ex.cold+0x5/0xa [ 236.007613][T12793] get_futex_key+0x1d0/0x14f0 [ 236.007638][T12793] ? __pfx_get_futex_key+0x10/0x10 [ 236.007659][T12793] ? find_held_lock+0x2b/0x80 [ 236.007683][T12793] ? futex_wake+0x4ea/0x5e0 [ 236.007740][T12793] futex_wake+0xf4/0x5e0 [ 236.007772][T12793] ? __lock_acquire+0x5c0/0x1f40 [ 236.007799][T12793] ? __pfx_futex_wake+0x10/0x10 [ 236.007835][T12793] ? lock_acquire+0x1d1/0x380 [ 236.007856][T12793] do_futex+0x2b2/0x440 [ 236.007883][T12793] ? __pfx_do_futex+0x10/0x10 [ 236.007908][T12793] ? __fget_files+0x21f/0x3d0 [ 236.007933][T12793] __x64_sys_futex+0x34f/0x4d0 [ 236.007959][T12793] ? __pfx___x64_sys_futex+0x10/0x10 [ 236.007984][T12793] ? ksys_write+0x1ac/0x250 [ 236.008010][T12793] do_syscall_64+0x123/0x790 [ 236.008036][T12793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.008056][T12793] RIP: 0033:0x7fbb15f9e159 [ 236.008072][T12793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.008090][T12793] RSP: 002b:00007fbb16dfa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 236.008110][T12793] RAX: ffffffffffffffda RBX: 00007fbb16225fa8 RCX: 00007fbb15f9e159 [ 236.008122][T12793] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbb16225fac [ 236.008133][T12793] RBP: 00007fbb16225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 236.008144][T12793] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 236.008157][T12793] R13: 00007fbb16226038 R14: 00007ffc0ac75590 R15: 00007ffc0ac75678 [ 236.008180][T12793] [ 236.201378][T12717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.283640][T12717] veth0_vlan: entered promiscuous mode [ 236.315694][T12717] veth1_vlan: entered promiscuous mode [ 236.343990][T12717] veth0_macvtap: entered promiscuous mode [ 236.357782][T12717] veth1_macvtap: entered promiscuous mode [ 236.419093][T12717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.435315][T12717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.503938][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.503993][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.504023][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.504053][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.631208][ T5745] Bluetooth: hci1: command tx timeout [ 236.648277][T11301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.648295][T11301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.714871][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.714885][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.715795][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 236.715809][ T43] audit: type=1400 audit(1789738403.919:25557): avc: denied { unmount } for pid=9067 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 236.783299][ T43] audit: type=1400 audit(1789738403.989:25558): avc: denied { map } for pid=12812 comm="syz.4.1884" path="socket:[64413]" dev="sockfs" ino=64413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 236.783562][ T43] audit: type=1400 audit(1789738403.989:25559): avc: denied { read } for pid=12812 comm="syz.4.1884" path="socket:[64413]" dev="sockfs" ino=64413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 236.870918][T12819] netlink: 'syz.3.1864': attribute type 1 has an invalid length. [ 236.892791][T12819] bond1 (unregistering): Released all slaves [ 236.893198][T12813] kvm [12812]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 236.897797][T12813] kvm [12812]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 236.903663][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 237.338816][T12843] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1888'. [ 237.415592][T12844] libceph: resolve 'JzÝfa²XºmV§UwjU´' (ret=-3): failed [ 237.506349][ T10] libceph: connect (1)[c::]:6789 error -101 [ 237.506631][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 237.594252][T12811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.794308][ T10] libceph: connect (1)[c::]:6789 error -101 [ 237.794484][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 237.853184][T12858] overlay: Unknown parameter 'fsname' [ 237.857920][T12861] random: crng reseeded on system resumption [ 237.860821][T12858] netlink: 'syz.3.1890': attribute type 39 has an invalid length. [ 237.889590][T12862] 9pnet_virtio: no channels available for device 127.0.0.1 [ 237.906906][ T1165] IPVS: starting estimator thread 0... [ 237.908932][T12864] IPVS: rr: UDP [::1]:8080 - no destination available [ 237.910252][T12862] IPVS: rr: UDP [::1]:8080 - no destination available [ 237.968841][T12864] netlink: 4432 bytes leftover after parsing attributes in process `syz.0.1892'. [ 237.982128][ T5850] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 238.001552][T12865] IPVS: using max 42 ests per chain, 100800 per kthread [ 238.149178][T12877] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 238.149205][T12877] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.152340][T12877] vhci_hcd vhci_hcd.0: Device attached [ 238.165906][T12844] ceph: No mds server is up or the cluster is laggy [ 238.184408][T12880] overlayfs: failed to resolve './file1': -2 [ 238.391922][ T3274] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 238.551685][T11956] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 238.712851][ T5745] Bluetooth: hci1: command tx timeout [ 238.725474][T11956] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 238.742714][T11956] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 238.742742][T11956] usb 2-1: Product: QEMU USB Tablet [ 238.742757][T11956] usb 2-1: Manufacturer: QEMU [ 238.742772][T11956] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 238.857767][T11956] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0005/input/input20 [ 238.976385][T12898] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 239.009130][T12903] FAULT_INJECTION: forcing a failure. [ 239.009130][T12903] name fail_futex, interval 1, probability 0, space 0, times 0 [ 239.009164][T12903] CPU: 0 UID: 0 PID: 12903 Comm: syz.6.1903 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.009191][T12903] Tainted: [L]=SOFTLOCKUP [ 239.009198][T12903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.009210][T12903] Call Trace: [ 239.009217][T12903] [ 239.009226][T12903] dump_stack_lvl+0x100/0x190 [ 239.009276][T12903] should_fail_ex.cold+0x5/0xa [ 239.009330][T12903] get_futex_key+0x1d0/0x14f0 [ 239.009361][T12903] ? __pfx_get_futex_key+0x10/0x10 [ 239.009386][T12903] ? find_held_lock+0x2b/0x80 [ 239.009414][T12903] ? futex_wake+0x4ea/0x5e0 [ 239.009451][T12903] futex_wake+0xf4/0x5e0 [ 239.009482][T12903] ? __lock_acquire+0x5c0/0x1f40 [ 239.009505][T12903] ? __pfx_futex_wake+0x10/0x10 [ 239.009541][T12903] ? lock_acquire+0x1d1/0x380 [ 239.009565][T12903] do_futex+0x2b2/0x440 [ 239.009593][T12903] ? __pfx_do_futex+0x10/0x10 [ 239.009621][T12903] ? __fget_files+0x21f/0x3d0 [ 239.009656][T12903] __x64_sys_futex+0x34f/0x4d0 [ 239.009687][T12903] ? __pfx___x64_sys_futex+0x10/0x10 [ 239.009728][T12903] do_syscall_64+0x123/0x790 [ 239.009762][T12903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.009783][T12903] RIP: 0033:0x7fbb15f9e159 [ 239.009799][T12903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.009819][T12903] RSP: 002b:00007fbb16dfa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 239.009839][T12903] RAX: ffffffffffffffda RBX: 00007fbb16225fa8 RCX: 00007fbb15f9e159 [ 239.009853][T12903] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbb16225fac [ 239.009866][T12903] RBP: 00007fbb16225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 239.009879][T12903] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 239.009891][T12903] R13: 00007fbb16226038 R14: 00007ffc0ac75590 R15: 00007ffc0ac75678 [ 239.009919][T12903] [ 239.096664][T11956] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 239.239166][T12907] loop0: detected capacity change from 0 to 3904 [ 239.388160][ T13] nci: nci_rx_work: unknown MT 0x1 [ 239.580983][ T10] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 239.741845][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 239.744522][ T10] usb 11-1: New USB device found, idVendor=046d, idProduct=08d7, bcdDevice=ed.60 [ 239.746271][ T10] usb 11-1: config index 0 descriptor too short (asked for 9, got 0) [ 239.746300][ T10] usb 11-1: can't read configurations, error -22 [ 239.871911][ T10] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 240.042144][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 240.044271][ T10] usb 11-1: New USB device found, idVendor=046d, idProduct=08d7, bcdDevice=ed.60 [ 240.045888][ T10] usb 11-1: config index 0 descriptor too short (asked for 9, got 0) [ 240.045917][ T10] usb 11-1: can't read configurations, error -22 [ 240.046219][ T10] usb usb11-port1: attempt power cycle [ 240.392849][ T10] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 240.413604][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 240.415270][ T10] usb 11-1: New USB device found, idVendor=046d, idProduct=08d7, bcdDevice=ed.60 [ 240.416835][ T10] usb 11-1: config index 0 descriptor too short (asked for 9, got 0) [ 240.416864][ T10] usb 11-1: can't read configurations, error -22 [ 240.542758][ T10] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 240.563258][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 240.568166][ T10] usb 11-1: New USB device found, idVendor=046d, idProduct=08d7, bcdDevice=ed.60 [ 240.569325][ T10] usb 11-1: config index 0 descriptor too short (asked for 9, got 0) [ 240.569345][ T10] usb 11-1: can't read configurations, error -22 [ 240.569487][ T10] usb usb11-port1: unable to enumerate USB device [ 240.792746][ T5745] Bluetooth: hci1: command tx timeout [ 241.154670][T12878] vhci_hcd: connection reset by peer [ 241.167915][ T5812] vhci_hcd vhci_hcd.0: stop threads [ 241.167941][ T5812] vhci_hcd vhci_hcd.0: release socket [ 241.167977][ T5812] vhci_hcd vhci_hcd.0: disconnect device [ 241.226111][T12919] overlayfs: missing 'lowerdir' [ 242.044258][T12924] bridge0: port 3(syz_tun) entered blocking state [ 242.044392][T12924] bridge0: port 3(syz_tun) entered disabled state [ 242.044574][T12924] syz_tun: entered allmulticast mode [ 242.046084][T12924] syz_tun: entered promiscuous mode [ 242.046592][T12924] bridge0: port 3(syz_tun) entered blocking state [ 242.046671][T12924] bridge0: port 3(syz_tun) entered forwarding state [ 242.240454][T12933] CIFS: Attempting to mount //127.0.0.1/share [ 242.271860][T12933] CIFS: VFS: Error connecting to socket. Aborting operation. [ 242.279433][ T43] audit: type=1400 audit(1789738409.477:25560): avc: denied { write } for pid=12934 comm="syz.0.1912" name="strings" dev="configfs" ino=22702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.297942][T12933] CIFS: VFS: cifs_mount failed w/return code = -111 [ 242.306995][T12910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.329070][ T43] audit: type=1400 audit(1789738409.527:25561): avc: denied { read } for pid=12934 comm="syz.0.1912" name="product" dev="configfs" ino=65717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 242.445043][T12937] FAULT_INJECTION: forcing a failure. [ 242.445043][T12937] name failslab, interval 1, probability 0, space 0, times 0 [ 242.445078][T12937] CPU: 0 UID: 0 PID: 12937 Comm: syz.6.1913 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.445124][T12937] Tainted: [L]=SOFTLOCKUP [ 242.445131][T12937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.445141][T12937] Call Trace: [ 242.445148][T12937] [ 242.445155][T12937] dump_stack_lvl+0x100/0x190 [ 242.445187][T12937] should_fail_ex.cold+0x5/0xa [ 242.445215][T12937] should_failslab+0xc2/0x120 [ 242.445240][T12937] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 242.445261][T12937] ? sock_alloc_inode+0x26/0x2c0 [ 242.445300][T12937] ? __pfx_sock_alloc_inode+0x10/0x10 [ 242.445327][T12937] sock_alloc_inode+0x26/0x2c0 [ 242.445353][T12937] ? __pfx_sock_alloc_inode+0x10/0x10 [ 242.445378][T12937] alloc_inode+0x68/0x250 [ 242.445395][T12937] sock_alloc+0x44/0x280 [ 242.445416][T12937] ? security_socket_create+0x7f/0x250 [ 242.445446][T12937] __sock_create+0xc2/0x860 [ 242.445475][T12937] __sys_socket+0x14d/0x260 [ 242.445503][T12937] ? __pfx___sys_socket+0x10/0x10 [ 242.445537][T12937] __x64_sys_socket+0x72/0xb0 [ 242.445561][T12937] ? lockdep_hardirqs_on+0x7d/0x110 [ 242.445585][T12937] do_syscall_64+0x123/0x790 [ 242.445611][T12937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.445629][T12937] RIP: 0033:0x7fbb15f9e159 [ 242.445646][T12937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.445663][T12937] RSP: 002b:00007fbb16dfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 242.445683][T12937] RAX: ffffffffffffffda RBX: 00007fbb16225fa0 RCX: 00007fbb15f9e159 [ 242.445696][T12937] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 242.445708][T12937] RBP: 00007fbb1603503b R08: 0000000000000000 R09: 0000000000000000 [ 242.445719][T12937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.445729][T12937] R13: 00007fbb16226038 R14: 00007fbb16225fa0 R15: 00007ffc0ac75678 [ 242.445754][T12937] [ 242.448750][T12937] socket: no more sockets [ 242.768381][T12955] overlayfs: missing 'lowerdir' [ 243.001640][T12962] can0: slcan on ttynull. [ 243.074301][T12961] can0 (unregistered): slcan off ttynull. [ 243.117367][T12969] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 243.230598][T12972] FAULT_INJECTION: forcing a failure. [ 243.230598][T12972] name fail_futex, interval 1, probability 0, space 0, times 0 [ 243.230624][T12972] CPU: 2 UID: 0 PID: 12972 Comm: syz.0.1924 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.230642][T12972] Tainted: [L]=SOFTLOCKUP [ 243.230648][T12972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.230656][T12972] Call Trace: [ 243.230662][T12972] [ 243.230668][T12972] dump_stack_lvl+0x100/0x190 [ 243.230693][T12972] should_fail_ex.cold+0x5/0xa [ 243.230715][T12972] get_futex_key+0x1d0/0x14f0 [ 243.230742][T12972] ? __pfx_get_futex_key+0x10/0x10 [ 243.230760][T12972] ? find_held_lock+0x2b/0x80 [ 243.230780][T12972] ? futex_wake+0x4ea/0x5e0 [ 243.230827][T12972] futex_wake+0xf4/0x5e0 [ 243.230850][T12972] ? __lock_acquire+0x5c0/0x1f40 [ 243.230866][T12972] ? __pfx_futex_wake+0x10/0x10 [ 243.230893][T12972] ? lock_acquire+0x1d1/0x380 [ 243.230911][T12972] do_futex+0x2b2/0x440 [ 243.230932][T12972] ? __pfx_do_futex+0x10/0x10 [ 243.230957][T12972] ? __fget_files+0x21f/0x3d0 [ 243.230985][T12972] __x64_sys_futex+0x34f/0x4d0 [ 243.231014][T12972] ? __pfx___x64_sys_futex+0x10/0x10 [ 243.231053][T12972] do_syscall_64+0x123/0x790 [ 243.231086][T12972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.231110][T12972] RIP: 0033:0x7f680399e159 [ 243.231131][T12972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.231152][T12972] RSP: 002b:00007f68048370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 243.231176][T12972] RAX: ffffffffffffffda RBX: 00007f6803c25fa8 RCX: 00007f680399e159 [ 243.231190][T12972] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6803c25fac [ 243.231203][T12972] RBP: 00007f6803c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 243.231215][T12972] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 243.231229][T12972] R13: 00007f6803c26038 R14: 00007ffebe83c850 R15: 00007ffebe83c938 [ 243.231258][T12972] [ 243.351315][ T5745] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 243.498614][T12985] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 243.498643][T12985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 243.498945][T12985] vhci_hcd vhci_hcd.0: Device attached [ 243.773254][ T3274] usb 37-1: device descriptor read/64, error -110 [ 244.023144][ T3274] usb 37-1: new low-speed USB device number 8 using vhci_hcd [ 244.405937][T12991] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 244.507928][T12996] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1932'. [ 244.588063][T12999] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 244.588090][T12999] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 245.029106][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1938'. [ 245.029142][T13011] netlink: 'syz.6.1938': attribute type 5 has an invalid length. [ 245.277810][T12969] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 245.277837][T12969] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 245.401753][T13018] netlink: 'syz.6.1941': attribute type 10 has an invalid length. [ 245.411014][T13018] ipvlan0: entered allmulticast mode [ 245.411036][T13018] veth0_vlan: entered allmulticast mode [ 245.417044][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.420004][T13018] netlink: 'syz.6.1941': attribute type 10 has an invalid length. [ 245.421696][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.424288][T13018] netlink: 'syz.6.1941': attribute type 10 has an invalid length. [ 245.425810][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.427849][T13018] netlink: 'syz.6.1941': attribute type 10 has an invalid length. [ 245.429416][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.431292][T13018] netlink: 'syz.6.1941': attribute type 10 has an invalid length. [ 245.432861][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.442231][T13018] netlink: 'syz.6.1941': attribute type 10 has an invalid length. [ 245.444725][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.446633][T13018] netlink: 'syz.6.1941': attribute type 10 has an invalid length. [ 245.448362][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.450323][T13018] netlink: 'syz.6.1941': attribute type 10 has an invalid length. [ 245.452144][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.460363][T13018] netlink: 'syz.6.1941': attribute type 10 has an invalid length. [ 245.462301][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.470802][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.475288][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.479226][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.482792][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.494627][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.501251][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.521439][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.542928][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.548213][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.552206][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.556504][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.560455][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.568719][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.573121][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.577821][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.581502][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.587114][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.591223][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.601761][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.609373][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.616876][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.628873][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.632860][T13018] team0: Device ipvlan0 failed to register rx_handler [ 245.637688][T13018] team0: Device ipvlan0 failed to register rx_handler [ 246.103432][T12969] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.103458][T12969] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 246.281093][ T43] audit: type=1400 audit(1789738413.476:25562): avc: denied { setopt } for pid=13036 comm="syz.4.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 246.483628][ T43] audit: type=1400 audit(1789738413.676:25563): avc: denied { remount } for pid=13044 comm="syz.4.1949" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 246.503062][T13049] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 246.511521][T12986] vhci_hcd: connection reset by peer [ 246.513577][ T5547] vhci_hcd vhci_hcd.0: stop threads [ 246.513593][ T5547] vhci_hcd vhci_hcd.0: release socket [ 246.513621][ T5547] vhci_hcd vhci_hcd.0: disconnect device [ 246.535989][T13045] bridge0: port 3(macsec1) entered blocking state [ 246.536188][T13045] bridge0: port 3(macsec1) entered disabled state [ 246.536288][T13045] macsec1: entered allmulticast mode [ 246.560417][T13045] macsec1: left allmulticast mode [ 246.633591][ T43] audit: type=1400 audit(1789738413.826:25564): avc: denied { ioctl } for pid=13052 comm="syz.6.1952" path="/99/dir0/tracing_on" dev="tracefs" ino=6271 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 246.646423][ T43] audit: type=1400 audit(1789738413.836:25565): avc: denied { listen } for pid=13044 comm="syz.4.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.659776][T13062] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 246.662926][T13059] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 246.899344][T13073] loop5: detected capacity change from 0 to 7 [ 246.909883][T13073] Dev loop5: unable to read RDB block 7 [ 246.909903][T13073] loop5: AHDI p3 p4 [ 246.909914][T13073] loop5: partition table partially beyond EOD, truncated [ 246.909998][T13073] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 246.930075][T13073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13073 comm=syz.0.1957 [ 246.981295][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1961'. [ 246.981309][T13083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1961'. [ 247.005147][T13074] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 247.086961][T13094] binder: BINDER_SET_CONTEXT_MGR already set [ 247.086972][T13094] binder: 13093:13094 ioctl 4018620d 2000000002c0 returned -16 [ 247.286209][ T1233] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 247.337166][T13116] FAULT_INJECTION: forcing a failure. [ 247.337166][T13116] name failslab, interval 1, probability 0, space 0, times 0 [ 247.337190][T13116] CPU: 2 UID: 0 PID: 13116 Comm: syz.3.1971 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.337207][T13116] Tainted: [L]=SOFTLOCKUP [ 247.337212][T13116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.337219][T13116] Call Trace: [ 247.337223][T13116] [ 247.337228][T13116] dump_stack_lvl+0x100/0x190 [ 247.337249][T13116] should_fail_ex.cold+0x5/0xa [ 247.337265][T13116] should_failslab+0xc2/0x120 [ 247.337280][T13116] kmem_cache_alloc_noprof+0x92/0x6a0 [ 247.337293][T13116] ? do_getname+0x35/0x390 [ 247.337312][T13116] do_getname+0x35/0x390 [ 247.337329][T13116] do_sys_openat2+0xc7/0x1e0 [ 247.337344][T13116] ? __pfx_do_sys_openat2+0x10/0x10 [ 247.337360][T13116] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 247.337376][T13116] ? __fget_files+0x21f/0x3d0 [ 247.337392][T13116] __x64_sys_openat+0x12d/0x210 [ 247.337408][T13116] ? __pfx___x64_sys_openat+0x10/0x10 [ 247.337423][T13116] ? ksys_write+0x1ac/0x250 [ 247.337455][T13116] do_syscall_64+0x123/0x790 [ 247.337472][T13116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.337484][T13116] RIP: 0033:0x7f7e6119e159 [ 247.337494][T13116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.337505][T13116] RSP: 002b:00007f7e62043028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 247.337517][T13116] RAX: ffffffffffffffda RBX: 00007f7e61425fa0 RCX: 00007f7e6119e159 [ 247.337524][T13116] RDX: 0000000000020402 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 247.337531][T13116] RBP: 00007f7e62043090 R08: 0000000000000000 R09: 0000000000000000 [ 247.337538][T13116] R10: 00000000000000b6 R11: 0000000000000246 R12: 0000000000000001 [ 247.337545][T13116] R13: 00007f7e61426038 R14: 00007f7e61425fa0 R15: 00007fff9e922d18 [ 247.337560][T13116] [ 247.415031][ T1233] usb 9-1: device descriptor read/64, error -71 [ 247.654176][ T1233] usb 9-1: new low-speed USB device number 20 using dummy_hcd [ 247.784115][ T1233] usb 9-1: device descriptor read/64, error -71 [ 247.894529][ T1233] usb usb9-port1: attempt power cycle [ 248.234365][ T1233] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 248.254985][ T1233] usb 9-1: device descriptor read/8, error -71 [ 248.385646][T13126] syz_tun: entered promiscuous mode [ 248.494371][ T1233] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 248.515408][ T1233] usb 9-1: device descriptor read/8, error -71 [ 248.625034][ T1233] usb usb9-port1: unable to enumerate USB device [ 249.134485][ T3274] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 249.741717][T13152] FAULT_INJECTION: forcing a failure. [ 249.741717][T13152] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 249.741739][T13152] CPU: 0 UID: 0 PID: 13152 Comm: syz.6.1982 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.741755][T13152] Tainted: [L]=SOFTLOCKUP [ 249.741760][T13152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.741767][T13152] Call Trace: [ 249.741771][T13152] [ 249.741776][T13152] dump_stack_lvl+0x100/0x190 [ 249.741796][T13152] should_fail_ex.cold+0x5/0xa [ 249.741813][T13152] strncpy_from_user+0x3b/0x2d0 [ 249.741828][T13152] do_getname+0x78/0x390 [ 249.741845][T13152] do_sys_openat2+0xc7/0x1e0 [ 249.741861][T13152] ? __pfx_do_sys_openat2+0x10/0x10 [ 249.741877][T13152] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.741894][T13152] ? __fget_files+0x21f/0x3d0 [ 249.741910][T13152] __x64_sys_openat+0x12d/0x210 [ 249.741926][T13152] ? __pfx___x64_sys_openat+0x10/0x10 [ 249.741940][T13152] ? ksys_write+0x1ac/0x250 [ 249.741956][T13152] do_syscall_64+0x123/0x790 [ 249.741972][T13152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.741984][T13152] RIP: 0033:0x7fbb15f9e159 [ 249.741994][T13152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.742005][T13152] RSP: 002b:00007fbb16dfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 249.742016][T13152] RAX: ffffffffffffffda RBX: 00007fbb16225fa0 RCX: 00007fbb15f9e159 [ 249.742024][T13152] RDX: 0000000000020402 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 249.742031][T13152] RBP: 00007fbb16dfa090 R08: 0000000000000000 R09: 0000000000000000 [ 249.742038][T13152] R10: 00000000000000b6 R11: 0000000000000246 R12: 0000000000000001 [ 249.742045][T13152] R13: 00007fbb16226038 R14: 00007fbb16225fa0 R15: 00007ffc0ac75678 [ 249.742059][T13152] [ 250.074880][T11956] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 250.170418][T13157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.247171][T11956] usb 11-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 250.248276][T11956] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 250.248297][T11956] usb 11-1: config 1 has no interface number 0 [ 250.248350][T13162] FAULT_INJECTION: forcing a failure. [ 250.248350][T13162] name failslab, interval 1, probability 0, space 0, times 0 [ 250.248379][T13162] CPU: 0 UID: 0 PID: 13162 Comm: syz.0.1987 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.248402][T13162] Tainted: [L]=SOFTLOCKUP [ 250.248408][T13162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.248418][T13162] Call Trace: [ 250.248425][T13162] [ 250.248433][T13162] dump_stack_lvl+0x100/0x190 [ 250.248463][T13162] should_fail_ex.cold+0x5/0xa [ 250.248487][T13162] should_failslab+0xc2/0x120 [ 250.248508][T13162] __kmalloc_noprof+0xfc/0x840 [ 250.248524][T13162] ? rcu_is_watching+0x13/0xc0 [ 250.248546][T13162] ? tomoyo_realpath_from_path+0xb6/0x690 [ 250.248592][T13162] tomoyo_realpath_from_path+0xb6/0x690 [ 250.248618][T13162] tomoyo_path_number_perm+0x23c/0x580 [ 250.248643][T13162] ? tomoyo_path_number_perm+0x22e/0x580 [ 250.248671][T13162] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 250.248706][T13162] ? __lock_acquire+0x5c0/0x1f40 [ 250.248736][T13162] ? __fget_files+0x34/0x3d0 [ 250.248757][T13162] ? find_held_lock+0x2b/0x80 [ 250.248781][T13162] ? hook_file_ioctl_common+0x140/0x440 [ 250.248809][T13162] ? __fget_files+0x21f/0x3d0 [ 250.248841][T13162] security_file_ioctl+0xd3/0x230 [ 250.248862][T13162] __x64_sys_ioctl+0xb7/0x210 [ 250.248880][T13162] do_syscall_64+0x123/0x790 [ 250.248905][T13162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.248923][T13162] RIP: 0033:0x7f680399e159 [ 250.248939][T13162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.248956][T13162] RSP: 002b:00007f6804837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.248974][T13162] RAX: ffffffffffffffda RBX: 00007f6803c25fa0 RCX: 00007f680399e159 [ 250.248987][T13162] RDX: 0000200000000040 RSI: 00000000c040565e RDI: 0000000000000003 [ 250.248999][T13162] RBP: 00007f6804837090 R08: 0000000000000000 R09: 0000000000000000 [ 250.249010][T13162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.249020][T13162] R13: 00007f6803c26038 R14: 00007f6803c25fa0 R15: 00007ffebe83c938 [ 250.249047][T13162] [ 250.249185][T13162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 250.252348][T11956] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.252364][T11956] usb 11-1: Product: syz [ 250.252372][T11956] usb 11-1: Manufacturer: syz [ 250.252380][T11956] usb 11-1: SerialNumber: syz [ 250.410010][T11956] usb 11-1: 3:0 : does not exist [ 250.410032][T11956] usb 11-1: 3:0 : does not exist [ 250.548471][ T5813] usb 11-1: USB disconnect, device number 12 [ 251.377481][T13189] validate_nla: 24 callbacks suppressed [ 251.377499][T13189] netlink: 'syz.3.1996': attribute type 10 has an invalid length. [ 251.382067][T13194] netlink: 'syz.3.1996': attribute type 10 has an invalid length. [ 251.734234][T13189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.742850][T13189] team0: Port device netdevsim1 added [ 251.882434][T13203] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.2000/13203 [ 251.882458][T13203] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 251.882496][T13203] CPU: 2 UID: 0 PID: 13203 Comm: syz.0.2000 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.882522][T13203] Tainted: [L]=SOFTLOCKUP [ 251.882530][T13203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.882541][T13203] Call Trace: [ 251.882548][T13203] [ 251.882556][T13203] dump_stack_lvl+0x100/0x190 [ 251.882587][T13203] check_preemption_disabled+0xd2/0xe0 [ 251.882617][T13203] ? tun_queue_purge+0x1ee/0x340 [ 251.882636][T13203] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 251.882664][T13203] ? tun_queue_purge+0x1ee/0x340 [ 251.882683][T13203] trace_kfree_skb+0x18b/0x230 [ 251.882710][T13203] sk_skb_reason_drop+0xb7/0x1b0 [ 251.882751][T13203] tun_queue_purge+0x1ee/0x340 [ 251.882777][T13203] __tun_detach+0xb70/0x1850 [ 251.882795][T13203] ? locks_remove_file+0xd1/0x600 [ 251.882832][T13203] ? __pfx_tun_chr_close+0x10/0x10 [ 251.882852][T13203] tun_chr_close+0xc2/0x220 [ 251.882871][T13203] ? __pfx_tun_chr_close+0x10/0x10 [ 251.882889][T13203] __fput+0x3ff/0xb50 [ 251.882919][T13203] task_work_run+0x150/0x240 [ 251.882948][T13203] ? __pfx_task_work_run+0x10/0x10 [ 251.882988][T13203] exit_to_user_mode_loop+0x1d8/0x700 [ 251.883011][T13203] ? rcu_is_watching+0x13/0xc0 [ 251.883040][T13203] do_syscall_64+0x661/0x790 [ 251.883068][T13203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.883088][T13203] RIP: 0033:0x7f680399e159 [ 251.883104][T13203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.883122][T13203] RSP: 002b:00007ffebe83ca98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 251.883141][T13203] RAX: 0000000000000000 RBX: 00007ffebe83cb80 RCX: 00007f680399e159 [ 251.883153][T13203] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 251.883164][T13203] RBP: 000000000003d4ed R08: 0000000000000001 R09: 0000000000000000 [ 251.883175][T13203] R10: 0000001b32020000 R11: 0000000000000246 R12: 00007ffebe83cbc0 [ 251.883187][T13203] R13: 00007f6803c25fac R14: 000000000003d591 R15: 00007f6803c25fa0 [ 251.883214][T13203] [ 251.883381][T13203] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.2000/13203 [ 251.883401][T13203] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 251.883432][T13203] CPU: 2 UID: 0 PID: 13203 Comm: syz.0.2000 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.883456][T13203] Tainted: [L]=SOFTLOCKUP [ 251.883464][T13203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.883474][T13203] Call Trace: [ 251.883481][T13203] [ 251.883488][T13203] dump_stack_lvl+0x100/0x190 [ 251.883516][T13203] check_preemption_disabled+0xd2/0xe0 [ 251.883544][T13203] ? tun_queue_purge+0x1ee/0x340 [ 251.883561][T13203] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 251.883588][T13203] ? tun_queue_purge+0x1ee/0x340 [ 251.883608][T13203] trace_kfree_skb+0x18b/0x230 [ 251.883635][T13203] sk_skb_reason_drop+0xb7/0x1b0 [ 251.883686][T13203] tun_queue_purge+0x1ee/0x340 [ 251.883712][T13203] __tun_detach+0xb70/0x1850 [ 251.883745][T13203] ? locks_remove_file+0xd1/0x600 [ 251.883781][T13203] ? __pfx_tun_chr_close+0x10/0x10 [ 251.883801][T13203] tun_chr_close+0xc2/0x220 [ 251.883821][T13203] ? __pfx_tun_chr_close+0x10/0x10 [ 251.883838][T13203] __fput+0x3ff/0xb50 [ 251.883868][T13203] task_work_run+0x150/0x240 [ 251.883897][T13203] ? __pfx_task_work_run+0x10/0x10 [ 251.883932][T13203] exit_to_user_mode_loop+0x1d8/0x700 [ 251.883956][T13203] ? rcu_is_watching+0x13/0xc0 [ 251.883985][T13203] do_syscall_64+0x661/0x790 [ 251.884013][T13203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.884034][T13203] RIP: 0033:0x7f680399e159 [ 251.884052][T13203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.884070][T13203] RSP: 002b:00007ffebe83ca98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 251.884088][T13203] RAX: 0000000000000000 RBX: 00007ffebe83cb80 RCX: 00007f680399e159 [ 251.884101][T13203] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 251.884113][T13203] RBP: 000000000003d4ed R08: 0000000000000001 R09: 0000000000000000 [ 251.884125][T13203] R10: 0000001b32020000 R11: 0000000000000246 R12: 00007ffebe83cbc0 [ 251.884138][T13203] R13: 00007f6803c25fac R14: 000000000003d591 R15: 00007f6803c25fa0 [ 251.884166][T13203] [ 252.014971][ T43] audit: type=1400 audit(1789738419.205:25566): avc: denied { write } for pid=13208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.015078][T13203] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.2000/13203 [ 252.015095][T13203] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 252.015129][T13203] CPU: 0 UID: 0 PID: 13203 Comm: syz.0.2000 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.015153][T13203] Tainted: [L]=SOFTLOCKUP [ 252.015159][T13203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.015193][T13203] Call Trace: [ 252.015200][T13203] [ 252.015213][T13203] dump_stack_lvl+0x100/0x190 [ 252.015242][T13203] check_preemption_disabled+0xd2/0xe0 [ 252.015268][T13203] ? tun_queue_purge+0x1ee/0x340 [ 252.015285][T13203] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 252.015311][T13203] ? tun_queue_purge+0x1ee/0x340 [ 252.015329][T13203] trace_kfree_skb+0x18b/0x230 [ 252.015356][T13203] sk_skb_reason_drop+0xb7/0x1b0 [ 252.015381][T13203] tun_queue_purge+0x1ee/0x340 [ 252.015405][T13203] __tun_detach+0xb70/0x1850 [ 252.015423][T13203] ? locks_remove_file+0xd1/0x600 [ 252.015458][T13203] ? __pfx_tun_chr_close+0x10/0x10 [ 252.015478][T13203] tun_chr_close+0xc2/0x220 [ 252.015496][T13203] ? __pfx_tun_chr_close+0x10/0x10 [ 252.015513][T13203] __fput+0x3ff/0xb50 [ 252.015540][T13203] task_work_run+0x150/0x240 [ 252.015568][T13203] ? __pfx_task_work_run+0x10/0x10 [ 252.015602][T13203] exit_to_user_mode_loop+0x1d8/0x700 [ 252.015624][T13203] ? rcu_is_watching+0x13/0xc0 [ 252.015677][T13203] do_syscall_64+0x661/0x790 [ 252.015718][T13203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.015739][T13203] RIP: 0033:0x7f680399e159 [ 252.015756][T13203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.015774][T13203] RSP: 002b:00007ffebe83ca98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 252.015792][T13203] RAX: 0000000000000000 RBX: 00007ffebe83cb80 RCX: 00007f680399e159 [ 252.015804][T13203] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 252.015815][T13203] RBP: 000000000003d4ed R08: 0000000000000001 R09: 0000000000000000 [ 252.015826][T13203] R10: 0000001b32020000 R11: 0000000000000246 R12: 00007ffebe83cbc0 [ 252.015837][T13203] R13: 00007f6803c25fac R14: 000000000003d591 R15: 00007f6803c25fa0 [ 252.015863][T13203] [ 252.195936][ T43] audit: type=1400 audit(1789738419.395:25567): avc: denied { write } for pid=13212 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.207561][ T5884] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 252.319875][ T43] audit: type=1400 audit(1789738419.515:25568): avc: denied { write } for pid=13214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.365043][ T5884] usb 9-1: Using ep0 maxpacket: 8 [ 252.365822][ T5884] usb 9-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 252.366788][ T5884] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.366825][ T5884] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 252.366844][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 252.368751][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 252.368770][ T5884] usb 9-1: Product: syz [ 252.368781][ T5884] usb 9-1: Manufacturer: syz [ 252.368794][ T5884] usb 9-1: SerialNumber: syz [ 252.372350][ T5884] usb 9-1: config 0 descriptor?? [ 252.444491][ T43] audit: type=1400 audit(1789738419.635:25569): avc: denied { write } for pid=13217 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.487236][ T5884] rc_core: IR keymap rc-imon-rsc not found [ 252.487253][ T5884] Registered IR keymap rc-empty [ 252.488337][ T5884] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 252.507984][ T5884] input: iMON Station as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input21 [ 252.595258][ T5884] usb 9-1: USB disconnect, device number 23 [ 252.630308][ T43] audit: type=1400 audit(1789738419.825:25570): avc: denied { write } for pid=13221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.722820][ T43] audit: type=1400 audit(1789738419.915:25571): avc: denied { write } for pid=13224 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.323453][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.325607][ T1443] ieee802154 phy1 wpan1: encryption failed: -22