last executing test programs: 1m11.329407909s ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0040d06, &(0x7f0000000040)=0x40) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000080002"], 0x2c}}, 0x0) 1m11.259966606s ago: executing program 2 (id=10): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b", 0x2f}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m10.974163876s ago: executing program 2 (id=15): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x4, 0x12) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 1m10.95902566s ago: executing program 2 (id=17): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x0, @void}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x620280, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x400) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROMREADAUDIO(r7, 0x5392, &(0x7f0000000280)={@lba=0x410004, 0x3, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@mcast2, @multicast1, 0xe, 0x18}}) 1m10.76991437s ago: executing program 2 (id=21): socket$igmp(0x2, 0x3, 0x2) socket(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1/file0\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041c"], 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x8, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x40001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x28011, r1, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xbc, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) 1m10.589912958s ago: executing program 2 (id=25): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setopts(0x4200, r1, 0x3c, 0x18) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa0000000000000200"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x97) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x19) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0xfeffffffffffff) r8 = syz_io_uring_setup(0x4000205f, &(0x7f0000000400)={0x0, 0x35ec, 0x8000, 0x80000, 0x4f, 0x0, r6}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000540)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r3, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0xa84e5475952f9a3}], 0x1}, 0x40001002, 0x40c1, 0x1, {0x1}}) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r12, 0x40049421, 0x3) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRES64=r3], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x3, 0xc8, 0x6a}}}, 0x7) 55.549600249s ago: executing program 32 (id=25): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setopts(0x4200, r1, 0x3c, 0x18) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa0000000000000200"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x97) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x19) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0xfeffffffffffff) r8 = syz_io_uring_setup(0x4000205f, &(0x7f0000000400)={0x0, 0x35ec, 0x8000, 0x80000, 0x4f, 0x0, r6}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000540)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r3, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0xa84e5475952f9a3}], 0x1}, 0x40001002, 0x40c1, 0x1, {0x1}}) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r12, 0x40049421, 0x3) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRES64=r3], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x3, 0xc8, 0x6a}}}, 0x7) 48.899576567s ago: executing program 0 (id=243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah', 0x4) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x3ecdf4b73ea286ce, 0x3, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0xdae}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x8, 0x4}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0x3, 0x2, 0x20, 0x78}, 0x0, 0x0}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42, 0x5c}) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 47.529495565s ago: executing program 0 (id=270): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x9000000) 47.369389309s ago: executing program 0 (id=275): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x1, 0x2}) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7544, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x70bd27, 0x25dfdc01, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffaf}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004801}, 0x3400c012) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"}) close(r3) read$dsp(r0, &(0x7f00000000c0)=""/52, 0x34) r8 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) 44.195725031s ago: executing program 0 (id=298): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) r2 = creat(&(0x7f0000000000)='file0\x00', 0x1ff) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x101}}, './file0\x00'}) r3 = openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, 'my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00'}) mkdir(&(0x7f0000000700)='my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) mount(&(0x7f0000000080)=@sr0, &(0x7f0000001080)='./file0\x00', 0x0, 0x81001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r4, &(0x7f0000000f00)='file0', 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 44.110471301s ago: executing program 0 (id=301): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 43.82995827s ago: executing program 0 (id=303): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setresuid(0xee01, 0xee01, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0}, 0x94) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x30, 0x10, 0x401, 0x1, 0x8, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x10a10}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x9}, @IFLA_MTU={0x8, 0x4, 0xb2}]}, 0x30}}, 0x40800) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1412, 0x4, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) 43.742935284s ago: executing program 33 (id=303): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setresuid(0xee01, 0xee01, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0}, 0x94) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x30, 0x10, 0x401, 0x1, 0x8, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x10a10}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x9}, @IFLA_MTU={0x8, 0x4, 0xb2}]}, 0x30}}, 0x40800) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1412, 0x4, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) 3.629350489s ago: executing program 1 (id=719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x145a41, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f19", 0x1d1, 0x0, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000080)={0xd, 0x80, 0x1, 'queue0\x00', 0xc}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r6, 0xd}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f00000002c0)={0x400, 0x200000000000000}) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x500}) close(r2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x546}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2d, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db90100000000c54222cb7a"}}]}, 0x150}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x8001, 0x0, &(0x7f0000000000)) 2.800436033s ago: executing program 1 (id=723): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x0, 0x1, 0x4, 0x0, 0xfffffff9, {0x0, 0xea60}, {0x1, 0xc, 0x9, 0x48, 0x3, 0x8}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x496000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0xb, 0x0, 0x3c, 0xb}, {0x4, 0x0, 0xc7, 0x9}, {0x1, 0xd5, 0x7, 0x6}, {0x5, 0xe, 0xeb, 0x9}, {0x8, 0xf5, 0x9}, {0x0, 0x84, 0x10, 0xffffffff}, {0xff, 0xf1, 0x47, 0x7f}, {0x2, 0xfe, 0x3, 0xfff}]}) r1 = memfd_secret(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x14, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) dup(r3) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x1, 0xa, 0x5, 0x14, "3b0047ca3d83a2c69ed969215f6087f5b2b5a67f9d95b978c184a6675963f8020c53ededa90d1384379e29a855d450210f7025a021713be1ecd93c4c82dc90ef", "5b66c0b862749ba20c6c3b993e7a3e7ea3d9cad8c0d3b2b65b81dd5f4e9eb2a3", [0xc94c]}) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/100, 0x64) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000100)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2.541644647s ago: executing program 1 (id=729): socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000000)) socket(0x2, 0x2, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x1, 0x18, 0xffffffffffffffff, 0x400000}, 0x50) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/179, 0xb3}], 0x1}}], 0x1, 0x12000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r4}, 0x1e) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000240)=0x108) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1}) 2.416341774s ago: executing program 1 (id=732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1fc}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6569}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) r5 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x1, "a22fee2d426bcc1a0ecc8099d3c13dbea6af18fefb7e3638916090dd95bf1db0", 0x9, 0x7, 0x2}, 0x3c) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x7, 0x0, 0x4, 0x5d11, 0x9, 0x0, 0xe], [0x5c0, 0x80000000, 0x0, 0x0, 0x3a3, 0x0, 0x0, 0x4], [0x7, 0x0, 0x0, 0xfffffffc, 0xc6df, 0x0, 0x4, 0x20]], '\x00', [{}, {0x3, 0x8}, {0x1}, {0x0, 0x80000000}, {0x3, 0x4, 0x0, 0x1, 0x1}, {0x18, 0x5f}, {0xfffffffc}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x0, 0x7}, {0x7fffffe, 0x3}], '\x00', 0x1000}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x2020) r11 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) openat$cgroup_ro(r12, &(0x7f0000000000)='cgroup.controllers\x00', 0x300, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="170000002a0800000700000046820000c4810000", @ANYRES32=r10, @ANYBLOB='\t\x00'/20, @ANYRES32=r4, @ANYRES32=r12, @ANYBLOB="37000000020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.217196924s ago: executing program 1 (id=733): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', 'my_tracefs', [{0x20, ')'}]}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1", 0xa2}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd", 0x32}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r2, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.90866037s ago: executing program 1 (id=734): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x200000c, 0x0) read$FUSE(r0, 0x0, 0x0) io_destroy(0x0) r1 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x1a18c1) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x6) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x26, 0x5, 0xffffffff8e040048, 0x0, 0xfffc, 0x8, 0xfffff5a3, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="a6c574dd37ad5a06633d06f193c5b957758b45f2f4212a3ce6abbfded4461de98c0780332e9d3bfa72a53a1565605c551d53a1a3df7a15704f14493a1022fbcf144fe898338e9d3ea15101d7e179a6bfc093e7fb9ce3bb0854c64264cf2b2baeee72f52658949c8262186aa1582f932c471e68d5cfabd57f6abc46aa8052b942bac756f03e4a14f3ee3cc55d2aeec21d08ae0cd7a67ba70814ce161c6b7718e96055c1494f55f10673316179e99ce409c9cc18b80a020ea99be8bd3415d4420a9a4c74c9d16b8c6b58517f1380c44b8cee0d164eee6bfadada764eeac74f4c867b5e184dc0918d587bfc577836e9668f0fd44674f1310a910df2dc6e2342d47fbeb890b30d7183595996daa2e6f21fc1541ce0ed0686f2ca5536bfbc851a1ab1575502a19cbd990e954f12e9b7a0985d93c1ca66b268d4bdcdf7c75c17faa6d9b03c9f88fe6d31aaef35d2dc65bc74279983b0c6646475b83c1e01b6c8872d115aa72ae06a18e6d4120f551d2c35fae118d490c50867bf3f6cd2f950f22d6b0c7577e04697bee47b85c6144e2ecf45c4fd93ac1b51e44f98e38f9e9b93c3eb9160404d3a60f808836a8668604ffd8b317f91fd4dae384386c01f5fdebfa643907b5a07ad1423cb0d4a9a68aae6d2b5a912ba0b0789735e73d9a8ed8ae42c92f67f5c3a40e7df5575dd5e033f3bbfc443cfdde1685d9d5c05e8e9469bf7f546398a36cac008bc36520d0e08a4cee2a48ad2ab819524c9e2145f0d9d474acdb028b9cb8248a4d9df5bf6a1bfeea458fedbc039815ffe375cae1fb9be988916c20387318cde61c36b17eea13c176bb106d292728537032cdd79d7c8d48038a6b71aec0d61e774be6ad9f64210957c82dea29ca0991e019455cd7fd2ee2a64491e87e89807be62436132e5a6e75eb14f83885f161bc0c1ad2f3390cf0125712a9f5a14e62be0a9ef23f1eae46680143a83ab24483be91e1c015d4aadeb378c7aab79a474b755e14bbba59f2ac1b80d53d38baee42fd758e9a336ca9044e9fca0146f7168aa4a519e674daf9e061778a74a9ba48c34e1bc8ee86943f37b6fb653a82598902630bd4fa3cf374a622f38dcfe1006a3eed5c31766d13bcb431d7911ed3fd747755300b0343b65de201e0b95599f36cf1971b39fb3bad2448b863df0df7a3ad88741f08b90d7ab7632f481f0a6d1d8cea57d106b54790acb105f5a4030c48a232592a887863710b16abb7357670b36ccfa676d6689bf10b6ff95af963336f89f4136dc9ba2ea1c92bba5cafca6b248b2ffba2737012f29ac03ff59572833c4ff9e1a2ef2571e6962ab67e1e55138ddc4ac90441fa75f0feb9b2e07424bde534f28a50205f1136d9fca176d875bc44e3439c0bda08a2777987bb4e6795f48038f2ac7963d6528fddedf73b8416412031e84fb2ea1374adc4e3999db6339aadbf1c795dac51153f0ac54ca6d418427b696ded56900d663ef962822d67b6c7a6a0d5002f88e24b06ca47529f02ebbfffae34efec65f230de35368054a9d8bd9fc710f005008149019d683c7450234ae571b40e5de4c9178c1f1122aeac8293008a28ead3946bd6287126fdf42fecb03700cb9495b8a9be544aef8b489238020d7b9149f404dc17f61cfa4a3eeae72f46f79fe3f6d384ac2a4db2a45bc8c002ee4d491607e924fefd165c46fb15f2abba54a36a2460b6c2ee63de3e30e98ff3d453fab204eaef89ea21f8117b0e5e5e87eed6e2a3a58d270e65cc92f618b0e445d55f29c031fd36fce5ff62d036902bf5f1e4feb74c571f5f8fe03519d579c78f82efe2dea5192222f42ce4ed35f0f5df316dbe5b1db225b00dbe4e04518bb289c6eecbf2025a6758eb04f3675a9061b5e9ae5a9ec9bc5ee41b08d71c9059d2c68a42da09d2eacd3ace96be1ad943830663052cb8e3872588394453a1aee28cc3f7e4cfe34821cc8c323204a06e9d82fd4f67751c49f17f92dcb30e8f02f3ea24be55fbafa90c501c365cc0349e2c3b6f0f02ac83ff40793c4ed56e294ce28accdf6bbefcbfd0ff538d7cfab35635ed8fc8951a1ccd30b59bbe2c51eafe223b4dfcbdcde2acc437de051f9563b76a4360940a71986d86e0854a2b530ade41bdd87c0234ac5dd42ee03a102932b083e57f65c1019d4054efc1cd25f4f852b9cc6befd387ddecce4da58a466e536ee8f7a3ca5be424c92b1a20eca71d5901f3d62ac1bbcdeeaa2ef90fbcaf35168a1dc0a5cd52ea960ab4c1d0e0a6535afd5f209aa89617be651c4c2cd212445b32e17a04aeca05b42d4788921e5834744e63f13222dc52c90a08b6204d85fb27c9f15de631d53b5ff0ae50b5feb46f7c67363423d24f970e0e950839da3f42016ac2f38859ae4261a1e9da9552b6a17a1d5bcbf27fff17ad05384206948b49ce4c87c80c80edb9a3b5d76d1e64b01ba735f93667b8b378be78935936c2ac1071d7abb977cf01edfe7664858cfd8f846a4de20d98a56860091820f9fe7ca2de7be202b36222b88bd8eac23f41f62e14110afafe64210f4a07f894bfbcb183b87747e362cd5b9e8c50df1453053c18fe121bb7507bc501a46f736bd13d5ecc4fa54dd77e53a604f7232c8331b1b7c0537689fb1945128f975d6405747bcc0d172c19d4fa610cf481a8aacd5f7a7cbef3456a65443322afd137708b3fc8b3ee9b8a4cb38c7b14d4fdd74daa58074bcaf22bca1cc8ec2dd22cde60ba5d892342a14be25b4d897ddb23b8154c6f24a93c00c17acd90522ef7acb80b343ac08b4af83ce8a0c95bbfe140c0f1c572639f4079607a34b8f675cf3ddfc2bff83635f9d13b2375c1d317920530fc72fc774edf8dc4f653d72876c1ae61edc6edb1cbc2edbda7207cca6811175cb8f9205d8be99d81d217e0433ac7d298962b87db00128fff1f3d264c50dedd3ca4bccc8db1c1191c3ea226d351560024be65f4e85f577bf8f06d6528f7c73640cd579ac1677ee58255c1bcedc9670684737173037eddc55bc943b78524f617653a324319f6026b6a9b02cc9e3b58e8b661d5d7805723cc5c476e3b7f04ee7dbfe1af744f756313a2146a84224877cf93d1f27c28e7e21e4d29193d6384c3e9eb337cf67a5b45970c7ec3d5523847d0e7d56cc4f132f160851feeced284fb5a75c203fa6b1e01362ff6da0ebf8d852c90b1a026386253afe5c7a078ecd8c5663bee57b83200653bd2a5e6695a3cc5d466d2e65d81da058107d2422fc99875e95b772608e456471cbbfa2ee8795b45cacb1290563eb23bf534c7db5e47fbee4081013974ce9dac3301d6cd966255e22243c90fc55f4b421940c7e819e5d54f44869943e2f267e3b1b9eafdf61a9157c04e71b756076445ead7851923efa6454ff156b2c3793192fec046b7b7e8947efe0009e9ef049dae89b34dfdc0183cc7a9c7cac4eb13994535e803a7d9f070b95df12bb2ecc30bb518517982be2a274faaec1713a423f020089848326e5fe32c115de0b7f8c2876271a0d17924d246c9e08bb534d741b03646daea5411f1825632caf101ccae49a99b82e3735513947b6c6a4b09b76203547f79f2809c96bef593c6e64bd0eb84b1b11e3f136fe725607df9b3420af6cdead70bc572a44ec1453de49fa1f6843f5e74055cc37aa86a9c06cc8094f3f58f3bac7f7980c1d41729ce1331096fbab86ee7568798a0be045b132ec6c587143ed9071f949f0090b783a1324d76f5aec5559168da67c85e3bb8a48937a214d1f101d7ccff655c5eb778ddd61cde8dc39bb1920e0d7cf418b761ab92bcc677a0c5b6cab85574c1216e3cec682dbfad3a7b053e365578c0c1c7a70a1b48b6744441f1476e13366087913dd41e6d9a272301be9721dc0fc78355fa914b8033c1eec4f2cd0cb39e17603b2f7052619cb52e658c928e3925c326d00016146a754142115d4bafed77a5ad8b541f4e5cb732af4411a1a8833ff4215aa8e0d743ecc63c311bbe3fd21335a82f0648535688434df83e6fe6ea8455294a2bcafff88a0d0485657e7adf5b73083d873cc87ca6cd56593f11642fe27d9a998d55ac7af93b702fe4418d3ce0f2dd73d8c1f60524575119bfe0d961c468a906a0df2868465b5bf5d2018b97c2e11393f673b7199dd0c71df6469f984dbd484cf809ef1f919d1b7fcec368cb93ef49fae9b564a28225c2e2eef782a07f6aa660b2c385ac00a2151e3ccf29344b93621987f57bd29ecde89a2cc8dc87471606cce12f2ac1210358b5f08eddd983e86c02440a9b357f386f8d4ea61b0a73b64427e4e73b174ca05e63ab749626132643d02df141c757485cf729bec5229b91dced3640366200eb3beaacb9e9daf19fe74d7c06c18f3caf4d9ea2cc8fa906f58c620f91fd883dc9f3743f094a4b0c85d78f7ce6cc01c53856be10e861fe347f077399e187d22418c0aad8a913f4cc892c903d544be85be4b031d1028f70acd8184de1c28538001b153bf0bbb65c160339fe34856eca5eda8aaa79d76e4f126b4bbfaac2f44c0d936002ba75b0205a21c4720b0b3ae87f5c458a57254b017c51e3a51e087c3a29a654abe9fe9c21a100122a11f500fca1bf676aaf959980fca9cf1ace013d1de770ceea61e9c831d3a5dd8faab74bf95ee49f1a580e8c4add9cafddade6c761bd100e1658070b8fdba52481144d14fab4771b63a1e1ca1ef6d4edeada494a084bab8a5e4e97d1fb9313330ab144adc08933fcfa71ce95e9a274e5d1deb79705512b74306bbf702db06720abd251f38a4d6c3f8006cd42701e2355e7a5815131530749a409c0d5d993d20a6b82d84e4f14c36ce24c713c53e8edd3d571049838ae8815cbe000e492b645072e8635290d7b4e13439bd7964aa14f5d55b9347df8d7635ff028f4b6c9c21a98d2fc733fab1953ec9f142e95a29df4cb41d7b7863423ff7c39cbe4623bf449d5bc77040d90817ac0048cc360509a5a16c3094a6d57580db5497c3b3d5c62104dc58e851acafebe9eb531018215ff2bf2d58999d6ed966a646dddb0ca203a27978983128949878002ed1ddaa77aea7215e74499f9159cc9955822db1615a258fe65e0561be8c62435b7271b1f2911a9e01439ec15cec3e1f9fd795fa829c20e8729ec79fd064db0a8c2e676b9f3e3f49f05931d79303a9bdfeb04acf35596520383d8e758a889a00e7362cee3717b70cf30abb93a5f2a40ae099c265c2df3c02b4fdc4293d4e7fc26c8887fb9eb9832b716b083cd56d77ec2525ce622a2c088ceda4c753643212e2170e89ae2eb48d99e22c4844553b3ea0eb5383813522bca850896239fd228d4215d4c5b550f041c87b78efc4c1dbb96a6b0c03ab83c7ad4484b487804bc21d2b82f10da8a4fc7bddfe88882d1285e5eb1592ae121dc37b39e0de0c4825639ebf4cb8328c236721ddcb5820f4ca2efdc2bfcebaa0c588b0cac27dc5586aad5043434edcc6c02bf7173cc771d73f369951e97a0ef5cf2deff299adb75e564b3630c41fc059a75c661dc2510a3dbaa265bd700c9e20685991875a352a8083db7560f81cccecbfa3a744cedcd22efa444140e4d1b44ca8694ae7b80854989c393173b2fd8320ffea2d9a20a076357e5005c3c827808ad6a52b8de9968a41e0ac3170ed92f9f5630c62660746badb6894a6ad22b31be6486cd433520fb12c35a2720cc4b26749c0c4fff90060d3e5c4e5a3ea0116e20fe0b540b3b1dfca809b76bdeda4288667dc0b5b12a017fc660ec2f81d2e123c7a44c5a5080cc6bb82dea8c4afdc577c083bfc1030575b566f8a645b625b0afe554c68047ca43b99f9fce1dafe0b8c04c0a96b291cfb57239acdea88a4da0702b28de12fd36f24191e872a1f84a4f9922f54c1ec1c4b334a2637bdf17c0ea02c625d49d5dfb6f3799fd533a2948f4eb715ce107beffca4d4bcda4f74cae225cd2d47e5328ea2d43e90bb5d889cb25582a6dec2074c2a56c9b085da58d04b47f705bd20d2a038e74047995a5a91f130931fc916ee1ce71a6e1e448a692f2038612e4ec92d9aa496bb456303948ee34fa252fdff78c73d0ea3561edaad53a687172928fcc6b4f7c489113444a71073891181c863e1b11fb91ba0ed1362e313738bb094e59848b6686b609820a40f2bb7c06b2ed25f8834550a11be1d48af0260d8b22af8a560b9b995539118a7703621bf4f458d317ff594ff5ad5b54c460b0fbefb26e6afaed183d76f5deb150a96e8afa6ae08bf2e5cf7512ba46d153417530bb0f3d0fbccfa577b6f89d67c3d35402c50ca7e26a037d6e743ced3f562624aee7c9e7edb3e6dc1fc3e692b93b819bfec8e593efc6e5614ab7dc754ae7116c14b52d3cdb5a1fae2b420fcbb0a1df00ba19f61243e94f14324fbe9ff18cb9e9050fc795a9e4951119bf1fab9ea614cec2421d1f60dfb7776c5b689a443785f979c4abc48e730d091a63f8f504e605029a817135597e7556dfa086139077037f313e827f4f1ca48aafafc4c1f8350750c68eebdf64b9f8e7043d3f53fcdc7c3479d09d70305b197e68140b430290d6169a998762af1a6c18d9f5a383503a9861930a0058641e35ebf149bd092a3f16e91779b0782f850c6ceeae5325609431cd363f46c5411ccf4187a30d3681cf28b945b47ac0300522750c706d4e438d848339578b8cefbcbdcd0d0e325a9d201ee670a98e7c79bd695915bca29f1d06ec01b71797088126b936f3233a7e6d9536aa9f09f13bfea01d44508ecdded3819bd1c6efee93703f4886be2fa2e8c93a71955a61f0cf44a9aed26cd75416e83cd87191a6c060484b0cfb50780131141f6cee23e7a0dc395118699422b1ae82199a7482e6637e5f6d0cf95b59463bccbf9a1cb13ddff1510d9e4b6c83f87b54ea388d73bb7b8ea91ef354ab5a7d789ceb116659a9b094fca42bf3b3ca01a6183d0947993d1953ddfe86b4b9ed39ee0457632989bf804e638609c7a5f02ae3375b664f9420b809fcaafb8312f8306d76635fadd3e92c6cbdc4621ff29384d1c171f526446863f5264ba0bbda4591f7c556ef90883db06ea4df05fdc2ba59972efdd10ac63317e97756c596c01b9b63efc66576fc220822fb66e63e49bd6a0bd1af1a67659e36f0f8ce4594fb592c2592b6d59ea6c387c10d83bcb6fafb0ce23eef6f108d1449ee732b75bea6536a1d4279d8c73a873ab0273dbc47b33ced5c18358b719341148c3658ff43bb93ee7240511a549e7908a767ae713f3909f937b876989f2c78d379d5f62ea7fa8c2f872179b90adf80caec5e60965fa003f4c1b022d49b2b056e3f0809ad4667accf069c2d4f93d90a6272c2434566553ff0da6507d6a4680c2ecf6b0810a9777ab213283ebc2cde80001cb3e591ffc0524c2d49e297c98e71595cc7d742ca23fde6976297988fcfdbdb131f82547aa17dc8f2225db8829a8886147cdacaf7478fb383c645d6f87486ab377e83b3b4352330fbf82193aba642e7494fbaa86dd146f3fbcafa68502be06e76f62b43520568977fa3274a1ee63250778dbb50c9b53d559a025dd5dfca0b90c39bec748b7b48f277142e7b8feed18fcbd6d064af6aedbb4af14ed01a8b947d132c439d5fc28972b1f3dc32d1347d0c78d6b0253f5eebe2c2623a0be2f11d48281384c89b8f5e9317c3f9eb5ab19fe113376b5be6d7b13518e11d10f882dbd1a78020634169294b51202691c28a3c78c1dfcf4c90cf9b6bcd89ff2487e237fd8fdcf9438d3d7fe6170d50bc2fe85a0ea92bb74a4d5a4dcae9186b48f1733f165600e3daf69425a40ed47bdf21cce93fa901a6370e67eb5bdd59857742322ad6e9aa86a260f76262faef3c957b293c80a7e26a06d6ac6590a75f47df7784c2bfa51da1ca9b016628b56db020bcb88fd584b2a6e71d97a7505cc692b7c24ca690f54683b913741ed48487e358ac12d1f5082a618344a716bce24d899577a1f6f48b22bd0ebe6cd4f98cfa0bb645a8c28575d171d898a8feaf0578d97ad9a4cc4e0a0c8367202a5bce21a1c14a99073afbcb5399336efee97bd5819cc125d1fc401840e3a31f23b51d5d4e6c9ea449975817f08f742ee5479b9ba24a7b203b82d3e060510e85aab8c32434229e4100b5b1c3760b914e095d071790b65b9bb0a3466d19b206fa415f0f8b0bed0673f6e17e2e5fae3a42a3633c302c140fb82c2f5c01fc470c9c3e68b5c0d52039ef4e50fa31e1bb2019ebb9858b299b69740b2949449d8469d728f892da89e7115de8ee1f777c507bfe98e80d9b4d064fe0889392e5170711988b609972aa8f15525ad2bb1dc0117af0933792aaca6eebdd22ce19639bee25c877d802a503d1354bba99403435db2aeff550c0b477625bd22617398b9124d3edf1306e522cb2f8610bf533cbc55d4d1c5d7ff5d07f87a11494980e97a7c824beb7e16090040d2cbff761b826e8b5831dfcdf000eac2e771a48c6ba846b9ddf36a858099f77d51bbfad480bba9095905d618d7b355e40159f5e48ddd5583ea720ac9c74cb118c011d3ba1c67dc865a8eeab8667e0a81ce5894fd888fe4ec2ff936bfeb45c66cde689e4a4f13bd138e7dc27aa263fb009b81c274bd0d73b35385d99d1d082ebe5cb41de09d274fbd7c1c414f3d1ab45d2e8949cff34106b574710144cf6d2072c380cc9c83ca48b5e057973e73df30821c1478d21bc55a462727263062271d76fea1509b365fbdd92b4c23e088f61fce348ba0e7a3e5de600762c462e063e74981f14520babfc3278326b95419d24f4e4853507acea8a5f7e70c13b31f47dc3d823b3f699a029093b1ccbc564c3be29a974cea6fbecdae3f763fff2e65bfa1a52742fdcde3c9c0644267825576d7268e2bec08bfb52083df7b5bab93fbf2cf6a8d91cda5a04216e8b9d961a28720667d2a1d3098bba17517b74cc93b8e3b65d36c12f10a7e0898db2e1e4daf78a6696e1ee221cb885519cdfbe9284face6a525e4ac8d1d91f46d2dc8331ba90e9613947718bf51476ec3702c21313248edd984c46df760b2d83ce9599fa73508d12f606d4643c25ca38fb97fa43d229a8131332011fa87763ae10d48c5e2be8914c1d40d3e53e52f803804769edbac0e309590e4131982de1baae61ff0f1443b95344c488a7a7f4e0b3034400bddc2ec447a40a36d017b2caba9bda7f03f8cddcceecafa556820ffd3c072ef394a3d809d78f5ef53f57f72012b60ee76940b3aad36c76249a371669ddb0da3227b893b99a355143cab5cfc717658b14133aaf002ea497bd7db4d8f1bbf9934a55777ab886038492a934b1a2a2cce48971ab93c78fe4d45109e5db3c5c276cf99a3cd497023bb2a19b6a186325f72d2d202ff0201caa67ed9901afae678579fd3fce2f5bfaed4a54bd2dbb824f51dfe17d998b0526fa8dc596a80f097c46ce38f5e927ace3d0dc90b9092d619b71e36421fe0869681cdb5e385b794e9ed34932163ffc6b8d21e882b1ff00c7f3db420b8ee19c7c38ec3192de30dc3e5d01f572134c1b25b08f7cd1526fe4a97c1108cd84950a11dc697551b401c4186f2d1e4cd21a2b4fa43ec6c4af09f80bdadebbf121ad2339f6bac808f3a9964516132c3b3d8756f22f7b7b8a8695d3029c45e335c77945b8ae7eca964b77a04a1695d65c4f453f1cd3f6d85ba40764f02007165f1fba3b28d23f88534995119c869a20d48c67f79dd1d259042dd8226732905de52ee1aa570ff4fa732d86cc20a11dace7d65fdf1d26b58384b7f315d11cf3231007584025c3dd9f2d5e38d7c2e3bad6ac85267d31625dbbbce63e9898872f38a303fd638e43c5cefebd719e8efe6b2075f91cbc62cbb6579420016ac0216b667aecb7195da4c4a36477c665fcfef6ad551ea3606a1475230118d95e600cf2abeff563d92e1bc753d10d782a1d95140b5cafae4d2d350e7a84fa3b65723943a97c68cabb776ce502abf2f1f1fb8c1248a9bbf2903c9304fbf9a1219b40f378123b5f8130ba36f3f423327b869605d056a101f64d8d6ca8b59aae0e325ae5e114ea550d11fdf983ac2eedb404a10929eabaf2f7c402b82124c7bb30b5344295818a253012dafa47f6f34b4431f0180cc2859db29b349c6138b538fd4de3863c21c01285600dc1ce73013990e4c1daa03d78878200c639586038620fdb7a9fc844485818edfd2636aec5a2b16af4bff428d2dfe89475ca06776a68d5e4b4761b985095e94cd91d33a3f0a5dfbfc255ab5896491c03044aff1950823358b54edee81afea9b88764a24ac9b917e2cab6cb2ba1c91d10bd0ef8681cea3ad9c59f78882d4aa807a53a106ca2d0738a04457275cfac653638a94577c4ab03c9e5d6de1dc78b487ec918c4a7ca2a8d6ff852e8fa25776aa6f139a3c54693271502b71eaddb461c1819f6d20a79ac7226a177f42df6f4705cc62cc0484b28e5cfdf7fc52b0c582621bacd703a28714175db576ec0bf017c32424675d28d992e46de460b3289fee37b49b356f7842cd94764795c887115419234049a2a2708ae82efb8f10f5d22c2bae2f5c1abb9cd839c6214b0acc0b04fb6cfdf7f3adcadc5189d850dd957c47a4f946ac479a4e124f695d222f37ea07506638e90b86bf3bbb0ccb578bb6fee8941d6e1da1c77996a064c60157b6d417beb1ad5205f210851a079f9ef6e3faf3cab5482cdf7159e78b9d820cfee714a070ad35b91b49cb43b43bb7fbbfd5276b5c2eb0d4ca9ff9b10f0b8ec74233c7aebb2933e4bd5b0a388ed6ceafed8ef995098c2b88d74d2cebd44ba26c27b5d8983394d286156f4b501e45fe5217096b1bfe7b9bb3f6c3b4d2ad15bf1c86ed70ee852c4cfb979eb4a0c826953799a2030322669364aa905092fb45cbeacac44703c70d7e278f1a5926f242d459e36dd8e374f9bb7a0c907db1d4f8c1993ac0244f6d563041a8956ea82b7eef7a63ac200d32ab107d6728610efc530aa5783771a5fbedbf5a379b2923f088cd203e315f41072d83201a1f1fce87d8b7cf2f142e1ff5f8b2f52028e8764e49604b46dc3763f79015183f601e26346606e22c24e1833b2755afa285feb833d3ff3b910846a96e028070f925a6c640d9956c852367e89ca0dda26ad3c22f3c63f87c49f21e62363273579059ec88643943816a0a20caa0d97bb10aa5f1da882d422beefc5f59128636d851427783f1639d25af11d0bf7e8810f2304074f0710b82a1f8fea2f7da16b896783a468aa04e5524d9f118ae733501cfb913c3c2e327b7b5c87e250884667a9fcf29e27c9009c2173853b5ddafd7c6bfffbe1edaaecbf5134aff42876a192e34e32faa8605e1f5dc8553c3e43156126da540ba467be0b3bece1826a85a96232fd37a68bd9a381e96a74f857965477725c28aa908fc8367c7c4024059cd2454cdb0bd00213d70946b1751e133cff48809c6093c6fb00db7e477a86c857c81d39d49f1974d2191f52f737c0f9710a6eb8bf6b86161930b312123840cfc060abd7f69e36a6393036550321d09dc13e484794aa0de078f03d8396464feeb7fe8055b23638d7d780a394013039dd006484051211c862bbfa85e5cfbd77d2ced2f5ddb9229f183fcffd2c5d5bfac00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, 0x0, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x60a41, 0xb3836f6d7a15f29) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000001300)="92", 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 1.040067962s ago: executing program 5 (id=748): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, 0x0, 0x1) 1.039494457s ago: executing program 5 (id=749): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0xfffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r0], 0xb8, 0x4004000}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b7213948856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1", 0xa2}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd", 0x32}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x8, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x10001}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = fsopen(&(0x7f0000000280)='sysfs\x00', 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r6}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x18}], 0x1, 0x4040845) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001740)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b8, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x3e8, 0x3a8, 0x3a8, 0x3e8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'vlan1\x00', 'veth0_to_bond\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0xfffffffc, 0x1, 0x40df13b2}}}, @common=@unspec=@limit={{0x48}, {0x10400000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xe8, 0x158, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xffffffff, 0xffffffff, 0xffffffff, 0x1ff0001ff], 0x3, 0x2, {0x100000001}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x4, 0x5, 0x1, 0x1, 0x0, "ad1cca2e5f7ddba1d1c33db178bfe35ff1721f3257b82b98495cf177190d0b58aa9f19af7025831aa084a06f00bc03cf95db9345ef2f045d239b73be3b34ad34"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) 849.965932ms ago: executing program 5 (id=750): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1", 0xa2}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd", 0x32}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 9) 660.098965ms ago: executing program 5 (id=753): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1", 0xa2}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd", 0x32}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x3000000) 540.590585ms ago: executing program 4 (id=754): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0xc000) 540.329164ms ago: executing program 4 (id=755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x308, 0x308, 0x0, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@ip={@loopback, @loopback, 0xff000000, 0xff000000, 'batadv_slave_1\x00', 'team0\x00', {}, {}, 0x32, 0x1, 0x3}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x6, 0xffff], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x218, 0x240, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@private=0xa010101, [0xff000000, 0xff, 0xffffff00, 0xff], @ipv6=@mcast1, [0xffffffff, 0x0, 0x0, 0xffffffff], 0x4d5, 0x34ff, 0x3a, 0x0, 0x10, 0xa}, {@ipv4=@remote, [0xffffff00, 0xffffffff, 0xff000000, 0xff], @ipv4=@local, [0xff, 0x0, 0xff000000, 0xffffff00], 0x4d3, 0x3504, 0x88, 0x1, 0x0, 0x2}, {@ipv6=@mcast2, [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@local, [0x0, 0xffffffff, 0x0, 0xffffffff], 0x4d5, 0x3503, 0x2e, 0x1, 0x2, 0x1b}, {@ipv4=@local, [0x0, 0x0, 0xffffff00], @ipv4=@broadcast, [0xffffff00, 0xff000000, 0xffffff00, 0xffffffff], 0x4d5, 0x34ff, 0x88, 0x0, 0x0, 0x12}], 0xf}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2c77cedc38ef5c1f}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x800) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29, 0xffe4}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29, 0xffe4}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvfrom$inet6(r6, 0x0, 0x0, 0x100, 0x0, 0x0) (async) recvfrom$inet6(r6, 0x0, 0x0, 0x100, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000300)) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000300)) 447.416621ms ago: executing program 5 (id=757): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="859b1c1b54109e773bbb48d834a8d71e86b29150da1ae72142e0647f40e58989b97a857d8e1f57950d57ff83e32ef20ad1c7856dabe4f687579fad9d1f4719b6887b2495d73ac1202b072c5b2341c83ed818e4432545b90503be6e78ed9731d0a21b5a0bb94bc2be6ee76211722158087173d0ca175137e9fc45fb615a90b1678e7f43d79d4612fc30c7eaa96855c9d5", 0x90}], 0x1, &(0x7f0000000480)="12dbe7e0becf59c7f896e4b7528d9f47b670db938870a30e7d0cf964e73693447b09", 0x22, 0xc0}, 0x1) 447.204524ms ago: executing program 3 (id=758): keyctl$clear(0x5, 0xfffffffffffffffe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x4c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b, @broadcast}}}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}}, 0x800) 442.600143ms ago: executing program 5 (id=759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000240)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000980)={&(0x7f0000000480), &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000900)=[0x0], &(0x7f0000000480), 0x8, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x110) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000004c0)={&(0x7f0000000500), &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xeeeeeeee}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x200}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x6c, 0x0, 0x0, 0x4b}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x6, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x49b) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x30, r7, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "3be779733800294eee8ac3390ca814ed"}]}, 0x30}}, 0x22044804) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r7, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x64}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24018090}, 0xc895) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r14], 0x1, r12, r13, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1d, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f00000003c0)={0x0, 0x0, r14}) pipe2(&(0x7f0000000040), 0x80) 433.757992ms ago: executing program 3 (id=760): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (fail_nth: 7) 345.277103ms ago: executing program 3 (id=761): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) ppoll(&(0x7f00000014c0)=[{r0, 0x50b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@sr0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='gfs2\x00', 0x0, &(0x7f00000035c0)='quota') r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0xfffe, 0x400, @loopback, 0xff}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000200)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000740)=ANY=[], 0x18}}], 0x1, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000009c80)={0x0, 0x0, &(0x7f0000009c40)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x20040884) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r5, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xbf}], 0x1, 0x182, 0xffffffff) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x1004004, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES8=r3]) 345.10793ms ago: executing program 4 (id=762): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) write$eventfd(r2, &(0x7f0000000040)=0x8, 0x8) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, r2}) close(0x4) mount(&(0x7f0000000000)=@md0, &(0x7f0000000800)='./mnt\x00', &(0x7f0000000a00)='btrfs\x00', 0x0, 0x0) 270.60884ms ago: executing program 3 (id=763): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x1f00000000000000) 170.016908ms ago: executing program 4 (id=764): syz_open_dev$dri(0x0, 0xcaf8, 0x40000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x201}, 0x14}}, 0x4) syz_emit_ethernet(0x1e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20000000180c2000002fadc98630800000000000000000c00030000"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, 0x0, 0xffdd) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x106}, @hci_ev_le_ext_adv_report={{}, {0x3, [{0x4, 0x1, @any, 0x9, 0xf, 0xf9, 0x9, 0x3, 0x9, 0x6f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x54, "73f26c164f27af18e1f1625384c9a16e5065240c7635b92d4fb24b25540c5a5c09cdf9aed48884f459c8899017786728be99debfae382872e31e09820d926f89d42bc12dc810e54cbc3b0073bf89eb13a9588cd9"}, {0x10, 0x0, @any, 0x0, 0x3, 0xd6, 0x30, 0x6, 0x1, 0x80, @any, 0x68, "90ef3f5ad262bdd2d20a3e5aa7941e3d1b2c85c82ffaddda6f114ac1d3c2102b14f6ff1f83ef00cf30c182230f77d8c6e41e053b5c6596055d20c202bc77c91f9aca2343f79e7fdda4ef3dbb1845400cb8f9602aa4546109d45a25e77ddc735c45d2b21565af8adf"}, {0x10, 0x0, @any, 0x9, 0x4, 0x8, 0x80, 0x1, 0x2, 0x7, @none}]}}}}, 0x109) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x2000) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e0000000701000100000500deff"], 0xe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000180), &(0x7f0000000300)=@udp6=r2}, 0x20) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, r3, &(0x7f00000001c0)={0x20000004}, 0x3, 0x0, 0x1, {0x0, r7}}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r7) 60.436456ms ago: executing program 4 (id=765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES64=r1, @ANYRES16=r0, @ANYRES8=r0, @ANYRESDEC=r1], 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) 60.249021ms ago: executing program 4 (id=766): landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96", 0xe}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6", 0x6d}], 0x2, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x8, '\x00', @mcast2}}}}}}, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@md0, 0x0, &(0x7f00000001c0)={0x8e8, 0x9, 0x9, 0x0, 0x3, 0x2, 0x9, 0x6, 0x1c0a}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 305.376µs ago: executing program 3 (id=767): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="859b1c1b54109e773bbb48d834a8d71e86b29150da1ae72142e0647f40e58989b97a857d8e1f57950d57ff83e32ef20ad1c7856dabe4f687579fad9d1f4719b6887b2495d73ac1202b072c5b2341c83ed818e4432545b90503be6e78ed9731d0a21b5a0bb94bc2be6ee76211722158087173d0ca175137e9fc45fb615a90b1678e7f43d79d4612fc30c7eaa96855c9d5", 0x90}], 0x1, &(0x7f0000000480)="12dbe7e0becf59c7f896e4b7528d9f47b670db938870a30e7d0cf964e73693447b09", 0x22, 0xc0}, 0x1) 0s ago: executing program 3 (id=768): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) epoll_create1(0x80000) r1 = openat$cgroup_int(r0, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) syz_clone(0x400a200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\"\xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x5) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x46102, 0xc3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000600)={"27300c10ee5a5c48573ca75b41a2c107", 0x0, 0x0, {0x8, 0x10}, {0x3, 0x9197}, 0x10, [0x2535, 0x8000000000000000, 0x90000000000, 0x100, 0xfffffffffffffffd, 0x8000000000000001, 0x1ff, 0x80000001, 0xb69b, 0x6, 0x7, 0x0, 0xf73f, 0x100000001, 0x3, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000740)={"4587aac78c688cfcdfe4bbf8d615bdf7", r5, r6, {0x8, 0x5}, {0x5, 0x1}, 0x3, [0x1, 0x7, 0xff, 0x4, 0x5, 0x400, 0x7fffffff, 0x1, 0x4, 0x9, 0x5, 0x100, 0x3, 0x9, 0x45c, 0x6]}) connect$x25(r3, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) write$cgroup_int(r1, &(0x7f00000003c0)=0x1ff, 0x12) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x1ff) kernel console output (not intermixed with test programs): 7523] FAULT_INJECTION: forcing a failure. [ 98.490757][ T7523] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.495479][ T7523] CPU: 3 UID: 0 PID: 7523 Comm: syz.5.513 Not tainted syzkaller #0 PREEMPT(full) [ 98.495495][ T7523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.495502][ T7523] Call Trace: [ 98.495507][ T7523] [ 98.495512][ T7523] dump_stack_lvl+0x100/0x190 [ 98.495534][ T7523] should_fail_ex.cold+0x5/0xa [ 98.495547][ T7523] ? prepare_alloc_pages+0x16d/0x5f0 [ 98.495566][ T7523] should_fail_alloc_page+0xeb/0x140 [ 98.495583][ T7523] prepare_alloc_pages+0x1f0/0x5f0 [ 98.495601][ T7523] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 98.495619][ T7523] ? find_held_lock+0x2b/0x80 [ 98.495632][ T7523] ? unwind_next_frame+0x3be/0x2090 [ 98.495648][ T7523] ? unwind_next_frame+0x3be/0x2090 [ 98.495665][ T7523] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 98.495686][ T7523] ? __x64_sys_ioctl+0x18e/0x210 [ 98.495715][ T7523] ? unwind_next_frame+0x3be/0x2090 [ 98.495728][ T7523] ? do_syscall_64+0x115/0x870 [ 98.495742][ T7523] ? __kernel_text_address+0xd/0x30 [ 98.495756][ T7523] ? unwind_get_return_address+0x59/0xa0 [ 98.495768][ T7523] ? arch_stack_walk+0x88/0xf0 [ 98.495794][ T7523] ? __lock_acquire+0x49f/0x1a40 [ 98.495809][ T7523] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.495826][ T7523] ? policy_nodemask+0xed/0x4f0 [ 98.495843][ T7523] alloc_pages_mpol+0x1fb/0x540 [ 98.495860][ T7523] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 98.495879][ T7523] folio_alloc_mpol_noprof+0x36/0x260 [ 98.495898][ T7523] vma_alloc_folio_noprof+0xed/0x1d0 [ 98.495916][ T7523] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 98.495938][ T7523] do_anonymous_page+0xb2b/0x2080 [ 98.495958][ T7523] ? rcu_read_unlock+0x2d/0xb0 [ 98.495974][ T7523] __handle_mm_fault+0x1d2c/0x2a00 [ 98.495987][ T7523] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 98.496005][ T7523] ? __pfx___handle_mm_fault+0x10/0x10 [ 98.496017][ T7523] ? pte_offset_map_lock+0x174/0x320 [ 98.496032][ T7523] ? find_held_lock+0x2b/0x80 [ 98.496047][ T7523] ? follow_page_pte+0x4d0/0x13f0 [ 98.496065][ T7523] handle_mm_fault+0x37b/0xa30 [ 98.496078][ T7523] __get_user_pages+0x1178/0x32a0 [ 98.496098][ T7523] ? down_read_killable+0x35e/0x520 [ 98.496115][ T7523] ? __pfx___get_user_pages+0x10/0x10 [ 98.496131][ T7523] ? __pfx_gup_fast_fallback+0x10/0x10 [ 98.496146][ T7523] ? __lock_acquire+0x49f/0x1a40 [ 98.496162][ T7523] get_user_pages_unlocked+0x1cb/0x7d0 [ 98.496180][ T7523] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 98.496196][ T7523] ? get_user_pages_fast_only+0xae/0xf0 [ 98.496212][ T7523] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 98.496228][ T7523] ? __pfx___might_resched+0x10/0x10 [ 98.496242][ T7523] ? bpf_ksym_find+0x128/0x1c0 [ 98.496262][ T7523] hva_to_pfn+0x871/0xd60 [ 98.496281][ T7523] ? trace_kvm_tdp_mmu_spte_changed+0x83/0x240 [ 98.496293][ T7523] ? __lock_acquire+0x49f/0x1a40 [ 98.496307][ T7523] ? __pfx_hva_to_pfn+0x10/0x10 [ 98.496323][ T7523] ? __lock_acquire+0x49f/0x1a40 [ 98.496345][ T7523] kvm_follow_pfn+0x291/0x430 [ 98.496361][ T7523] __kvm_faultin_pfn+0x11c/0x1a0 [ 98.496377][ T7523] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 98.496392][ T7523] ? __pfx_xa_load+0x10/0x10 [ 98.496412][ T7523] ? kvm_tdp_mmu_map+0xb07/0x2160 [ 98.496428][ T7523] kvm_mmu_faultin_pfn+0xb73/0x2240 [ 98.496443][ T7523] ? __pfx_fast_page_fault+0x10/0x10 [ 98.496453][ T7523] ? __lock_acquire+0x49f/0x1a40 [ 98.496470][ T7523] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 98.496487][ T7523] ? __kvm_mmu_topup_memory_cache+0x332/0x5f0 [ 98.496505][ T7523] ? kvm_tdp_page_fault+0x295/0x3d0 [ 98.496527][ T7523] kvm_tdp_page_fault+0x182/0x3d0 [ 98.496547][ T7523] kvm_mmu_do_page_fault+0x5a4/0x6c0 [ 98.496562][ T7523] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 98.496584][ T7523] kvm_mmu_page_fault+0x1dd/0x1ab0 [ 98.496606][ T7523] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 98.496621][ T7523] ? irqentry_exit+0x24d/0xa00 [ 98.496651][ T7523] handle_ept_violation+0x3a3/0x860 [ 98.496680][ T7523] ? __pfx_handle_ept_violation+0x10/0x10 [ 98.496706][ T7523] vmx_handle_exit+0x4d6/0x1ef0 [ 98.496730][ T7523] vcpu_run+0x35ab/0x5de0 [ 98.496765][ T7523] ? __pfx_vcpu_run+0x10/0x10 [ 98.496814][ T7523] ? rcu_is_watching+0x12/0xc0 [ 98.496835][ T7523] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 98.496852][ T7523] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 98.496880][ T7523] kvm_vcpu_ioctl+0x730/0x1700 [ 98.496899][ T7523] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 98.496917][ T7523] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.496938][ T7523] ? do_vfs_ioctl+0x226/0x13e0 [ 98.496962][ T7523] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 98.496986][ T7523] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 98.497013][ T7523] ? __fget_files+0x215/0x3d0 [ 98.497026][ T7523] ? hook_file_ioctl_common+0x140/0x440 [ 98.497043][ T7523] ? selinux_file_ioctl+0x13b/0x290 [ 98.497066][ T7523] ? selinux_file_ioctl+0xb6/0x290 [ 98.497092][ T7523] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 98.497111][ T7523] __x64_sys_ioctl+0x18e/0x210 [ 98.497133][ T7523] do_syscall_64+0x115/0x870 [ 98.497148][ T7523] ? clear_bhb_loop+0x70/0xc0 [ 98.497168][ T7523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.497184][ T7523] RIP: 0033:0x7f4f4cb9e0d9 [ 98.497200][ T7523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.497215][ T7523] RSP: 002b:00007f4f4dac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.497233][ T7523] RAX: ffffffffffffffda RBX: 00007f4f4ce25fa0 RCX: 00007f4f4cb9e0d9 [ 98.497240][ T7523] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 98.497247][ T7523] RBP: 00007f4f4dac3090 R08: 0000000000000000 R09: 0000000000000000 [ 98.497253][ T7523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.497259][ T7523] R13: 00007f4f4ce26038 R14: 00007f4f4ce25fa0 R15: 00007ffc0aa0e6a8 [ 98.497274][ T7523] [ 98.715097][ T42] kauditd_printk_skb: 314 callbacks suppressed [ 98.715113][ T42] audit: type=1400 audit(1786294899.416:2991): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 98.743546][ T42] audit: type=1400 audit(1786294899.436:2992): avc: denied { create } for pid=7526 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.748756][ T7529] fuse: Bad value for 'fd' [ 98.750084][ T7527] sctp: [Deprecated]: syz.4.514 (pid 7527) Use of int in maxseg socket option. [ 98.750084][ T7527] Use struct sctp_assoc_value instead [ 98.751294][ T42] audit: type=1400 audit(1786294899.446:2993): avc: denied { getopt } for pid=7526 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.757652][ T7527] process 'syz.4.514' launched '/dev/fd/11' with NULL argv: empty string added [ 98.758762][ T42] audit: type=1400 audit(1786294899.446:2994): avc: denied { mount } for pid=7526 comm="syz.4.514" name="/" dev="rpc_pipefs" ino=25769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 98.765250][ T24] IPVS: starting estimator thread 0... [ 98.772015][ T7527] IPVS: sh: FWM 3 0x00000003 - no destination available [ 98.784438][ T42] audit: type=1400 audit(1786294899.456:2995): avc: denied { write } for pid=7528 comm="syz.1.515" name="nbd1" dev="devtmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.796503][ T42] audit: type=1400 audit(1786294899.456:2997): avc: denied { create } for pid=7526 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.806429][ T42] audit: type=1400 audit(1786294899.456:2996): avc: denied { open } for pid=7528 comm="syz.1.515" path="/dev/nbd1" dev="devtmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.813031][ T7532] nbd: socks must be embedded in a SOCK_ITEM attr [ 98.820441][ T42] audit: type=1400 audit(1786294899.456:2998): avc: denied { execute } for pid=7526 comm="syz.4.514" dev="tmpfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.830193][ T42] audit: type=1400 audit(1786294899.456:2999): avc: denied { ioctl } for pid=7528 comm="syz.1.515" path="/dev/nbd1" dev="devtmpfs" ino=689 ioctlcmd=0xab02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.840763][ T42] audit: type=1400 audit(1786294899.466:3000): avc: denied { execute_no_trans } for pid=7526 comm="syz.4.514" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.846558][ T7536] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 98.872048][ T7532] netlink: 36 bytes leftover after parsing attributes in process `syz.3.516'. [ 98.894732][ T7530] IPVS: using max 43 ests per chain, 103200 per kthread [ 98.928644][ T7541] FAULT_INJECTION: forcing a failure. [ 98.928644][ T7541] name failslab, interval 1, probability 0, space 0, times 0 [ 98.934533][ T7541] CPU: 0 UID: 0 PID: 7541 Comm: syz.4.520 Not tainted syzkaller #0 PREEMPT(full) [ 98.934558][ T7541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.934568][ T7541] Call Trace: [ 98.934574][ T7541] [ 98.934581][ T7541] dump_stack_lvl+0x100/0x190 [ 98.934612][ T7541] should_fail_ex.cold+0x5/0xa [ 98.934654][ T7541] should_failslab+0xc2/0x120 [ 98.934679][ T7541] __kmalloc_noprof+0xfc/0x820 [ 98.934702][ T7541] ? lsm_blob_alloc+0x68/0x90 [ 98.934727][ T7541] lsm_blob_alloc+0x68/0x90 [ 98.934747][ T7541] security_task_alloc+0x2a/0x260 [ 98.934766][ T7541] copy_process+0x2b94/0x8030 [ 98.934807][ T7541] ? __pfx_copy_process+0x10/0x10 [ 98.934847][ T7541] ? __kasan_kmalloc+0xaa/0xb0 [ 98.934870][ T7541] ? lockdep_init_map_type+0x5c/0x250 [ 98.934901][ T7541] ? lockdep_init_map_type+0x5c/0x250 [ 98.934923][ T7541] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 98.934946][ T7541] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 98.934966][ T7541] vhost_task_create+0x1db/0x370 [ 98.934989][ T7541] ? __pfx_vhost_task_create+0x10/0x10 [ 98.935017][ T7541] ? __pfx_vhost_task_fn+0x10/0x10 [ 98.935042][ T7541] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 98.935072][ T7541] kvm_mmu_post_init_vm+0x1b3/0x360 [ 98.935101][ T7541] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 98.935126][ T7541] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 98.935151][ T7541] kvm_vcpu_ioctl+0x730/0x1700 [ 98.935172][ T7541] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 98.935193][ T7541] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.935216][ T7541] ? do_vfs_ioctl+0x226/0x13e0 [ 98.935244][ T7541] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 98.935269][ T7541] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 98.935306][ T7541] ? __fget_files+0x215/0x3d0 [ 98.935323][ T7541] ? hook_file_ioctl_common+0x140/0x440 [ 98.935347][ T7541] ? selinux_file_ioctl+0x13b/0x290 [ 98.935369][ T7541] ? selinux_file_ioctl+0xb6/0x290 [ 98.935393][ T7541] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 98.935414][ T7541] __x64_sys_ioctl+0x18e/0x210 [ 98.935441][ T7541] do_syscall_64+0x115/0x870 [ 98.935463][ T7541] ? clear_bhb_loop+0x70/0xc0 [ 98.935483][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.935502][ T7541] RIP: 0033:0x7f8f7239e0d9 [ 98.935518][ T7541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.935535][ T7541] RSP: 002b:00007f8f7326c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.935552][ T7541] RAX: ffffffffffffffda RBX: 00007f8f72625fa0 RCX: 00007f8f7239e0d9 [ 98.935562][ T7541] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 98.935572][ T7541] RBP: 00007f8f7326c090 R08: 0000000000000000 R09: 0000000000000000 [ 98.935582][ T7541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.935592][ T7541] R13: 00007f8f72626038 R14: 00007f8f72625fa0 R15: 00007ffc55a76128 [ 98.935617][ T7541] [ 99.074152][ T7532] binder: 7531:7532 ioctl c0306201 200000000080 returned -14 [ 99.079067][ T7532] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 99.082070][ T7532] SELinux: failed to load policy [ 99.252428][ T7557] openvswitch: netlink: Actions may not be safe on all matching packets [ 99.262422][ T7555] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 99.343892][ T7565] fuse: Bad value for 'fd' [ 99.653859][ T7590] ip_tables: iptables: counters copy to user failed while replacing table [ 99.666952][ T7590] xt_time: unknown flags 0x78 [ 99.722683][ T7595] fuse: Bad value for 'fd' [ 99.786127][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 99.831181][ T7598] syz.3.537 (7598) used greatest stack depth: 19120 bytes left [ 100.195518][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 100.304401][ T7625] netlink: 'syz.3.545': attribute type 3 has an invalid length. [ 100.344747][ T7627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65381 sclass=netlink_route_socket pid=7627 comm=syz.3.546 [ 100.351064][ T7627] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.365627][ T9] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 100.370611][ T9] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 100.376622][ T9] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 100.383465][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.392946][ T7629] syzkaller0: entered promiscuous mode [ 100.394731][ T9] usb 10-1: Product: syz [ 100.394989][ T7629] syzkaller0: entered allmulticast mode [ 100.396709][ T9] usb 10-1: Manufacturer: syz [ 100.400337][ T9] usb 10-1: SerialNumber: syz [ 100.411585][ T9] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 100.422041][ T9] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 100.427115][ T9] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 100.527255][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 100.530123][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'. [ 100.601276][ T7642] FAULT_INJECTION: forcing a failure. [ 100.601276][ T7642] name failslab, interval 1, probability 0, space 0, times 0 [ 100.606805][ T7642] CPU: 1 UID: 0 PID: 7642 Comm: syz.3.552 Not tainted syzkaller #0 PREEMPT(full) [ 100.606830][ T7642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.606841][ T7642] Call Trace: [ 100.606868][ T7642] [ 100.606875][ T7642] dump_stack_lvl+0x100/0x190 [ 100.606973][ T7642] should_fail_ex.cold+0x5/0xa [ 100.607016][ T7642] should_failslab+0xc2/0x120 [ 100.607058][ T7642] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.607081][ T7642] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 100.607119][ T7642] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 100.607147][ T7642] mmu_topup_memory_caches+0x25/0x170 [ 100.607176][ T7642] kvm_mmu_load+0xe2/0x2570 [ 100.607200][ T7642] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 100.607220][ T7642] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 100.607242][ T7642] ? __pfx_kvm_mmu_load+0x10/0x10 [ 100.607265][ T7642] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 100.607287][ T7642] ? kvm_check_and_inject_events+0x873/0x12a0 [ 100.607312][ T7642] ? record_steal_time+0x3a0/0xbb0 [ 100.607333][ T7642] vcpu_run+0x3aaa/0x5de0 [ 100.607357][ T7642] ? mark_held_locks+0x40/0x70 [ 100.607398][ T7642] ? __pfx_vcpu_run+0x10/0x10 [ 100.607428][ T7642] ? rcu_is_watching+0x12/0xc0 [ 100.607457][ T7642] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 100.607481][ T7642] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 100.607528][ T7642] kvm_vcpu_ioctl+0x730/0x1700 [ 100.607551][ T7642] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 100.607571][ T7642] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.607596][ T7642] ? do_vfs_ioctl+0x226/0x13e0 [ 100.607625][ T7642] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 100.607650][ T7642] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 100.607714][ T7642] ? __fget_files+0x215/0x3d0 [ 100.607733][ T7642] ? hook_file_ioctl_common+0x140/0x440 [ 100.607760][ T7642] ? selinux_file_ioctl+0x13b/0x290 [ 100.607786][ T7642] ? selinux_file_ioctl+0xb6/0x290 [ 100.607814][ T7642] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 100.607835][ T7642] __x64_sys_ioctl+0x18e/0x210 [ 100.607863][ T7642] do_syscall_64+0x115/0x870 [ 100.607891][ T7642] ? clear_bhb_loop+0x70/0xc0 [ 100.607915][ T7642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.607933][ T7642] RIP: 0033:0x7fa6d1f9e0d9 [ 100.607954][ T7642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.607971][ T7642] RSP: 002b:00007fa6d2df5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.607998][ T7642] RAX: ffffffffffffffda RBX: 00007fa6d2225fa0 RCX: 00007fa6d1f9e0d9 [ 100.608010][ T7642] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 100.608020][ T7642] RBP: 00007fa6d2df5090 R08: 0000000000000000 R09: 0000000000000000 [ 100.608030][ T7642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.608040][ T7642] R13: 00007fa6d2226038 R14: 00007fa6d2225fa0 R15: 00007ffc44a75f48 [ 100.608065][ T7642] [ 100.613255][ T7645] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.666980][ T7647] batman_adv: batadv0: Adding interface: veth0 [ 100.720071][ T7647] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.728265][ T7647] batman_adv: batadv0: Interface activated: veth0 [ 100.731384][ T7645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.733772][ T7645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.738550][ T7645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.745226][ T7645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.749599][ T7645] batman_adv: batadv0: Interface deactivated: veth0 [ 100.751721][ T7645] batman_adv: batadv0: Removing interface: veth0 [ 100.902072][ T7659] FAULT_INJECTION: forcing a failure. [ 100.902072][ T7659] name failslab, interval 1, probability 0, space 0, times 0 [ 100.907365][ T7659] CPU: 2 UID: 0 PID: 7659 Comm: syz.3.557 Not tainted syzkaller #0 PREEMPT(full) [ 100.907388][ T7659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.907397][ T7659] Call Trace: [ 100.907404][ T7659] [ 100.907411][ T7659] dump_stack_lvl+0x100/0x190 [ 100.907439][ T7659] should_fail_ex.cold+0x5/0xa [ 100.907461][ T7659] should_failslab+0xc2/0x120 [ 100.907483][ T7659] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.907518][ T7659] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 100.907542][ T7659] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 100.907569][ T7659] mmu_topup_memory_caches+0x25/0x170 [ 100.907594][ T7659] kvm_mmu_load+0xe2/0x2570 [ 100.907616][ T7659] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 100.907633][ T7659] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 100.907653][ T7659] ? __pfx_kvm_mmu_load+0x10/0x10 [ 100.907674][ T7659] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 100.907694][ T7659] ? kvm_check_and_inject_events+0x873/0x12a0 [ 100.907717][ T7659] ? record_steal_time+0x3a0/0xbb0 [ 100.907743][ T7659] vcpu_run+0x3aaa/0x5de0 [ 100.907775][ T7659] ? __pfx_vcpu_run+0x10/0x10 [ 100.907806][ T7659] ? rcu_is_watching+0x12/0xc0 [ 100.907835][ T7659] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 100.907857][ T7659] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 100.907887][ T7659] kvm_vcpu_ioctl+0x730/0x1700 [ 100.907907][ T7659] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 100.907924][ T7659] ? do_vfs_ioctl+0xca/0x13e0 [ 100.907948][ T7659] ? do_vfs_ioctl+0x9ee/0x13e0 [ 100.907971][ T7659] ? do_vfs_ioctl+0x226/0x13e0 [ 100.907994][ T7659] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 100.908017][ T7659] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 100.908051][ T7659] ? __fget_files+0x215/0x3d0 [ 100.908068][ T7659] ? hook_file_ioctl_common+0x140/0x440 [ 100.908093][ T7659] ? selinux_file_ioctl+0x13b/0x290 [ 100.908116][ T7659] ? selinux_file_ioctl+0xb6/0x290 [ 100.908140][ T7659] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 100.908160][ T7659] __x64_sys_ioctl+0x18e/0x210 [ 100.908185][ T7659] do_syscall_64+0x115/0x870 [ 100.908206][ T7659] ? clear_bhb_loop+0x70/0xc0 [ 100.908225][ T7659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.908242][ T7659] RIP: 0033:0x7fa6d1f9e0d9 [ 100.908258][ T7659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.908272][ T7659] RSP: 002b:00007fa6d2df5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.908290][ T7659] RAX: ffffffffffffffda RBX: 00007fa6d2225fa0 RCX: 00007fa6d1f9e0d9 [ 100.908300][ T7659] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 100.908309][ T7659] RBP: 00007fa6d2df5090 R08: 0000000000000000 R09: 0000000000000000 [ 100.908318][ T7659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.908327][ T7659] R13: 00007fa6d2226038 R14: 00007fa6d2225fa0 R15: 00007ffc44a75f48 [ 100.908349][ T7659] [ 101.159317][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 101.466914][ T7689] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.568'. [ 102.544910][ T7608] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 102.555736][ T40] usb 10-1: USB disconnect, device number 4 [ 102.564834][ T40] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 102.571549][ T40] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 102.576405][ T40] ti_usb_3410_5052 10-1:2.0: device disconnected [ 104.499629][ T42] kauditd_printk_skb: 121 callbacks suppressed [ 104.499642][ T42] audit: type=1400 audit(1786294905.196:3122): avc: denied { create } for pid=7699 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.507482][ T42] audit: type=1400 audit(1786294905.196:3123): avc: denied { prog_load } for pid=7695 comm="syz.5.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 104.513060][ T42] audit: type=1400 audit(1786294905.196:3124): avc: denied { bpf } for pid=7695 comm="syz.5.570" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.519552][ T42] audit: type=1400 audit(1786294905.196:3125): avc: denied { perfmon } for pid=7695 comm="syz.5.570" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.526159][ T42] audit: type=1400 audit(1786294905.206:3126): avc: denied { prog_run } for pid=7699 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 104.545893][ T42] audit: type=1400 audit(1786294905.246:3127): avc: denied { module_request } for pid=7703 comm="syz.3.575" kmod="net-pf-10-proto-8-type-2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 104.562090][ T42] audit: type=1400 audit(1786294905.256:3128): avc: denied { mount } for pid=7702 comm="syz.5.574" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 104.595938][ T42] audit: type=1400 audit(1786294905.296:3129): avc: denied { ioctl } for pid=7693 comm="syz.1.571" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.697762][ T42] audit: type=1400 audit(1786294905.396:3130): avc: denied { create } for pid=7709 comm="syz.5.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.698430][ T7710] netlink: 'syz.5.576': attribute type 1 has an invalid length. [ 104.706408][ T42] audit: type=1400 audit(1786294905.396:3131): avc: denied { write } for pid=7709 comm="syz.5.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.713544][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.576'. [ 104.734827][ T40] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 104.735081][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 104.793028][ T7718] binder: 7715:7718 ioctl c0306201 200000000080 returned -14 [ 104.799204][ T7718] binder: 7715:7718 ioctl c058565d 200000000480 returned -22 [ 104.803482][ T7718] binder: 7715:7718 ioctl c0306201 2000000003c0 returned -14 [ 104.885912][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 104.890737][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 104.893977][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 104.894755][ T40] usb 9-1: Using ep0 maxpacket: 32 [ 104.901842][ T40] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 104.902461][ T9] usb 6-1: string descriptor 0 read error: -22 [ 104.907116][ T40] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 104.908161][ T9] usb 6-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 104.911501][ T40] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 104.918020][ T40] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 104.921612][ T40] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.925565][ T40] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.926702][ T9] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 104.928821][ T40] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 104.928851][ T40] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.932223][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 104.941948][ T40] usb 9-1: config 0 descriptor?? [ 104.943107][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 104.947958][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.952499][ T9] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 104.956177][ T9] usb 6-1: media controller created [ 104.958361][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 104.960699][ T9] dw2102: i2c transfer failed. [ 104.962657][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 104.965349][ T9] dw2102: i2c transfer failed. [ 104.967315][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 104.969615][ T9] dw2102: i2c transfer failed. [ 104.971577][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 104.974266][ T9] dw2102: i2c transfer failed. [ 104.976544][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 104.979746][ T9] dw2102: i2c transfer failed. [ 104.981786][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 104.984082][ T9] dw2102: i2c transfer failed. [ 104.986262][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 104.998375][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.014029][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 105.016031][ T9] dw2102: command 0x0e transfer failed. [ 105.017846][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 105.019854][ T9] dw2102: command 0x0e transfer failed. [ 105.084780][ T848] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 105.161158][ T40] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 105.169534][ T40] usb 9-1: USB disconnect, device number 5 [ 105.176723][ T40] usblp0: removed [ 105.236065][ T848] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 105.240933][ T848] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.245269][ T848] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 105.249255][ T848] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.256280][ T848] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 105.259699][ T848] usb 10-1: Product: syz [ 105.261506][ T848] usb 10-1: Manufacturer: syz [ 105.267234][ T7720] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 105.272713][ T848] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected [ 105.281316][ T848] usb 10-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 105.325476][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 105.328013][ T9] dw2102: command 0x0e transfer failed. [ 105.330387][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 105.332760][ T9] dw2102: command 0x0e transfer failed. [ 105.335077][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 105.337421][ T9] dw2102: command 0x51 transfer failed. [ 105.339732][ T7696] dvb-usb: bulk message failed: -22 (5/0) [ 105.341674][ T7696] dw2102: i2c transfer failed. [ 105.358363][ T9] DVB: Unable to find symbol ds3000_attach() [ 105.360891][ T9] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 105.414740][ T9] rc_core: IR keymap rc-su3000 not found [ 105.416581][ T9] Registered IR keymap rc-empty [ 105.418734][ T9] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 105.423730][ T9] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input12 [ 105.430008][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 105.432321][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 105.434235][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 105.450539][ T9] usb 6-1: USB disconnect, device number 16 [ 105.470586][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 105.485633][ T5819] usb 10-1: USB disconnect, device number 5 [ 105.490852][ T5819] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 105.494123][ T5819] garmin_gps 10-1:1.0: device disconnected [ 105.604713][ T848] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 105.754704][ T848] usb 9-1: Using ep0 maxpacket: 32 [ 105.756852][ T848] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 105.760631][ T848] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 105.769507][ T848] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 105.772557][ T848] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 105.775710][ T848] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.778813][ T848] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.781791][ T848] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 105.786312][ T848] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.796005][ T848] usb 9-1: config 0 descriptor?? [ 106.001658][ T848] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 106.034280][ T7742] netlink: Invalid conntrack timeout [ 106.036712][ T7742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.092195][ T7746] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 106.101391][ T7746] CIFS: Attempting to mount //127.0.0.1/share,ser=rojvK~ot [ 106.116351][ T7748] netlink: 76 bytes leftover after parsing attributes in process `syz.5.586'. [ 106.147318][ T7751] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 106.161487][ T7746] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 106.166411][ T7746] CIFS: VFS: cifs_mount failed w/return code = -11 [ 106.203746][ C3] usblp0: nonzero read bulk status received: -71 [ 106.206300][ T848] usb 9-1: USB disconnect, device number 6 [ 106.412079][ T7698] usblp0: removed [ 106.416790][ T7698] binder: 7694:7698 ioctl 80205871 200000000040 returned -22 [ 106.836027][ T7772] netlink: 'syz.3.594': attribute type 12 has an invalid length. [ 107.019720][ T7774] FAULT_INJECTION: forcing a failure. [ 107.019720][ T7774] name failslab, interval 1, probability 0, space 0, times 0 [ 107.024991][ T7774] CPU: 3 UID: 0 PID: 7774 Comm: syz.4.595 Not tainted syzkaller #0 PREEMPT(full) [ 107.025007][ T7774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.025014][ T7774] Call Trace: [ 107.025040][ T7774] [ 107.025045][ T7774] dump_stack_lvl+0x100/0x190 [ 107.025118][ T7774] should_fail_ex.cold+0x5/0xa [ 107.025139][ T7774] ? __lock_acquire+0x49f/0x1a40 [ 107.025166][ T7774] should_failslab+0xc2/0x120 [ 107.025189][ T7774] __kmalloc_noprof+0xfc/0x820 [ 107.025202][ T7774] ? __kernel_text_address+0xd/0x30 [ 107.025217][ T7774] ? virtqueue_add_split+0x25c/0x1d30 [ 107.025253][ T7774] virtqueue_add_split+0x25c/0x1d30 [ 107.025272][ T7774] ? __pfx_virtqueue_add_split+0x10/0x10 [ 107.025290][ T7774] virtqueue_add_sgs+0x207/0x2b0 [ 107.025312][ T7774] virtio_gpu_queue_fenced_ctrl_buffer+0x5c1/0xfb0 [ 107.025340][ T7774] ? __pfx_virtio_gpu_queue_fenced_ctrl_buffer+0x10/0x10 [ 107.025357][ T7774] ? rcu_is_watching+0x12/0xc0 [ 107.025377][ T7774] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 107.025391][ T7774] ? rcu_is_watching+0x12/0xc0 [ 107.025408][ T7774] ? virtio_gpu_cmd_transfer_to_host_2d+0x273/0x6e0 [ 107.025424][ T7774] ? virtio_gpu_cmd_transfer_to_host_2d+0x362/0x6e0 [ 107.025439][ T7774] virtio_gpu_primary_plane_update+0xd95/0x12f0 [ 107.025459][ T7774] ? __pfx_virtio_gpu_primary_plane_update+0x10/0x10 [ 107.025476][ T7774] ? drm_calc_timestamping_constants+0x44a/0x6d0 [ 107.025499][ T7774] drm_atomic_helper_commit_planes+0x497/0xf10 [ 107.025518][ T7774] drm_atomic_helper_commit_tail+0x7f/0x130 [ 107.025533][ T7774] commit_tail+0x338/0x430 [ 107.025550][ T7774] drm_atomic_helper_commit+0x303/0x380 [ 107.025564][ T7774] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 107.025600][ T7774] drm_atomic_commit+0x230/0x300 [ 107.025615][ T7774] ? __pfx_drm_atomic_commit+0x10/0x10 [ 107.025627][ T7774] ? __pfx___drm_printfn_info+0x10/0x10 [ 107.025644][ T7774] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 107.025663][ T7774] ? drm_event_reserve_init+0x1fa/0x280 [ 107.025679][ T7774] drm_mode_atomic_ioctl+0x1b9c/0x2680 [ 107.025701][ T7774] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 107.025716][ T7774] ? __lock_acquire+0x49f/0x1a40 [ 107.025737][ T7774] ? drm_is_current_master+0x2c/0x40 [ 107.025751][ T7774] ? drm_is_current_master+0x2c/0x40 [ 107.025766][ T7774] ? do_raw_spin_unlock+0x145/0x1e0 [ 107.025784][ T7774] drm_ioctl_kernel+0x1f3/0x3e0 [ 107.025797][ T7774] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 107.025812][ T7774] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 107.025829][ T7774] drm_ioctl+0x5e6/0xc60 [ 107.025844][ T7774] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 107.025859][ T7774] ? __pfx_drm_ioctl+0x10/0x10 [ 107.025877][ T7774] ? selinux_file_ioctl+0x13b/0x290 [ 107.025911][ T7774] ? selinux_file_ioctl+0xb6/0x290 [ 107.025930][ T7774] ? __pfx_drm_ioctl+0x10/0x10 [ 107.025943][ T7774] __x64_sys_ioctl+0x18e/0x210 [ 107.025963][ T7774] do_syscall_64+0x115/0x870 [ 107.025978][ T7774] ? clear_bhb_loop+0x70/0xc0 [ 107.025992][ T7774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.026004][ T7774] RIP: 0033:0x7f8f7239e0d9 [ 107.026014][ T7774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.026026][ T7774] RSP: 002b:00007f8f7326c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.026038][ T7774] RAX: ffffffffffffffda RBX: 00007f8f72625fa0 RCX: 00007f8f7239e0d9 [ 107.026045][ T7774] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000009 [ 107.026052][ T7774] RBP: 00007f8f7326c090 R08: 0000000000000000 R09: 0000000000000000 [ 107.026059][ T7774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.026065][ T7774] R13: 00007f8f72626038 R14: 00007f8f72625fa0 R15: 00007ffc55a76128 [ 107.026080][ T7774] [ 107.191954][ T7788] FAULT_INJECTION: forcing a failure. [ 107.191954][ T7788] name failslab, interval 1, probability 0, space 0, times 0 [ 107.196503][ T7788] CPU: 1 UID: 0 PID: 7788 Comm: syz.3.600 Not tainted syzkaller #0 PREEMPT(full) [ 107.196525][ T7788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.196534][ T7788] Call Trace: [ 107.196540][ T7788] [ 107.196546][ T7788] dump_stack_lvl+0x100/0x190 [ 107.196576][ T7788] should_fail_ex.cold+0x5/0xa [ 107.196598][ T7788] should_failslab+0xc2/0x120 [ 107.196620][ T7788] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 107.196645][ T7788] ? sidtab_sid2str_get+0x17a/0x670 [ 107.196668][ T7788] kmemdup_noprof+0x29/0x60 [ 107.196688][ T7788] sidtab_sid2str_get+0x17a/0x670 [ 107.196708][ T7788] security_sid_to_context_core+0x35a/0x6d0 [ 107.196734][ T7788] ? avc_audit_post_callback+0x115/0x910 [ 107.196753][ T7788] avc_audit_post_callback+0x1aa/0x910 [ 107.196772][ T7788] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 107.196787][ T7788] ? skb_put+0x138/0x180 [ 107.196810][ T7788] ? audit_log_n_string+0x2a3/0x5a0 [ 107.196837][ T7788] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 107.196856][ T7788] common_lsm_audit+0x23f/0x2b0 [ 107.196883][ T7788] ? __pfx_common_lsm_audit+0x10/0x10 [ 107.196909][ T7788] ? lockdep_hardirqs_on+0x78/0x100 [ 107.196931][ T7788] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 107.196955][ T7788] slow_avc_audit+0x186/0x210 [ 107.196976][ T7788] ? __pfx_slow_avc_audit+0x10/0x10 [ 107.196997][ T7788] ? avc_denied+0x14a/0x190 [ 107.197015][ T7788] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 107.197036][ T7788] avc_has_perm+0x1a6/0x1e0 [ 107.197055][ T7788] ? __pfx_avc_has_perm+0x10/0x10 [ 107.197071][ T7788] ? bpf_ksym_find+0x128/0x1c0 [ 107.197096][ T7788] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 107.197115][ T7788] ? is_bpf_text_address+0x94/0x1a0 [ 107.197137][ T7788] ? kernel_text_address+0x8d/0x100 [ 107.197161][ T7788] sock_has_perm+0x253/0x2f0 [ 107.197186][ T7788] ? __pfx_sock_has_perm+0x10/0x10 [ 107.197234][ T7788] selinux_socket_sendmsg+0x8f/0x2f0 [ 107.197261][ T7788] security_socket_sendmsg+0xfb/0x230 [ 107.197310][ T7788] ____sys_sendmsg+0x89e/0xbe0 [ 107.197338][ T7788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.197365][ T7788] ___sys_sendmsg+0x190/0x1e0 [ 107.197378][ T7788] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.197389][ T7788] ? __lock_acquire+0x49f/0x1a40 [ 107.197404][ T7788] ? get_pid_task+0x106/0x250 [ 107.197431][ T7788] __sys_sendmsg+0x160/0x210 [ 107.197448][ T7788] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.197471][ T7788] do_syscall_64+0x115/0x870 [ 107.197487][ T7788] ? clear_bhb_loop+0x70/0xc0 [ 107.197502][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.197514][ T7788] RIP: 0033:0x7fa6d1f9e0d9 [ 107.197526][ T7788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.197538][ T7788] RSP: 002b:00007fa6d2df5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.197551][ T7788] RAX: ffffffffffffffda RBX: 00007fa6d2225fa0 RCX: 00007fa6d1f9e0d9 [ 107.197558][ T7788] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 107.197565][ T7788] RBP: 00007fa6d2df5090 R08: 0000000000000000 R09: 0000000000000000 [ 107.197572][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.197603][ T7788] R13: 00007fa6d2226038 R14: 00007fa6d2225fa0 R15: 00007ffc44a75f48 [ 107.197619][ T7788] [ 107.262311][ T7791] FAULT_INJECTION: forcing a failure. [ 107.262311][ T7791] name failslab, interval 1, probability 0, space 0, times 0 [ 107.272533][ T7793] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 107.273263][ T7791] CPU: 2 UID: 0 PID: 7791 Comm: syz.4.599 Not tainted syzkaller #0 PREEMPT(full) [ 107.273285][ T7791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.273295][ T7791] Call Trace: [ 107.273302][ T7791] [ 107.273309][ T7791] dump_stack_lvl+0x100/0x190 [ 107.273356][ T7791] should_fail_ex.cold+0x5/0xa [ 107.273377][ T7791] should_failslab+0xc2/0x120 [ 107.273405][ T7791] __kvmalloc_node_noprof+0x116/0x970 [ 107.273424][ T7791] ? __lock_acquire+0x49f/0x1a40 [ 107.273446][ T7791] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 107.273483][ T7791] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 107.273508][ T7791] mmu_topup_memory_caches+0x25/0x170 [ 107.273534][ T7791] kvm_mmu_load+0xe2/0x2570 [ 107.273556][ T7791] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 107.273573][ T7791] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 107.273617][ T7791] ? __pfx_kvm_mmu_load+0x10/0x10 [ 107.273638][ T7791] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 107.273658][ T7791] ? kvm_check_and_inject_events+0x873/0x12a0 [ 107.273680][ T7791] ? record_steal_time+0x3a0/0xbb0 [ 107.273700][ T7791] vcpu_run+0x3aaa/0x5de0 [ 107.273732][ T7791] ? __pfx_vcpu_run+0x10/0x10 [ 107.273872][ T7791] ? rcu_is_watching+0x12/0xc0 [ 107.273900][ T7791] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 107.273922][ T7791] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 107.273951][ T7791] kvm_vcpu_ioctl+0x730/0x1700 [ 107.273973][ T7791] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 107.273992][ T7791] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.274015][ T7791] ? do_vfs_ioctl+0x226/0x13e0 [ 107.274039][ T7791] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 107.274063][ T7791] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 107.274097][ T7791] ? __fget_files+0x215/0x3d0 [ 107.274114][ T7791] ? hook_file_ioctl_common+0x140/0x440 [ 107.274139][ T7791] ? selinux_file_ioctl+0x13b/0x290 [ 107.274161][ T7791] ? selinux_file_ioctl+0xb6/0x290 [ 107.274185][ T7791] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 107.274205][ T7791] __x64_sys_ioctl+0x18e/0x210 [ 107.274230][ T7791] do_syscall_64+0x115/0x870 [ 107.274250][ T7791] ? clear_bhb_loop+0x70/0xc0 [ 107.274269][ T7791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.274286][ T7791] RIP: 0033:0x7f8f7239e0d9 [ 107.274301][ T7791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.274315][ T7791] RSP: 002b:00007f8f7324b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.274331][ T7791] RAX: ffffffffffffffda RBX: 00007f8f72626090 RCX: 00007f8f7239e0d9 [ 107.274342][ T7791] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 107.274351][ T7791] RBP: 00007f8f7324b090 R08: 0000000000000000 R09: 0000000000000000 [ 107.274360][ T7791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.274369][ T7791] R13: 00007f8f72626128 R14: 00007f8f72626090 R15: 00007ffc55a76128 [ 107.274389][ T7791] [ 107.485326][ T40] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 107.636024][ T7805] "syz.4.604" (7805) uses obsolete ecb(arc4) skcipher [ 107.646310][ T40] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 107.650855][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.880014][ T40] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 108.067404][ T9] usb 6-1: USB disconnect, device number 17 [ 108.199587][ T7814] FAULT_INJECTION: forcing a failure. [ 108.199587][ T7814] name failslab, interval 1, probability 0, space 0, times 0 [ 108.204518][ T7814] CPU: 0 UID: 0 PID: 7814 Comm: syz.5.607 Not tainted syzkaller #0 PREEMPT(full) [ 108.204535][ T7814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.204542][ T7814] Call Trace: [ 108.204546][ T7814] [ 108.204551][ T7814] dump_stack_lvl+0x100/0x190 [ 108.204571][ T7814] should_fail_ex.cold+0x5/0xa [ 108.204587][ T7814] should_failslab+0xc2/0x120 [ 108.204603][ T7814] __kmalloc_noprof+0xfc/0x820 [ 108.204630][ T7814] ? lsm_blob_alloc+0x68/0x90 [ 108.204647][ T7814] lsm_blob_alloc+0x68/0x90 [ 108.204660][ T7814] security_task_alloc+0x2a/0x260 [ 108.204673][ T7814] copy_process+0x2b94/0x8030 [ 108.204699][ T7814] ? __pfx_copy_process+0x10/0x10 [ 108.204714][ T7814] ? __kasan_kmalloc+0xaa/0xb0 [ 108.204729][ T7814] ? lockdep_init_map_type+0x5c/0x250 [ 108.204745][ T7814] ? lockdep_init_map_type+0x5c/0x250 [ 108.204761][ T7814] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 108.204780][ T7814] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 108.204793][ T7814] vhost_task_create+0x1db/0x370 [ 108.204807][ T7814] ? __pfx_vhost_task_create+0x10/0x10 [ 108.204825][ T7814] ? __pfx_vhost_task_fn+0x10/0x10 [ 108.204839][ T7814] ? __pfx___mutex_lock+0x10/0x10 [ 108.204855][ T7814] ? kasan_quarantine_put+0x104/0x240 [ 108.204871][ T7814] kvm_mmu_post_init_vm+0x1b3/0x360 [ 108.204889][ T7814] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 108.204907][ T7814] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 108.204923][ T7814] kvm_vcpu_ioctl+0x730/0x1700 [ 108.204938][ T7814] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 108.204951][ T7814] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.204966][ T7814] ? do_vfs_ioctl+0x226/0x13e0 [ 108.204983][ T7814] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 108.205000][ T7814] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 108.205024][ T7814] ? __fget_files+0x215/0x3d0 [ 108.205036][ T7814] ? hook_file_ioctl_common+0x140/0x440 [ 108.205052][ T7814] ? selinux_file_ioctl+0x13b/0x290 [ 108.205069][ T7814] ? selinux_file_ioctl+0xb6/0x290 [ 108.205087][ T7814] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 108.205100][ T7814] __x64_sys_ioctl+0x18e/0x210 [ 108.205118][ T7814] do_syscall_64+0x115/0x870 [ 108.205133][ T7814] ? clear_bhb_loop+0x70/0xc0 [ 108.205147][ T7814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.205158][ T7814] RIP: 0033:0x7f4f4cb9e0d9 [ 108.205169][ T7814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.205180][ T7814] RSP: 002b:00007f4f4dac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.205191][ T7814] RAX: ffffffffffffffda RBX: 00007f4f4ce25fa0 RCX: 00007f4f4cb9e0d9 [ 108.205198][ T7814] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 108.205204][ T7814] RBP: 00007f4f4dac3090 R08: 0000000000000000 R09: 0000000000000000 [ 108.205210][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.205216][ T7814] R13: 00007f4f4ce26038 R14: 00007f4f4ce25fa0 R15: 00007ffc0aa0e6a8 [ 108.205230][ T7814] [ 108.262880][ T5724] udevd[5724]: 'ata_id --export /dev/sda' [7815] terminated by signal 11 (Segmentation fault) [ 108.332062][ T7818] udevd[7818]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Exec format error [ 108.395438][ T7824] netlink: 'syz.3.611': attribute type 21 has an invalid length. [ 108.397852][ T7824] netlink: 'syz.3.611': attribute type 7 has an invalid length. [ 108.471481][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.3.612'. [ 108.684810][ T5798] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 108.814784][ T5798] usb 10-1: device descriptor read/64, error -71 [ 109.055954][ T5798] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 109.185480][ T5833] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 109.194754][ T5798] usb 10-1: device descriptor read/64, error -71 [ 109.307495][ T5798] usb usb10-port1: attempt power cycle [ 109.334728][ T5833] usb 9-1: Using ep0 maxpacket: 8 [ 109.336967][ T5833] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.340815][ T5833] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.343412][ T5833] usb 9-1: config 0 has no interface number 0 [ 109.347771][ T5833] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 109.351275][ T5833] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 109.354854][ T5833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.361723][ T5833] usb 9-1: config 0 descriptor?? [ 109.365463][ T5833] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 109.566864][ T42] kauditd_printk_skb: 207 callbacks suppressed [ 109.566876][ T42] audit: type=1400 audit(1786294910.266:3337): avc: denied { read write } for pid=7853 comm="syz.4.622" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 109.577479][ T42] audit: type=1400 audit(1786294910.266:3338): avc: denied { open } for pid=7853 comm="syz.4.622" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 109.587508][ T42] audit: type=1400 audit(1786294910.266:3339): avc: denied { name_bind } for pid=7853 comm="syz.4.622" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 109.594201][ T42] audit: type=1400 audit(1786294910.266:3340): avc: denied { node_bind } for pid=7853 comm="syz.4.622" saddr=::ffff:0.0.0.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 109.602158][ T42] audit: type=1400 audit(1786294910.276:3341): avc: denied { read } for pid=7853 comm="syz.4.622" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.611929][ T42] audit: type=1400 audit(1786294910.276:3342): avc: denied { open } for pid=7853 comm="syz.4.622" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.620789][ T42] audit: type=1400 audit(1786294910.276:3343): avc: denied { ioctl } for pid=7853 comm="syz.4.622" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.646673][ T5798] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 109.660977][ T5833] usb 9-1: USB disconnect, device number 7 [ 109.665877][ T5798] usb 10-1: device descriptor read/8, error -71 [ 109.792130][ T42] audit: type=1400 audit(1786294910.486:3344): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 109.826442][ T42] audit: type=1400 audit(1786294910.526:3345): avc: denied { write } for pid=7858 comm="syz.1.624" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.836936][ T42] audit: type=1400 audit(1786294910.526:3346): avc: denied { create } for pid=7858 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 109.904830][ T5798] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 109.925530][ T5798] usb 10-1: device descriptor read/8, error -71 [ 110.035605][ T5798] usb usb10-port1: unable to enumerate USB device [ 110.204799][ T29] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 110.355228][ T29] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 110.366051][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.375153][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.380709][ T29] usb 6-1: config 0 descriptor?? [ 110.587934][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 110.592359][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 110.597208][ T29] usb 6-1: USB disconnect, device number 18 [ 110.824726][ T56] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 110.984828][ T56] usb 9-1: Using ep0 maxpacket: 8 [ 110.987777][ T56] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 110.991800][ T56] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.995238][ T56] usb 9-1: config 0 has no interface number 0 [ 110.997326][ T56] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.001227][ T56] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 111.004696][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.009849][ T56] usb 9-1: config 0 descriptor?? [ 111.016873][ T56] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 111.025524][ T5833] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 111.175057][ T5833] usb 6-1: Using ep0 maxpacket: 32 [ 111.177326][ T5833] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 111.181610][ T5833] usb 6-1: config index 0 descriptor too short (expected 36, got 27) [ 111.184428][ T5833] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.189452][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.196832][ T5833] usb 6-1: config 0 descriptor?? [ 111.200196][ T5833] ldusb 6-1:0.0: Interrupt in endpoint not found [ 111.202671][ T5833] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 111.215831][ T7883] iowarrior 9-1:0.1: Error -90 while submitting URB [ 111.220571][ T848] usb 9-1: USB disconnect, device number 8 [ 111.405068][ T5833] usb 6-1: USB disconnect, device number 19 [ 111.545007][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 112.004746][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 112.077818][ T7936] FAULT_INJECTION: forcing a failure. [ 112.077818][ T7936] name failslab, interval 1, probability 0, space 0, times 0 [ 112.084789][ T7936] CPU: 2 UID: 0 PID: 7936 Comm: syz.3.649 Not tainted syzkaller #0 PREEMPT(full) [ 112.084815][ T7936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.084826][ T7936] Call Trace: [ 112.084852][ T7936] [ 112.084859][ T7936] dump_stack_lvl+0x100/0x190 [ 112.084950][ T7936] should_fail_ex.cold+0x5/0xa [ 112.084990][ T7936] should_failslab+0xc2/0x120 [ 112.085031][ T7936] __kmalloc_noprof+0xfc/0x820 [ 112.085053][ T7936] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 112.085070][ T7936] ? mpi_alloc_limb_space+0x31/0x60 [ 112.085122][ T7936] mpi_alloc_limb_space+0x31/0x60 [ 112.085143][ T7936] mpi_alloc+0x199/0x230 [ 112.085163][ T7936] mpi_read_raw_data+0xf5/0x430 [ 112.085186][ T7936] dh_set_secret+0x190/0x260 [ 112.085206][ T7936] ? __pfx_dh_set_secret+0x10/0x10 [ 112.085227][ T7936] ? crypto_create_tfm_node+0x1b4/0x3b0 [ 112.085251][ T7936] ? crypto_alloc_tfm_node+0x126/0x260 [ 112.085277][ T7936] __keyctl_dh_compute+0x4dd/0x10d0 [ 112.085312][ T7936] ? get_pid_task+0xfc/0x250 [ 112.085337][ T7936] ? get_pid_task+0xfc/0x250 [ 112.085354][ T7936] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 112.085374][ T7936] ? __lock_acquire+0x49f/0x1a40 [ 112.085395][ T7936] ? proc_fail_nth_write+0x9f/0x220 [ 112.085442][ T7936] keyctl_dh_compute+0xd9/0x140 [ 112.085461][ T7936] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 112.085483][ T7936] ? ksys_write+0x1ac/0x250 [ 112.085500][ T7936] ? __pfx_ksys_write+0x10/0x10 [ 112.085520][ T7936] __do_sys_keyctl+0x464/0x5a0 [ 112.085545][ T7936] do_syscall_64+0x115/0x870 [ 112.085599][ T7936] ? clear_bhb_loop+0x70/0xc0 [ 112.085622][ T7936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.085640][ T7936] RIP: 0033:0x7fa6d1f9e0d9 [ 112.085656][ T7936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.085674][ T7936] RSP: 002b:00007fa6d2df5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 112.085692][ T7936] RAX: ffffffffffffffda RBX: 00007fa6d2225fa0 RCX: 00007fa6d1f9e0d9 [ 112.085704][ T7936] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017 [ 112.085713][ T7936] RBP: 00007fa6d2df5090 R08: 0000200000000180 R09: 0000000000000000 [ 112.085724][ T7936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.085733][ T7936] R13: 00007fa6d2226038 R14: 00007fa6d2225fa0 R15: 00007ffc44a75f48 [ 112.085773][ T7936] [ 112.157689][ T9] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 112.170668][ T9] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 10 [ 112.174070][ T9] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 10083, setting to 1024 [ 112.178940][ T9] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 10 [ 112.182388][ T9] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 10083, setting to 1024 [ 112.187619][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.190039][ T9] usb 9-1: Product: syz [ 112.191328][ T9] usb 9-1: Manufacturer: syz [ 112.192726][ T9] usb 9-1: SerialNumber: syz [ 112.200414][ T7919] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.203980][ T9] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 112.210159][ T9] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 112.215821][ T9] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 112.408221][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.411321][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.414282][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.417282][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.420184][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.423183][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.426182][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.429189][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.432261][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.435215][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.438211][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.441202][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.444220][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.447218][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.450354][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.453292][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.456296][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.459277][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.462299][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.465312][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.468383][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.471387][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.474421][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.477422][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.480427][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.483434][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.486428][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.489458][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.492467][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.495521][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.498545][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.501569][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.504548][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.507528][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.510517][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.513522][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.516524][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.519524][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.522543][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.525607][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.528645][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.531661][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.534713][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.537693][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.540661][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.543655][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.546636][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.549596][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.552756][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.555729][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.558773][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.561779][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.564687][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.567704][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.570701][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.573696][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.576693][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.579646][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.582630][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.585635][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.588600][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.591639][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.594687][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.597633][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.600460][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.603459][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.606423][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.609399][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.612402][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.615431][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.618466][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.621452][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.624431][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.627473][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.630438][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.633405][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.636380][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.639318][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.642307][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.645332][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.648328][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.651312][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.654383][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.657355][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.660309][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.663293][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.666300][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.669304][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.672441][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.675473][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.678443][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.681470][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.684465][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.687540][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.689951][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.692414][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.694909][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.697325][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.699801][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.702247][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.704974][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.707456][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.709960][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.712418][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.714877][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.717282][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.719741][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.722169][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.724603][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.727129][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.729904][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.732897][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.736075][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.739113][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.742089][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.745051][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.748091][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.751155][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.754176][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.757242][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.760821][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.763786][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.766736][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.769633][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.772604][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.775645][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.778534][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.781504][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.784507][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.787541][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.790533][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.793438][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.796330][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.799294][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.802185][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.805009][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.807901][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.810758][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.813651][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.817761][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.820659][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.823550][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.826432][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.829262][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.832167][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.835170][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.838041][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.840938][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.843843][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.846722][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.849666][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.852588][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.855570][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.858571][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.861578][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.864476][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.867419][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.870308][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.873206][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.876370][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.879296][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.882240][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.885345][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.888253][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.891165][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.894113][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.897000][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.899894][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.902722][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.905638][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.908534][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.911423][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.914287][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.916852][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.919355][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.921846][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.924452][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.927018][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.929577][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.932273][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.934942][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.937412][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.939890][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.942425][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.946350][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.948895][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.951866][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.954361][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.956873][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.959386][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.962042][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.964534][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.967113][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.969745][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.972222][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.974730][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.977175][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.979750][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.982250][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.984758][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.987418][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.989917][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.992463][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.995229][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 112.997833][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.000327][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.002834][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.005355][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.007956][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.010454][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.012975][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.015476][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.017952][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.020383][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.023190][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.026281][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.028938][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.031496][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.033948][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.037450][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.040327][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.042844][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.045513][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.048001][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.050465][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.052958][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.055450][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.057917][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.060486][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.063280][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.066068][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.068564][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.071065][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.073395][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.075757][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.079382][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.082012][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.084357][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.086921][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.089623][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.092359][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.095208][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.097889][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.100446][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.103122][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.106012][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.108670][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.111434][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.114212][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.116975][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.119689][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.122296][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.125111][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.127813][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.130541][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.132883][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.135221][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.137515][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.139805][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.142179][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.144467][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.146772][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.149082][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.151416][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.153741][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.156049][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.158368][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.160664][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.163012][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.165496][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.167804][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.170191][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.173058][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.175753][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.178656][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.181366][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.184130][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.187015][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.189655][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.192185][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.194530][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.196944][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.199259][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.201692][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.204129][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.206736][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.220523][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.231450][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.234245][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.237291][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.239812][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.242576][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.245227][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.247738][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.250256][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.252744][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.255199][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.257690][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.260138][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.262599][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.265209][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.267810][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.270330][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.272819][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.275347][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.277803][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.280273][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.282758][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.285428][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.288669][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.291514][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.294010][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.297478][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.300010][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.302497][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.304978][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.307694][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.310479][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.313473][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.316077][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.318579][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.321141][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.323883][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.326730][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.329578][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.332384][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.335074][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.337937][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.340835][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.343617][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.347202][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.349667][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.352014][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.354414][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.356749][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.359107][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.361534][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.363743][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.660'. [ 113.366509][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.368742][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.370990][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.373465][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.375806][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.378106][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.380394][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.382709][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.385035][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.387222][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.389405][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.391631][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.393880][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.396410][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.398701][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.400879][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.403058][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.405268][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.407465][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.409693][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.412516][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.415428][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.418428][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.421527][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.424501][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.427266][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.429473][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.431644][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.433778][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.436024][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.436064][ T7916] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 113.438092][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.443082][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.443140][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.660'. [ 113.445362][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.449185][ T7916] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 113.450401][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.452671][ T7916] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 113.454705][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.459752][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.459811][ T7916] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 113.461999][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 113.466563][ C1] usb 9-1: ti_interrupt_callback - resubmit interrupt urb failed, -1 [ 113.470550][ T5819] usb 9-1: USB disconnect, device number 9 [ 113.479693][ T5819] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 113.489413][ T5819] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 113.493373][ T5819] ti_usb_3410_5052 9-1:2.0: device disconnected [ 113.550973][ T7975] netlink: 4 bytes leftover after parsing attributes in process `new_name'. [ 113.672863][ T7984] fuse: Unknown parameter 'grou00000000000000000000' [ 113.753384][ T7990] netlink: 'syz.1.668': attribute type 11 has an invalid length. [ 114.032718][ T8013] fuse: Unknown parameter 'grou00000000000000000000' [ 114.036173][ T8008] can: request_module (can-proto-0) failed. [ 114.076594][ T8015] netlink: 348 bytes leftover after parsing attributes in process `syz.3.677'. [ 114.087504][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'. [ 114.136829][ T8021] XFS (mtdblock0): Invalid superblock magic number [ 114.178489][ T8028] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 114.197767][ T8028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.215389][ T8021] bond1: (slave geneve3): making interface the new active one [ 114.220352][ T8021] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 114.245098][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.248069][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.251110][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.253794][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.256728][ T13] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.304920][ T8021] nbd3: detected capacity change from 0 to 63 [ 114.317248][ T8028] block nbd3: NBD_DISCONNECT [ 114.319668][ T8028] block nbd3: Disconnected due to user request. [ 114.323868][ T8028] block nbd3: shutting down sockets [ 114.346054][ C0] blk_print_req_error: 151 callbacks suppressed [ 114.346076][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.352738][ C0] buffer_io_error: 150 callbacks suppressed [ 114.352753][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 114.366426][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.369642][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 114.372646][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.375817][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.376576][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 114.380280][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 114.387656][ T1305] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 114.392377][ T1305] Buffer I/O error on dev nbd3, logical block 0, async page read [ 114.397397][ T1305] Buffer I/O error on dev nbd3, logical block 1, async page read [ 114.400548][ T1305] Buffer I/O error on dev nbd3, logical block 2, async page read [ 114.403460][ T1305] Buffer I/O error on dev nbd3, logical block 3, async page read [ 114.409016][ T1305] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 114.412787][ T1305] Buffer I/O error on dev nbd3, logical block 0, async page read [ 114.416422][ T1305] Buffer I/O error on dev nbd3, logical block 1, async page read [ 114.420287][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.424058][ T25] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.430761][ T25] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.434270][ T25] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.438762][ T5724] ldm_validate_partition_table(): Disk read failed. [ 114.441954][ T5724] Dev nbd3: unable to read RDB block 0 [ 114.444970][ T5724] nbd3: unable to read partition table [ 114.455818][ T5724] ldm_validate_partition_table(): Disk read failed. [ 114.461354][ T5724] Dev nbd3: unable to read RDB block 0 [ 114.464594][ T5724] nbd3: unable to read partition table [ 114.486275][ T8042] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 114.598445][ T8052] fuse: Unknown parameter 'group_i00000000000000000000' [ 114.612981][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.686'. [ 114.647194][ T42] kauditd_printk_skb: 219 callbacks suppressed [ 114.647207][ T42] audit: type=1400 audit(1786294915.346:3566): avc: denied { create } for pid=8056 comm="syz.4.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.656087][ T42] audit: type=1400 audit(1786294915.346:3567): avc: denied { setopt } for pid=8056 comm="syz.4.687" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.662406][ T42] audit: type=1400 audit(1786294915.346:3568): avc: denied { read write } for pid=5720 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.671689][ T42] audit: type=1400 audit(1786294915.346:3569): avc: denied { open } for pid=5720 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.680577][ T42] audit: type=1400 audit(1786294915.346:3570): avc: denied { ioctl } for pid=5720 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.689963][ T42] audit: type=1400 audit(1786294915.346:3571): avc: denied { prog_load } for pid=8056 comm="syz.4.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 114.715165][ T42] audit: type=1400 audit(1786294915.406:3572): avc: denied { load_policy } for pid=8058 comm="syz.5.688" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 114.717928][ T8059] SELinux: ebitmap start bit (3584) is beyond the end of the bitmap (1472) [ 114.724245][ T8059] SELinux: invalid class [ 114.729778][ T8059] SELinux: failed to load policy [ 114.733131][ T8061] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 114.737310][ T8061] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 114.810147][ T42] audit: type=1400 audit(1786294915.506:3573): avc: denied { create } for pid=8060 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.816789][ T42] audit: type=1400 audit(1786294915.506:3574): avc: denied { connect } for pid=8060 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.822867][ T42] audit: type=1400 audit(1786294915.506:3575): avc: denied { ioctl } for pid=8060 comm="syz.3.689" path="socket:[30901]" dev="sockfs" ino=30901 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 115.270020][ T8079] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 115.274051][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.691'. [ 116.314724][ T8093] overlay: Unknown parameter '{֐ȵ4FLQk݊5./file0' [ 116.321633][ T8093] overlayfs: overlapping lowerdir path [ 116.322809][ T8096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8096 comm=syz.3.694 [ 116.458913][ T8111] FAULT_INJECTION: forcing a failure. [ 116.458913][ T8111] name failslab, interval 1, probability 0, space 0, times 0 [ 116.463190][ T8111] CPU: 3 UID: 0 PID: 8111 Comm: syz.5.699 Not tainted syzkaller #0 PREEMPT(full) [ 116.463213][ T8111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.463223][ T8111] Call Trace: [ 116.463253][ T8111] [ 116.463258][ T8111] dump_stack_lvl+0x100/0x190 [ 116.463279][ T8111] should_fail_ex.cold+0x5/0xa [ 116.463295][ T8111] should_failslab+0xc2/0x120 [ 116.463312][ T8111] __kvmalloc_node_noprof+0x116/0x970 [ 116.463326][ T8111] ? nla_strdup+0xc3/0x150 [ 116.463346][ T8111] ? nf_tables_addchain.constprop.0+0x9be/0x1ca0 [ 116.463368][ T8111] nf_tables_addchain.constprop.0+0x9be/0x1ca0 [ 116.463394][ T8111] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 116.463425][ T8111] ? nla_strcmp+0xff/0x130 [ 116.463444][ T8111] ? nft_table_lookup.part.0+0x1e3/0x230 [ 116.463458][ T8111] nf_tables_newchain+0x17c3/0x2d30 [ 116.463477][ T8111] ? net_generic+0x31/0x2a0 [ 116.463490][ T8111] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.463507][ T8111] ? __nla_validate_parse+0x1e7/0x28b0 [ 116.463520][ T8111] ? __pfx_nf_tables_newchain+0x10/0x10 [ 116.463539][ T8111] ? __pfx___nla_validate_parse+0x10/0x10 [ 116.463556][ T8111] ? __nla_parse+0x40/0x60 [ 116.463569][ T8111] nfnetlink_rcv_batch+0x1410/0x2880 [ 116.463593][ T8111] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 116.463609][ T8111] ? find_held_lock+0x2b/0x80 [ 116.463628][ T8111] ? avc_has_perm_noaudit+0x145/0x3b0 [ 116.463656][ T8111] ? __nla_parse+0x40/0x60 [ 116.463677][ T8111] nfnetlink_rcv+0x3bd/0x440 [ 116.463692][ T8111] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 116.463711][ T8111] netlink_unicast+0x585/0x850 [ 116.463726][ T8111] ? __pfx_netlink_unicast+0x10/0x10 [ 116.463742][ T8111] netlink_sendmsg+0x8b0/0xda0 [ 116.463756][ T8111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.463785][ T8111] ? selinux_socket_sendmsg+0x198/0x2f0 [ 116.463804][ T8111] ____sys_sendmsg+0xa4d/0xbe0 [ 116.463822][ T8111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.463835][ T8111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.463859][ T8111] ___sys_sendmsg+0x190/0x1e0 [ 116.463872][ T8111] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.463882][ T8111] ? __lock_acquire+0x49f/0x1a40 [ 116.463897][ T8111] ? get_pid_task+0x106/0x250 [ 116.463924][ T8111] __sys_sendmsg+0x160/0x210 [ 116.463939][ T8111] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.463962][ T8111] do_syscall_64+0x115/0x870 [ 116.463977][ T8111] ? clear_bhb_loop+0x70/0xc0 [ 116.463991][ T8111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.464003][ T8111] RIP: 0033:0x7f4f4cb9e0d9 [ 116.464013][ T8111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.464024][ T8111] RSP: 002b:00007f4f4dac3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.464043][ T8111] RAX: ffffffffffffffda RBX: 00007f4f4ce25fa0 RCX: 00007f4f4cb9e0d9 [ 116.464050][ T8111] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 116.464057][ T8111] RBP: 00007f4f4dac3090 R08: 0000000000000000 R09: 0000000000000000 [ 116.464063][ T8111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.464070][ T8111] R13: 00007f4f4ce26038 R14: 00007f4f4ce25fa0 R15: 00007ffc0aa0e6a8 [ 116.464084][ T8111] [ 116.468251][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 116.510767][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 116.513760][ T8113] FAULT_INJECTION: forcing a failure. [ 116.513760][ T8113] name failslab, interval 1, probability 0, space 0, times 0 [ 116.581689][ T8113] CPU: 2 UID: 0 PID: 8113 Comm: syz.4.700 Not tainted syzkaller #0 PREEMPT(full) [ 116.581706][ T8113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.581713][ T8113] Call Trace: [ 116.581717][ T8113] [ 116.581722][ T8113] dump_stack_lvl+0x100/0x190 [ 116.581742][ T8113] should_fail_ex.cold+0x5/0xa [ 116.581758][ T8113] should_failslab+0xc2/0x120 [ 116.581775][ T8113] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 116.581792][ T8113] ? kasprintf+0xc7/0x100 [ 116.581812][ T8113] kvasprintf+0xbc/0x150 [ 116.581828][ T8113] ? __pfx_kvasprintf+0x10/0x10 [ 116.581844][ T8113] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 116.581859][ T8113] ? lockdep_hardirqs_on+0x78/0x100 [ 116.581874][ T8113] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 116.581890][ T8113] kasprintf+0xc7/0x100 [ 116.581906][ T8113] ? __pfx_kasprintf+0x10/0x10 [ 116.581925][ T8113] ? lockdep_init_map_type+0x5c/0x250 [ 116.581943][ T8113] ieee80211_alloc_led_names+0x86/0x420 [ 116.581963][ T8113] ieee80211_alloc_hw_nm+0x1969/0x22e0 [ 116.581982][ T8113] mac80211_hwsim_new_radio+0x1de/0x64c0 [ 116.581999][ T8113] ? __pfx__printk+0x10/0x10 [ 116.582009][ T8113] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 116.582027][ T8113] ? rcu_is_watching+0x12/0xc0 [ 116.582045][ T8113] ? do_trace_netlink_extack+0x72/0x1e0 [ 116.582063][ T8113] ? __nla_validate_parse+0x1e7/0x28b0 [ 116.582075][ T8113] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 116.582093][ T8113] hwsim_new_radio_nl+0xc6b/0x13f0 [ 116.582109][ T8113] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 116.582127][ T8113] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 116.582142][ T8113] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 116.582160][ T8113] genl_family_rcv_msg_doit+0x214/0x300 [ 116.582176][ T8113] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 116.582195][ T8113] ? bpf_lsm_capable+0x9/0x10 [ 116.582208][ T8113] ? security_capable+0x80/0x260 [ 116.582240][ T8113] ? ns_capable+0xd2/0xf0 [ 116.582257][ T8113] genl_rcv_msg+0x560/0x800 [ 116.582272][ T8113] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.582286][ T8113] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 116.582305][ T8113] netlink_rcv_skb+0x159/0x420 [ 116.582317][ T8113] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.582331][ T8113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.582349][ T8113] ? netlink_deliver_tap+0x1ae/0xcc0 [ 116.582362][ T8113] genl_rcv+0x28/0x40 [ 116.582374][ T8113] netlink_unicast+0x585/0x850 [ 116.582388][ T8113] ? __pfx_netlink_unicast+0x10/0x10 [ 116.582404][ T8113] netlink_sendmsg+0x8b0/0xda0 [ 116.582418][ T8113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.582432][ T8113] ? selinux_socket_sendmsg+0x198/0x2f0 [ 116.582451][ T8113] ____sys_sendmsg+0xa4d/0xbe0 [ 116.582469][ T8113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.582483][ T8113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.582507][ T8113] ___sys_sendmsg+0x190/0x1e0 [ 116.582519][ T8113] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.582529][ T8113] ? __lock_acquire+0x49f/0x1a40 [ 116.582543][ T8113] ? get_pid_task+0x106/0x250 [ 116.582569][ T8113] __sys_sendmsg+0x160/0x210 [ 116.582584][ T8113] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.582606][ T8113] do_syscall_64+0x115/0x870 [ 116.582621][ T8113] ? clear_bhb_loop+0x70/0xc0 [ 116.582634][ T8113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.582646][ T8113] RIP: 0033:0x7f8f7239e0d9 [ 116.582656][ T8113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.582667][ T8113] RSP: 002b:00007f8f7326c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.582683][ T8113] RAX: ffffffffffffffda RBX: 00007f8f72625fa0 RCX: 00007f8f7239e0d9 [ 116.582690][ T8113] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 116.582696][ T8113] RBP: 00007f8f7326c090 R08: 0000000000000000 R09: 0000000000000000 [ 116.582703][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.582709][ T8113] R13: 00007f8f72626038 R14: 00007f8f72625fa0 R15: 00007ffc55a76128 [ 116.582723][ T8113] [ 116.698472][ T8122] qnx6: unable to read the first superblock [ 116.734122][ T8122] qnx6: unable to read the first superblock [ 116.736111][ T8122] qnx6: unable to read the first superblock [ 116.783206][ T8124] FAULT_INJECTION: forcing a failure. [ 116.783206][ T8124] name failslab, interval 1, probability 0, space 0, times 0 [ 116.788113][ T8124] CPU: 2 UID: 0 PID: 8124 Comm: syz.4.704 Not tainted syzkaller #0 PREEMPT(full) [ 116.788129][ T8124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.788136][ T8124] Call Trace: [ 116.788140][ T8124] [ 116.788145][ T8124] dump_stack_lvl+0x100/0x190 [ 116.788165][ T8124] should_fail_ex.cold+0x5/0xa [ 116.788181][ T8124] should_failslab+0xc2/0x120 [ 116.788196][ T8124] __kmalloc_noprof+0xfc/0x820 [ 116.788211][ T8124] ? lsm_blob_alloc+0x68/0x90 [ 116.788227][ T8124] lsm_blob_alloc+0x68/0x90 [ 116.788239][ T8124] security_task_alloc+0x2a/0x260 [ 116.788251][ T8124] copy_process+0x2b94/0x8030 [ 116.788277][ T8124] ? __pfx_copy_process+0x10/0x10 [ 116.788293][ T8124] ? __kasan_kmalloc+0xaa/0xb0 [ 116.788307][ T8124] ? lockdep_init_map_type+0x5c/0x250 [ 116.788328][ T8124] ? lockdep_init_map_type+0x5c/0x250 [ 116.788343][ T8124] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 116.788359][ T8124] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 116.788372][ T8124] vhost_task_create+0x1db/0x370 [ 116.788386][ T8124] ? __pfx_vhost_task_create+0x10/0x10 [ 116.788404][ T8124] ? __pfx_vhost_task_fn+0x10/0x10 [ 116.788418][ T8124] ? __pfx___mutex_lock+0x10/0x10 [ 116.788434][ T8124] ? kasan_quarantine_put+0x104/0x240 [ 116.788450][ T8124] kvm_mmu_post_init_vm+0x1b3/0x360 [ 116.788468][ T8124] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 116.788485][ T8124] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 116.788502][ T8124] kvm_vcpu_ioctl+0x730/0x1700 [ 116.788516][ T8124] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 116.788529][ T8124] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.788544][ T8124] ? do_vfs_ioctl+0x226/0x13e0 [ 116.788562][ T8124] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.788579][ T8124] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 116.788602][ T8124] ? __fget_files+0x215/0x3d0 [ 116.788615][ T8124] ? hook_file_ioctl_common+0x140/0x440 [ 116.788632][ T8124] ? selinux_file_ioctl+0x13b/0x290 [ 116.788648][ T8124] ? selinux_file_ioctl+0xb6/0x290 [ 116.788666][ T8124] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 116.788680][ T8124] __x64_sys_ioctl+0x18e/0x210 [ 116.788698][ T8124] do_syscall_64+0x115/0x870 [ 116.788712][ T8124] ? clear_bhb_loop+0x70/0xc0 [ 116.788726][ T8124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.788738][ T8124] RIP: 0033:0x7f8f7239e0d9 [ 116.788748][ T8124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.788759][ T8124] RSP: 002b:00007f8f7326c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.788770][ T8124] RAX: ffffffffffffffda RBX: 00007f8f72625fa0 RCX: 00007f8f7239e0d9 [ 116.788777][ T8124] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 116.788783][ T8124] RBP: 00007f8f7326c090 R08: 0000000000000000 R09: 0000000000000000 [ 116.788789][ T8124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.788795][ T8124] R13: 00007f8f72626038 R14: 00007f8f72625fa0 R15: 00007ffc55a76128 [ 116.788809][ T8124] [ 116.954738][ T56] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 117.097608][ T8134] FAULT_INJECTION: forcing a failure. [ 117.097608][ T8134] name failslab, interval 1, probability 0, space 0, times 0 [ 117.101675][ T8134] CPU: 1 UID: 0 PID: 8134 Comm: syz.4.708 Not tainted syzkaller #0 PREEMPT(full) [ 117.101691][ T8134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.101698][ T8134] Call Trace: [ 117.101703][ T8134] [ 117.101708][ T8134] dump_stack_lvl+0x100/0x190 [ 117.101728][ T8134] should_fail_ex.cold+0x5/0xa [ 117.101744][ T8134] should_failslab+0xc2/0x120 [ 117.101761][ T8134] kmem_cache_alloc_noprof+0x91/0x6a0 [ 117.101776][ T8134] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 117.101794][ T8134] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 117.101816][ T8134] mmu_topup_memory_caches+0x25/0x170 [ 117.101835][ T8134] kvm_mmu_load+0xe2/0x2570 [ 117.101851][ T8134] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 117.101863][ T8134] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 117.101877][ T8134] ? __pfx_kvm_mmu_load+0x10/0x10 [ 117.101892][ T8134] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 117.101906][ T8134] ? kvm_check_and_inject_events+0x873/0x12a0 [ 117.101923][ T8134] ? record_steal_time+0x3a0/0xbb0 [ 117.101937][ T8134] vcpu_run+0x3aaa/0x5de0 [ 117.101953][ T8134] ? mark_held_locks+0x40/0x70 [ 117.101973][ T8134] ? __pfx_vcpu_run+0x10/0x10 [ 117.101994][ T8134] ? rcu_is_watching+0x12/0xc0 [ 117.102013][ T8134] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 117.102031][ T8134] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 117.102052][ T8134] kvm_vcpu_ioctl+0x730/0x1700 [ 117.102067][ T8134] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 117.102080][ T8134] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.102096][ T8134] ? do_vfs_ioctl+0x226/0x13e0 [ 117.102114][ T8134] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 117.102131][ T8134] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 117.102154][ T8134] ? __fget_files+0x215/0x3d0 [ 117.102169][ T8134] ? hook_file_ioctl_common+0x140/0x440 [ 117.102186][ T8134] ? selinux_file_ioctl+0x13b/0x290 [ 117.102203][ T8134] ? selinux_file_ioctl+0xb6/0x290 [ 117.102221][ T8134] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 117.102235][ T8134] __x64_sys_ioctl+0x18e/0x210 [ 117.102254][ T8134] do_syscall_64+0x115/0x870 [ 117.102268][ T8134] ? clear_bhb_loop+0x70/0xc0 [ 117.102283][ T8134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.102294][ T8134] RIP: 0033:0x7f8f7239e0d9 [ 117.102304][ T8134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.102315][ T8134] RSP: 002b:00007f8f7326c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.102327][ T8134] RAX: ffffffffffffffda RBX: 00007f8f72625fa0 RCX: 00007f8f7239e0d9 [ 117.102334][ T8134] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 117.102340][ T8134] RBP: 00007f8f7326c090 R08: 0000000000000000 R09: 0000000000000000 [ 117.102347][ T8134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.102353][ T8134] R13: 00007f8f72626038 R14: 00007f8f72625fa0 R15: 00007ffc55a76128 [ 117.102367][ T8134] [ 117.196632][ T56] usb 10-1: Using ep0 maxpacket: 8 [ 117.203279][ T56] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 117.207359][ T56] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 117.210070][ T56] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 117.212585][ T56] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 117.215932][ T56] usb 10-1: config 250 has no interface number 0 [ 117.217967][ T56] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 117.221544][ T56] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 117.224825][ T56] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.227893][ T56] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 117.231075][ T56] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 117.235368][ T56] usb 10-1: config 250 interface 228 has no altsetting 0 [ 117.238947][ T56] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 117.241610][ T56] usb 10-1: Product: syz [ 117.242954][ T56] usb 10-1: SerialNumber: syz [ 117.249118][ T56] hub 10-1:250.228: bad descriptor, ignoring hub [ 117.251137][ T56] hub 10-1:250.228: probe with driver hub failed with error -5 [ 117.360772][ T8145] fuse: Unknown parameter 'group_id00000000000000000000' [ 117.453730][ T56] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 117.531977][ T8151] loop5: detected capacity change from 0 to 2640 [ 117.595242][ T8151] loop5: detected capacity change from 2640 to 524287999 [ 117.765385][ T56] usb 10-1: USB disconnect, device number 10 [ 117.770656][ T56] usblp0: removed [ 117.910198][ T8159] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.962486][ T8164] FAULT_INJECTION: forcing a failure. [ 117.962486][ T8164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.968074][ T8164] CPU: 0 UID: 0 PID: 8164 Comm: syz.1.718 Not tainted syzkaller #0 PREEMPT(full) [ 117.968096][ T8164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.968107][ T8164] Call Trace: [ 117.968113][ T8164] [ 117.968121][ T8164] dump_stack_lvl+0x100/0x190 [ 117.968151][ T8164] should_fail_ex.cold+0x5/0xa [ 117.968175][ T8164] _copy_from_user+0x2e/0xd0 [ 117.968202][ T8164] snd_seq_event_dup+0x6b5/0x8a0 [ 117.968228][ T8164] ? __pfx_snd_seq_event_dup+0x10/0x10 [ 117.968245][ T8164] ? mark_held_locks+0x40/0x70 [ 117.968267][ T8164] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 117.968286][ T8164] ? lockdep_hardirqs_on+0x78/0x100 [ 117.968313][ T8164] snd_seq_client_enqueue_event.constprop.0+0x20b/0x4a0 [ 117.968351][ T8164] ? __pfx_snd_seq_client_enqueue_event.constprop.0+0x10/0x10 [ 117.968384][ T8164] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.968410][ T8164] snd_seq_write+0x388/0x6d0 [ 117.968441][ T8164] ? __pfx_snd_seq_write+0x10/0x10 [ 117.968468][ T8164] ? bpf_lsm_file_permission+0x9/0x10 [ 117.968495][ T8164] ? security_file_permission+0x76/0x210 [ 117.968523][ T8164] ? rw_verify_area+0xce/0x6d0 [ 117.968550][ T8164] vfs_write+0x2aa/0x1050 [ 117.968567][ T8164] ? __pfx_snd_seq_write+0x10/0x10 [ 117.968594][ T8164] ? __pfx_vfs_write+0x10/0x10 [ 117.968607][ T8164] ? find_held_lock+0x2b/0x80 [ 117.968622][ T8164] ? __fget_files+0x215/0x3d0 [ 117.968640][ T8164] ? __fget_files+0x215/0x3d0 [ 117.968662][ T8164] ? __fget_files+0x21f/0x3d0 [ 117.968687][ T8164] ksys_write+0x1f8/0x250 [ 117.968703][ T8164] ? __pfx_ksys_write+0x10/0x10 [ 117.968726][ T8164] do_syscall_64+0x115/0x870 [ 117.968747][ T8164] ? clear_bhb_loop+0x70/0xc0 [ 117.968769][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.968787][ T8164] RIP: 0033:0x7fe3e259e0d9 [ 117.968803][ T8164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.968820][ T8164] RSP: 002b:00007fe3e3451028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.968837][ T8164] RAX: ffffffffffffffda RBX: 00007fe3e2825fa0 RCX: 00007fe3e259e0d9 [ 117.968848][ T8164] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000004 [ 117.968859][ T8164] RBP: 00007fe3e3451090 R08: 0000000000000000 R09: 0000000000000000 [ 117.968869][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.968879][ T8164] R13: 00007fe3e2826038 R14: 00007fe3e2825fa0 R15: 00007ffd62849418 [ 117.968903][ T8164] [ 118.094820][ T56] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 118.108580][ T8166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.719'. [ 118.122277][ T8168] option changes via remount are deprecated (pid=8167 comm=syz.4.720) [ 118.127880][ T8168] cgroup: option or name mismatch, new: 0x0 "noprefix", old: 0x0 "" [ 118.133964][ T8168] netlink: 48 bytes leftover after parsing attributes in process `syz.4.720'. [ 118.264933][ T56] usb 10-1: Using ep0 maxpacket: 8 [ 118.276496][ T56] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 118.282190][ T56] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 118.286342][ T56] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 118.291112][ T56] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 118.296433][ T56] usb 10-1: config 250 has no interface number 0 [ 118.299212][ T56] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 118.303881][ T56] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 118.308651][ T56] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 118.312623][ T56] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 118.316655][ T56] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 118.321619][ T56] usb 10-1: config 250 interface 228 has no altsetting 0 [ 118.325819][ T56] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 118.328473][ T56] usb 10-1: Product: syz [ 118.329866][ T56] usb 10-1: SerialNumber: syz [ 118.335813][ T56] hub 10-1:250.228: bad descriptor, ignoring hub [ 118.337913][ T56] hub 10-1:250.228: probe with driver hub failed with error -5 [ 118.537470][ T56] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 118.554947][ T56] usb 10-1: USB disconnect, device number 11 [ 118.559949][ T56] usblp0: removed [ 119.066423][ T8183] loop5: detected capacity change from 0 to 2640 [ 119.107786][ T8183] loop5: detected capacity change from 2640 to 524287999 [ 119.373319][ T8206] syzkaller0: entered promiscuous mode [ 119.376409][ T8206] syzkaller0: entered allmulticast mode [ 119.735843][ T42] kauditd_printk_skb: 252 callbacks suppressed [ 119.735856][ T42] audit: type=1400 audit(1786295176.440:3828): avc: denied { map_read map_write } for pid=8203 comm="syz.5.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 119.800906][ T42] audit: type=1400 audit(1786295176.500:3829): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 119.833900][ T42] audit: type=1400 audit(1786295176.530:3830): avc: denied { read write } for pid=8213 comm="syz.1.734" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.844176][ T42] audit: type=1400 audit(1786295176.530:3831): avc: denied { open } for pid=8213 comm="syz.1.734" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.852368][ T42] audit: type=1400 audit(1786295176.530:3832): avc: denied { ioctl } for pid=8213 comm="syz.1.734" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.892038][ T42] audit: type=1400 audit(1786295176.590:3833): avc: denied { name_bind } for pid=8215 comm="syz.3.735" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 119.898996][ T42] audit: type=1400 audit(1786295176.590:3834): avc: denied { node_bind } for pid=8215 comm="syz.3.735" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 119.905835][ T42] audit: type=1400 audit(1786295176.600:3835): avc: denied { create } for pid=8215 comm="syz.3.735" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.916278][ T42] audit: type=1400 audit(1786295176.600:3836): avc: denied { map } for pid=8215 comm="syz.3.735" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.927969][ T42] audit: type=1400 audit(1786295176.600:3837): avc: denied { read write } for pid=8215 comm="syz.3.735" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 120.084798][ T5833] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 120.203214][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.738'. [ 120.206147][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.738'. [ 120.218616][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 120.234781][ T5833] usb 6-1: device descriptor read/64, error -71 [ 120.296075][ T8226] netlink: 'syz.5.739': attribute type 49 has an invalid length. [ 120.476763][ T5833] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 120.614740][ T5833] usb 6-1: device descriptor read/64, error -71 [ 120.726043][ T5833] usb usb6-port1: attempt power cycle [ 120.729758][ T8250] xt_hashlimit: max too large, truncated to 1048576 [ 121.084811][ T5833] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 121.105650][ T5833] usb 6-1: device descriptor read/8, error -71 [ 121.197886][ T8216] Set syz1 is full, maxelem 65536 reached [ 121.230585][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 121.233395][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 121.233976][ T8264] sock: sock_set_timeout: `syz.4.755' (pid 8264) tries to set negative timeout [ 121.323971][ T8273] FAULT_INJECTION: forcing a failure. [ 121.323971][ T8273] name failslab, interval 1, probability 0, space 0, times 0 [ 121.328706][ T8273] CPU: 0 UID: 0 PID: 8273 Comm: syz.3.760 Not tainted syzkaller #0 PREEMPT(full) [ 121.328722][ T8273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.328729][ T8273] Call Trace: [ 121.328740][ T8273] [ 121.328745][ T8273] dump_stack_lvl+0x100/0x190 [ 121.328816][ T8273] should_fail_ex.cold+0x5/0xa [ 121.328839][ T8273] should_failslab+0xc2/0x120 [ 121.328873][ T8273] kmem_cache_alloc_noprof+0x91/0x6a0 [ 121.328888][ T8273] ? hashtab_duplicate+0x225/0x5c0 [ 121.328931][ T8273] hashtab_duplicate+0x225/0x5c0 [ 121.328948][ T8273] ? __pfx_cond_bools_copy+0x10/0x10 [ 121.328964][ T8273] ? __pfx_cond_bools_destroy+0x10/0x10 [ 121.328979][ T8273] cond_policydb_dup+0x155/0x750 [ 121.328994][ T8273] ? security_set_bools+0x115/0x6c0 [ 121.329008][ T8273] ? __asan_memcpy+0x3c/0x60 [ 121.329020][ T8273] security_set_bools+0x13f/0x6c0 [ 121.329036][ T8273] ? sel_commit_bools_write+0x25b/0x420 [ 121.329052][ T8273] sel_commit_bools_write+0x36d/0x420 [ 121.329067][ T8273] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 121.329086][ T8273] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 121.329101][ T8273] vfs_writev+0x5ed/0xdd0 [ 121.329124][ T8273] ? __pfx_vfs_writev+0x10/0x10 [ 121.329141][ T8273] ? rcu_read_lock_any_held+0x6a/0xa0 [ 121.329168][ T8273] ? __fget_files+0x21f/0x3d0 [ 121.329184][ T8273] ? do_writev+0x13e/0x340 [ 121.329200][ T8273] do_writev+0x13e/0x340 [ 121.329217][ T8273] ? __pfx_do_writev+0x10/0x10 [ 121.329238][ T8273] do_syscall_64+0x115/0x870 [ 121.329257][ T8273] ? clear_bhb_loop+0x70/0xc0 [ 121.329272][ T8273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.329284][ T8273] RIP: 0033:0x7fa6d1f9e0d9 [ 121.329293][ T8273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.329305][ T8273] RSP: 002b:00007fa6d2df5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 121.329317][ T8273] RAX: ffffffffffffffda RBX: 00007fa6d2225fa0 RCX: 00007fa6d1f9e0d9 [ 121.329324][ T8273] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 121.329331][ T8273] RBP: 00007fa6d2df5090 R08: 0000000000000000 R09: 0000000000000000 [ 121.329337][ T8273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.329343][ T8273] R13: 00007fa6d2226038 R14: 00007fa6d2225fa0 R15: 00007ffc44a75f48 [ 121.329358][ T8273] [ 121.342445][ T8274] xt_hashlimit: size too large, truncated to 1048576 [ 121.356706][ T5833] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 121.359613][ T8274] xt_hashlimit: invalid interval [ 121.385162][ T5833] usb 6-1: device descriptor read/8, error -71 [ 121.404192][ T8276] /dev/sr0: Can't open blockdev [ 121.407223][ T2320] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x103) [ 121.534847][ T5833] usb usb6-port1: unable to enumerate USB device [ 121.673687][ T8286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.765'. [ 122.464543][ T8274] ------------[ cut here ]------------ [ 122.466895][ T8274] [CRTC:39:crtc-0] vblank wait timed out [ 122.469199][ T8274] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1921 at drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0, CPU#3: syz.5.759/8274 [ 122.474911][ T8274] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 122.478368][ T8274] CPU: 3 UID: 0 PID: 8274 Comm: syz.5.759 Not tainted syzkaller #0 PREEMPT(full) [ 122.482319][ T8274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.486534][ T8274] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 122.489791][ T8274] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d 48 de 5f 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 93 10 3d fc e9 7c fe ff ff e8 99 [ 122.497705][ T8274] RSP: 0018:ffffc90007967710 EFLAGS: 00010246 [ 122.500206][ T8274] RAX: 0000000000000000 RBX: ffff888028340040 RCX: 1ffff11005068022 [ 122.503439][ T8274] RDX: ffff888027e6cb20 RSI: 0000000000000027 RDI: ffffffff912d4120 [ 122.506995][ T8274] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 122.510334][ T8274] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 122.513506][ T8274] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888047858900 [ 122.516848][ T8274] FS: 00007f4f4dac36c0(0000) GS:ffff8880d60ec000(0000) knlGS:0000000000000000 [ 122.520542][ T8274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.523368][ T8274] CR2: 000000110c3f7b2f CR3: 000000003c996000 CR4: 0000000000352ef0 [ 122.526721][ T8274] Call Trace: [ 122.528179][ T8274] [ 122.529406][ T8274] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 122.532607][ T8274] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 122.535183][ T8274] ? lockdep_hardirqs_on+0x78/0x100 [ 122.537403][ T8274] ? __pfx_autoremove_wake_function+0x10/0x10 [ 122.539751][ T8274] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 122.541974][ T8274] drm_atomic_helper_commit_tail+0xff/0x130 [ 122.543851][ T8274] commit_tail+0x338/0x430 [ 122.545402][ T8274] drm_atomic_helper_commit+0x303/0x380 [ 122.547753][ T8274] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 122.550336][ T8274] drm_atomic_commit+0x230/0x300 [ 122.552465][ T8274] ? __pfx_drm_atomic_commit+0x10/0x10 [ 122.555014][ T8274] ? __pfx___drm_printfn_info+0x10/0x10 [ 122.557352][ T8274] ? drm_atomic_commit_init+0x2d6/0x490 [ 122.559667][ T8274] drm_atomic_helper_set_config+0x13a/0x190 [ 122.562282][ T8274] drm_mode_setcrtc+0xeca/0x1d50 [ 122.564323][ T8274] ? avc_has_extended_perms+0x484/0x1080 [ 122.566703][ T8274] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 122.568948][ T8274] ? drm_is_current_master+0x2c/0x40 [ 122.571237][ T8274] ? drm_is_current_master+0x2c/0x40 [ 122.573448][ T8274] ? do_raw_spin_unlock+0x145/0x1e0 [ 122.575769][ T8274] drm_ioctl_kernel+0x1f3/0x3e0 [ 122.577865][ T8274] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 122.580140][ T8274] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 122.582384][ T8274] drm_ioctl+0x5e6/0xc60 [ 122.584168][ T8274] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 122.586525][ T8274] ? __pfx_drm_ioctl+0x10/0x10 [ 122.588555][ T8274] ? selinux_file_ioctl+0x13b/0x290 [ 122.590736][ T8274] ? selinux_file_ioctl+0xb6/0x290 [ 122.592844][ T8274] ? __pfx_drm_ioctl+0x10/0x10 [ 122.594937][ T8274] __x64_sys_ioctl+0x18e/0x210 [ 122.596941][ T8274] do_syscall_64+0x115/0x870 [ 122.598884][ T8274] ? clear_bhb_loop+0x70/0xc0 [ 122.600874][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.603352][ T8274] RIP: 0033:0x7f4f4cb9e0d9 [ 122.605336][ T8274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.613232][ T8274] RSP: 002b:00007f4f4dac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.616767][ T8274] RAX: ffffffffffffffda RBX: 00007f4f4ce25fa0 RCX: 00007f4f4cb9e0d9 [ 122.620036][ T8274] RDX: 0000200000000240 RSI: 00000000c06864a2 RDI: 0000000000000006 [ 122.623318][ T8274] RBP: 00007f4f4cc35024 R08: 0000000000000000 R09: 0000000000000000 [ 122.626849][ T8274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.630223][ T8274] R13: 00007f4f4ce26038 R14: 00007f4f4ce25fa0 R15: 00007ffc0aa0e6a8 [ 122.633499][ T8274] [ 122.634946][ T8274] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 122.637954][ T8274] CPU: 3 UID: 0 PID: 8274 Comm: syz.5.759 Not tainted syzkaller #0 PREEMPT(full) [ 122.641718][ T8274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.645844][ T8274] Call Trace: [ 122.647281][ T8274] [ 122.648532][ T8274] dump_stack_lvl+0x100/0x190 [ 122.650549][ T8274] vpanic+0x552/0x970 [ 122.652268][ T8274] ? __pfx_vpanic+0x10/0x10 [ 122.654190][ T8274] panic+0xd1/0xe0 [ 122.655778][ T8274] ? __pfx_panic+0x10/0x10 [ 122.657692][ T8274] check_panic_on_warn.cold+0x19/0x34 [ 122.659914][ T8274] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 122.662916][ T8274] __warn.cold+0x191/0x318 [ 122.664868][ T8274] __report_bug+0x30f/0x440 [ 122.666759][ T8274] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 122.669675][ T8274] ? __pfx___report_bug+0x10/0x10 [ 122.671849][ T8274] ? lockdep_hardirqs_on+0x78/0x100 [ 122.674067][ T8274] report_bug_entry+0xe1/0x290 [ 122.676095][ T8274] ? drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 122.679121][ T8274] handle_bug+0x1cd/0x2a0 [ 122.680964][ T8274] exc_invalid_op+0x17/0x50 [ 122.682907][ T8274] asm_exc_invalid_op+0x1a/0x20 [ 122.684954][ T8274] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 122.688193][ T8274] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d 48 de 5f 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 93 10 3d fc e9 7c fe ff ff e8 99 [ 122.696127][ T8274] RSP: 0018:ffffc90007967710 EFLAGS: 00010246 [ 122.698682][ T8274] RAX: 0000000000000000 RBX: ffff888028340040 RCX: 1ffff11005068022 [ 122.701953][ T8274] RDX: ffff888027e6cb20 RSI: 0000000000000027 RDI: ffffffff912d4120 [ 122.705199][ T8274] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 122.708459][ T8274] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 122.711708][ T8274] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888047858900 [ 122.714950][ T8274] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 122.718040][ T8274] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 122.720455][ T8274] ? lockdep_hardirqs_on+0x78/0x100 [ 122.722736][ T8274] ? __pfx_autoremove_wake_function+0x10/0x10 [ 122.725262][ T8274] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 122.727996][ T8274] drm_atomic_helper_commit_tail+0xff/0x130 [ 122.730523][ T8274] commit_tail+0x338/0x430 [ 122.732444][ T8274] drm_atomic_helper_commit+0x303/0x380 [ 122.734774][ T8274] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 122.737292][ T8274] drm_atomic_commit+0x230/0x300 [ 122.739360][ T8274] ? __pfx_drm_atomic_commit+0x10/0x10 [ 122.741655][ T8274] ? __pfx___drm_printfn_info+0x10/0x10 [ 122.743917][ T8274] ? drm_atomic_commit_init+0x2d6/0x490 [ 122.746210][ T8274] drm_atomic_helper_set_config+0x13a/0x190 [ 122.748704][ T8274] drm_mode_setcrtc+0xeca/0x1d50 [ 122.750822][ T8274] ? avc_has_extended_perms+0x484/0x1080 [ 122.753182][ T8274] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 122.755457][ T8274] ? drm_is_current_master+0x2c/0x40 [ 122.757706][ T8274] ? drm_is_current_master+0x2c/0x40 [ 122.759925][ T8274] ? do_raw_spin_unlock+0x145/0x1e0 [ 122.762220][ T8274] drm_ioctl_kernel+0x1f3/0x3e0 [ 122.764249][ T8274] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 122.766499][ T8274] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 122.768748][ T8274] drm_ioctl+0x5e6/0xc60 [ 122.770520][ T8274] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 122.772626][ T8274] ? __pfx_drm_ioctl+0x10/0x10 [ 122.774674][ T8274] ? selinux_file_ioctl+0x13b/0x290 [ 122.776852][ T8274] ? selinux_file_ioctl+0xb6/0x290 [ 122.779016][ T8274] ? __pfx_drm_ioctl+0x10/0x10 [ 122.781064][ T8274] __x64_sys_ioctl+0x18e/0x210 [ 122.783128][ T8274] do_syscall_64+0x115/0x870 [ 122.785099][ T8274] ? clear_bhb_loop+0x70/0xc0 [ 122.787120][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.789690][ T8274] RIP: 0033:0x7f4f4cb9e0d9 [ 122.791614][ T8274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.799539][ T8274] RSP: 002b:00007f4f4dac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.802411][ T8274] RAX: ffffffffffffffda RBX: 00007f4f4ce25fa0 RCX: 00007f4f4cb9e0d9 [ 122.805302][ T8274] RDX: 0000200000000240 RSI: 00000000c06864a2 RDI: 0000000000000006 [ 122.808566][ T8274] RBP: 00007f4f4cc35024 R08: 0000000000000000 R09: 0000000000000000 [ 122.811885][ T8274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.815197][ T8274] R13: 00007f4f4ce26038 R14: 00007f4f4ce25fa0 R15: 00007ffc0aa0e6a8 [ 122.818498][ T8274] [ 122.820561][ T8274] Kernel Offset: disabled [ 122.822428][ T8274] Rebooting in 86400 seconds..