last executing test programs: 2m4.881460403s ago: executing program 0 (id=562): openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1081, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000580)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000a80)={[&(0x7f0000000a40)='.^*%$\'-\\:\x00']}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c1200001300010029bd7000f8dbdf2500000000", @ANYRES32=r1, @ANYBLOB="07300000090400000a000100aaaaaaaaaa1b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x0) 2m4.766283402s ago: executing program 0 (id=565): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x141400, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/129, 0x81}, {0x0, 0x31}], 0x2, 0x40000005, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/acm.GS0/console\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='1', 0x1) 2m4.707862565s ago: executing program 0 (id=567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2m4.590971902s ago: executing program 0 (id=570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="7fe611e2966b61ca10128b0c5c7c2befa18295c9448572da7ca4b8896cea02b2b8c5ba11508f8ab958a476cffdf1776f0d05616a061ce2ab4fff787b37388fac23498fefd0ae3ec73aeb9418c2331344a5f67580d7e6bd8173a5688cb990c4a08dc2d02aec0b46fcf356b930c4bee997e33b4e2cd39118f3a5addbf95fdc"], 0x74}, 0x1, 0x0, 0x0, 0x100408c3}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8009}}, './file0\x00'}) 2m4.585187603s ago: executing program 0 (id=572): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0xa0042, 0x101, 0xd}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r0, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x5, 0x6], [0x9d8, 0x5, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x8, 0x7, 0xfffffffffffffffa, 0x81, 0xff, 0x40005, 0x931, 0x4, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x4, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x8, 0x8, 0x8000, 0x8000010000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7ffffffb, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82f, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x9, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x400000016d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x2, 0x0, 0x3, 0x40, 0x80000001, 0x7, 0xe, 0x3]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0xe, 0x4, 0x500, 0xffffffff, 0x188, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x430, 0x430, 0x430, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@ipv6header={{0x28}, {0x17, 0x20, 0x1}}, @common=@srh1={{0x90}, {0x2, 0x6, 0x7, 0x1, 0x3, @dev={0xfe, 0x80, '\x00', 0x1d}, @remote, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0x3a6387957ee1779e], [0xffffff00, 0xff, 0xffffffff, 0xff], 0x810, 0x80}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x1, 'irc-20000\x00'}}, @common=@srh1={{0x90}, {0x84, 0x81, 0xfa, 0xd, 0xfffa, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast2, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffff00, 0xff, 0xffffffff], [0xffffff00, 0xff000000, 0x0, 0xff], 0x40, 0x800}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x4a6, 0x7], 0x5, 0x1, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x85) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/fscaps', 0x40000, 0x111) read$watch_queue(r5, &(0x7f0000000340)=""/155, 0x9b) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x70, 0x30, 0x1, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e34, 0x4, 0x10, 0xffffffa6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 2m4.411110988s ago: executing program 0 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/direction\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='2', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='2', 0x1) timerfd_create(0x0, 0xc0800) openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_num_groups\x00', 0x1, 0x0) write(r3, &(0x7f0000000840)='3', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000940)='dummy_udc.0', 0xb) 1m57.964668258s ago: executing program 2 (id=650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0xc000) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x24802, 0x14a) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x45) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48240, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff2}, {}, {0xb, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x405}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000002c0)={0x407f, 0x5, 0x3, 0xb9fe, 0x9, "ffff5300"}) (async) write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[], 0xbfb3) (async) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000002a00)=[{{&(0x7f0000000700)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000780)="ec36", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=ANY=[], 0x1a0}}], 0x2, 0x4) (async) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)) (async) r9 = syz_open_pts(r7, 0x101000) r10 = dup3(r9, r7, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x17) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000200)={'veth0_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 1m57.679668944s ago: executing program 2 (id=654): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0c00031000ad6ef41e"], 0xf) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 1m57.677873119s ago: executing program 2 (id=656): execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000580)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000a80)={[&(0x7f0000000a40)='.^*%$\'-\\:\x00']}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="bc01330080000000ffffffffffff080211000000f7ab87594b3f00000000000801000100dd7118aae49bd5937bad5fda023b2a5a78c05782f92fe27196352514ed223d61c8fc17d2692f2a2eecd8d55db037f220440957ec558232ad7346e19d0ffba41dae1bdf25fc38ceb7a7a77ac466c2bb6feb8de070b227826541a0d118d508fc18f3cc6f5f98db435cd2d27a5c0ce49292e72bb2dd32681a1a58e3ff43cdadc26f69deb1ef3ede9aec85a6554b2c7cd5af891f933549794b8d0f911ffdaed3ba6833441f94f5721cddaf7e6127b1f68192b4d5902dd5c215d8df43165c4061282fcbe5430fdf2448206d0e1561b338289d64b802476bd7d66916ec22a9ba727a7235efa7d79790006ecf9f6cf9dcdddfd6fc6d331c49964061c06dde5fba9c6d0c3e70ab41f94363dfcae6a3094be521aaeb94d767d83c334beb6c7fb826e4445bc76956fa8925f927e16204df31acbbd681b6d593a68b3b3756ff8a78ffb7134aff566b"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x0) 1m57.617801043s ago: executing program 2 (id=658): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) r0 = socket$unix(0x1, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r2, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x32b28eade3f84e8b, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6000, 0xd, r3, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0xd, {0x0, 0x8, 0xfffffffffffffffd, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x2000, 0x101, r3, r4, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) ppoll(&(0x7f0000000300)=[{r5, 0x221}, {r0, 0x4800}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0c00031000ad6ef41e"], 0xf) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x2b) ptrace$getregset(0x4204, r7, 0x1aa2fbf1d0738491, &(0x7f0000000240)={&(0x7f0000000140)=""/252, 0xfc}) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0x6) 1m57.509890492s ago: executing program 2 (id=659): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m57.236021572s ago: executing program 2 (id=666): execve(0x0, &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000580)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000a80)={[&(0x7f0000000a40)='.^*%$\'-\\:\x00']}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x0) 1m57.174098519s ago: executing program 32 (id=666): execve(0x0, &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000580)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000a80)={[&(0x7f0000000a40)='.^*%$\'-\\:\x00']}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x0) 1m57.130677666s ago: executing program 3 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@updsa={0xf0, 0x1a, 0x1, 0x70bd26, 0x25dfdbff, {{@in=@private=0xa010101, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@multicast1, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x4000000000}, {}, 0x0, 0x20000, 0x2}}, 0xf0}}, 0x20000040) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/timer_list\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)={0x70, r2, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x12}, @NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x81, @device_a, 0x1000, @value=@device_b, 0x5, 0x2, @device_a, 0x3}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x80000000}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/direction\x00', 0x802, 0x82) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000003f000000000000776972656775617264000000040002808fff6e98271de243f7bdb75158c048bbd58d24c585cda37f66eb6e7493aaec"], 0x38}}, 0x0) link(&(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000040)='./my_configfs\x00') r5 = socket(0x1d, 0x2, 0x6) bind$inet(r5, &(0x7f0000000700)={0x1d, 0x4e20, @rand_addr=0x64010100}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private2, @in=@multicast1}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in6}}, &(0x7f00000008c0)=0xe8) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) fcntl$lock(r7, 0x6, &(0x7f0000000100)={0x0, 0x2, 0x3}) fcntl$lock(r7, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x3}) fcntl$lock(r7, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x80000000000005, 0x5}) fcntl$lock(r7, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x6, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x4000000}) ioctl$CDROMRESET(r6, 0x5312) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x3fa, 0x100, 0x70bd27, 0x25dfdbfd, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40) open(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/direction\x00', 0x41, 0x12) 1m57.009773705s ago: executing program 3 (id=672): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/SourceSink.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='dummy_udc.0', 0xb) 1m56.911353415s ago: executing program 3 (id=673): openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x4e24, 0x2, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x6, 0x9, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x2}, 0x8) shutdown(r1, 0x1) (async) sendto$inet6(r3, &(0x7f0000000140)="9f", 0x1, 0x44005, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x11, r2, 0xd0b05000) 1m56.781525999s ago: executing program 3 (id=675): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='tcpci 0x50\n\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='tcpci 0x5', 0x9) 1m56.73438164s ago: executing program 3 (id=677): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/isp1760/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1af4 1', 0x6) 1m56.661370774s ago: executing program 3 (id=678): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/SourceSink.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r4, 0x7, 0x2, r3}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x4, 0x7f, 0x5, 0x1, 0x9, 0x1, 0x7, 0x3, 0x54, 0x7, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0xd, 0x2000000000004, 0xffffffffffffffff, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x1000000000000b32, 0x8d, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5, 0x7, 0xbdf], 0x200000, 0x67a64fa265da9e51}) ioctl$KVM_RUN(r5, 0xae80, 0x0) write(r0, &(0x7f00000003c0)='dummy_udc.0', 0xb) 1m49.385251217s ago: executing program 33 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/direction\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='2', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='2', 0x1) timerfd_create(0x0, 0xc0800) openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_num_groups\x00', 0x1, 0x0) write(r3, &(0x7f0000000840)='3', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000940)='dummy_udc.0', 0xb) 1m41.556759387s ago: executing program 34 (id=678): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/SourceSink.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r4, 0x7, 0x2, r3}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x4, 0x7f, 0x5, 0x1, 0x9, 0x1, 0x7, 0x3, 0x54, 0x7, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0xd, 0x2000000000004, 0xffffffffffffffff, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x1000000000000b32, 0x8d, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5, 0x7, 0xbdf], 0x200000, 0x67a64fa265da9e51}) ioctl$KVM_RUN(r5, 0xae80, 0x0) write(r0, &(0x7f00000003c0)='dummy_udc.0', 0xb) 53.6643579s ago: executing program 1 (id=1452): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0xe, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f54016d1a85a056f5d759ded130e04d528539f3d328973747a75d1f3d000017deb7d6193b3e7772fd29f35239d200000000008000", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) r2 = dup(r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r2, 0x0) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, 0x0, 0x24000002) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x40800, 0x187) 53.268367053s ago: executing program 1 (id=1456): mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x80000, 0x104) 53.094223929s ago: executing program 1 (id=1460): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) openat(r2, &(0x7f0000000440)='product\x00', 0x2, 0x0) 53.011066807s ago: executing program 1 (id=1461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x8}) umount2(&(0x7f0000000340)='./file0\x00', 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r3) write$tun(r0, &(0x7f0000000300)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x9c, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838", "563c538774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e", "02833533ce8152a09040f08bd2892b7233376dcda3f0b6962e66f617", {"2e7c8cbccc480860f94cd609888bc51a", "38a461132eddc6aef8a88f02e0ed7e13"}}}}}}}}}, 0xd6) 52.705167254s ago: executing program 1 (id=1468): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3f6a, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) rt_sigsuspend(&(0x7f00000000c0)={[0x7e44]}, 0x8) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/xfrm_stat\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r4, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3a4dd85c92244fbb}, 0x8010) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmmsg(r0, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001800)="140d", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001b00)='2l', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002ec0)="7f1b2364ae", 0x5}], 0x1}}], 0x3, 0x4000800) sendto$inet(r0, &(0x7f0000000280)="01", 0x100000, 0x88c1, 0x0, 0x0) 52.190580983s ago: executing program 1 (id=1475): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) write(r0, 0x0, 0x0) 52.057941254s ago: executing program 35 (id=1475): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) write(r0, 0x0, 0x0) 3.540257657s ago: executing program 7 (id=1888): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2817\x00', [0x3c8, 0x5, 0x2, 0x8, 0x14000000, 0x0, 0x2f, 0xa, 0xefd, 0x7ffe, 0x9, 0x13, 0x400, 0x2, 0x13, 0xbd55, 0xffffffa7, 0x3c, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0x860, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x3]}) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) 3.479223705s ago: executing program 7 (id=1889): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x14, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c090}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x100, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000002f00090027bd7000fddbdf250400000004001980"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@migrate={0x6c, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in6=@mcast1, @in6=@remote, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x20, 0x1d}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}, [@encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e20, @in=@broadcast}}]}, 0x6c}}, 0x20004040) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e8"], 0xb4}}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r10 = dup(r9) r11 = syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_triestat\x00') ioctl$KVM_GET_EMULATED_CPUID(r8, 0xc008ae09, &(0x7f00000005c0)={0x9, 0x0, [{0x80000000, 0x0, 0x4, 0xfffffffc, 0x1d19, 0x10000, 0x2}, {0x80000000, 0xd1e, 0x6, 0x6b71, 0x1, 0xc, 0xafd1}, {0x40000000, 0xc7, 0x4, 0x46f, 0x9, 0x5, 0x2fe}, {0xd, 0x5, 0x0, 0xb, 0x9, 0x9, 0x101}, {0xc0000000, 0x0, 0x6, 0x80000001, 0x6, 0xc11, 0x4}, {0x1, 0x7, 0x4, 0xc, 0x6, 0x401, 0x9}, {0x2, 0x20, 0x1, 0x5, 0x477de585, 0x9, 0x8}, {0xa, 0x2fe, 0x2, 0x1, 0x0, 0x2, 0x6}, {0xc0000000, 0x9, 0x6, 0x200, 0x7, 0x8}]}) pread64(r11, &(0x7f0000000100)=""/222, 0xde, 0x10200000000014) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@dellink={0x28, 0x11, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1211}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x8000002) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 3.327531079s ago: executing program 7 (id=1892): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, &(0x7f0000000080), 0x80000000, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000004, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x26000, 0x200}) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = fcntl$getown(r1, 0x9) syz_pidfd_open(r2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x40014) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000000) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.981944337s ago: executing program 7 (id=1897): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff) rename(&(0x7f0000000040)='./config/usb_gadget/g1/functions\x00', &(0x7f0000000080)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000900), 0x100) openat(r0, &(0x7f00000000c0)='./config/usb_gadget\x00', 0x2000, 0x2) 2.907968036s ago: executing program 7 (id=1900): mkdir(&(0x7f0000000000)='./mydebug\x00', 0x1ff) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500001c0000000000019078ac1e0001ac1414aa0f84a2ef9a94f877009078e8500081"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180), 0x4) mount(0x0, &(0x7f0000000200)='./mydebug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mydebug/dynamic_debug/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000040)="666913367564635f7063692e633c2b700a14438e43280e9680d659fb103959cedee911b56056dc79ba0000000000000000", 0x31) mkdir(&(0x7f0000000700)='./mysys\x00', 0x1ff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000080)={0x1000, 0x3, 0x3, 0x7, 0x0, "d942c49f2087666cbc9a1fa593d511d35ae8e3", 0x3, 0x400}) mount(0x0, &(0x7f0000000900)='./mysys\x00', &(0x7f0000000a00)='sysfs\x00', 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000240)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, r4, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./mysys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000001700)='0000:00:04.0', 0xc) 2.789907989s ago: executing program 7 (id=1901): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x70800, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000140)={0x1, r2, 'id1\x00'}) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'dt2817\x00', [0x3c8, 0x5, 0x2, 0x8, 0x14000000, 0x0, 0x3, 0xa, 0xefd, 0x7ffe, 0x9, 0x13, 0x400, 0x2, 0x13, 0xbd55, 0xffffffa7, 0x3c, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0x860, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x3]}) ioctl$COMEDI_INSN(r3, 0x8028640c, 0x0) 1.919110578s ago: executing program 4 (id=1912): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004021600080008", 0x65, 0x4000, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 1.56088077s ago: executing program 6 (id=1915): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getnexthop={0x18, 0x76, 0xb0d, 0x0, 0x25dfdbfd, {0x3}}, 0x18}}, 0x0) clock_gettime(0x2, &(0x7f0000000280)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getnexthop={0x18, 0x76, 0xb0d, 0x0, 0x25dfdbfd, {0x3}}, 0x18}}, 0x0) (async) clock_gettime(0x2, &(0x7f0000000280)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) 1.560634093s ago: executing program 6 (id=1916): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f00000001c0)={0x3, 0x1, @stop_pts=0xc7376a4}) rt_sigprocmask(0x1, &(0x7f0000000480)={[0x5]}, &(0x7f00000004c0), 0x8) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9, 0x10000000}) rt_sigsuspend(&(0x7f0000000280)={[0x7ff]}, 0x8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8844}, 0x4000) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x27}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x28000814}, 0x8000) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.039914196s ago: executing program 5 (id=1920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) setuid(0xee01) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000006840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000006800)={&(0x7f00000067c0)={0x28, r7, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xa1, 0x11}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0xc000) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) r10 = fsopen(&(0x7f0000000240)='ubifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000080)=0x3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000006780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006740)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELSETELEM={0x64ac, 0xe, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3d2c, 0x3, 0x0, 0x1, [{0x1148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x111c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x48, 0x1, "b5a39b930482b2db3af1fa799b7f9e1104194362120c6201975e24ba814165a4e9cc2da3989ea2a87b7e07ecec147f0bc45403fabbe9019643f6ede8cec2e3b3c0abd742"}, @NFTA_DATA_VALUE={0xc9, 0x1, "d7faac71bea07fc2add2af28b0e31fbb4a299334cb41f3ec8d29b7623fd588d37856eb695c1e3dda550c739a6a766bc0f4c8f999679a088aad03f330f7bb7d2fd0a31cfbd13440bebc3399a6b73bbc1fdaa0f54d617c577769f2058699b89e562bf5f715528a38c1e18dcde2073b2bc507da17cc55807301717c7cd9fa2e36854f05fe0c5ffa361f0f2264071fbedd1aa1a323cab28d6968ab51746199ca0f0ebaccb26ff51d2d49d66749f637c5b3b9064d7b90df03e31214fb9c193a9edb40801301bf04"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @exthdr={{0xb}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x2be0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_DATA={0x11b0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc1, 0x1, "285c2ad8c735b1e969da072cc512ebf29d7987ad79174b9f9cc216c48a9f94d3865d5a4ce94179757652f3f3e355d27b53e6bc8f280e449d04dc0215a9565ef9684d07e30de815ce0d37cf757a1ef2c011808c51bfdc2e94a2f784031962f2df649ebe3e8bc098f4116c55fe26dfd5752ee6fc5ec1a4ce3f0cc85f1a268807212e3648f550512c89b7f597172ad6dfe4fb53226b57e6752d1616e01e7ba519a3c70f058b46349301a8d6f273cf4dc5f5f9282857e806991b45eef98769"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x32, 0x1, "62443936a6b38f2d1586504c4c07eee63e49769ba3956b0331a890feea02c8333e614202116867ab1b7774bf61da"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x19ec, 0xb, 0x0, 0x1, [{0x194c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x193c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x60, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5a, 0x1, "848fc5bd3365b6277959753af864c816171ee0e3cb2dfc37e5ae467e9cb686154eb21738a9a2bdc417b579bbf1eac8258866ed09ea70303d599628ec3e6e6dd6969ede574c85806c5d3456d88ea41150726b4bbced59"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_MASK={0x180, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x9c, 0x1, "8d1eb9a2739ddbba7cc96f17101cea2de72e9761c8db8dc7f7fce4f3ce599f67d66c7ad157b4d195696cb0a55b471f7bce73307b5e56de03e5bf6b12f7aac9acda4b51e888d0313e0f869095241172993b874b7eca4436a90a390d3f7660ad027ec31e879ff276b7dd09b47172a0e6df7f429ceb9b487fe7d90fc7eb45a098168e865c08c4f82f300fe0b51fcf2370d89d45a4b2351c5490"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_BITWISE_XOR={0x12e4, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf7, 0x1, "c50e0bf5fe30be4ac835b08e7a5095e853694bb377049ace9a8e4d9d0fd766bb908f71a8c502470e4aad10231ad6b08aac290ca93e80ff9c32c045a099ba1536c19e9fd360a77bb8d402b48ddb80f90623cc8c5750796b943584c84a1399e56447c9aace3ca2c3bcc93efa36c5e111c3b2cf00e01380d626f3e9597959159f92778e06944f3607fbe5aa9cdc3e2b65a0940f58a12fd7de84d44770d8526d111451cbe4ed52bf2ce3a63b79715594de694ec8c2b291f741812cc113a73060c2e43f1d6e22a6ebe1da5c22274f24f906427aedec02a02a05a038b7a3b97a99eb399f0f36fb3b05ba09b926c82daafd707a360eea"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xef, 0x1, "cd2237c363b30ec725c1ed186654d6ff887fe2afaa8c577acf44eab8aed1e315a3f088dc25df3e43a076ec756279454d6cfccc49e9bcd6683150c46e4c6061e8191891f17bfa8472af4f16c68aee60099aecbf0d579b5ed5ff8dd4a9c02cb912fc4e32c4ac7ebfe0dd464c5379dd0b3c7c784fe0adc41b21306d1db3304752f6cf9675bbd6540b54948933fae999de7d9f899821f2ebce7bd32d8a02a5be7c6b3eac46e527d1a0c80176f17db4975d5c3c7baa0d06a51159ee1239c5de4118ef2c6a4b48b84550bf5d29ef8b13a7b7a04fc9f961be3a4fe73ce79b5f917b683d6796a47a6d95efe181b7c2"}, @NFTA_DATA_VALUE={0xae, 0x1, "a6f7336bed75d73802e93cc22f42af1b30961bbe8bb8e556e7de97ccec18de3c5aa7025daabe44eb531e2a940b3eaa1aadfe5aeb46582b58bf2cdb83dc1a964aec01d625c2b2216145cfbf146ec920b7161fbf99682db295c417e08134c303f4a43169cee5db959089c11a24f892a4ab6ef4d2516b16f39dd9cc720a74d4096bff1d3c90da5c8cced4fe880cea735b782b4761fa97528c4ea1cd49cbe1b39ecffb8facc379280e8147db"}, @NFTA_DATA_VALUE={0x42, 0x1, "3214805bd6ee652b6ec7cd67452446fa3724d1082c08e9a8dad56728502c50eb1dc9312b94cffbf41c7cf8df51fd209b28df9bcd6b3ca110f10be86e3c3d"}]}, @NFTA_BITWISE_MASK={0x454, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "699da5f3adb30c99ae7777ab036e0e535bab359d5152c58c6c2c1d51029c7385a1315ac8c0c5e3d117f78be517f75473ec1a40f6712977fbad877c3ce5c5645fe63316f38d3ef854367f456a30cc0c0a5e08bf934634c34a514fe335a65da775d0226346ff672d10434c59177093ad9882e7e11c2091262b68951cdcad00567da2286efbf81a238e1d9f5fa9e6e63888927b43ee8a77faf3db421bcf1dfc02bb4960015237e0574474301dd0ff84dd130f1aa92ccacdb760"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x82, 0x1, "d549187304e500d00f4393fa8ecd709a72d12fabf0afac4b7f7373b7ec302f19cf3ddba4752144ffffc1f896c1f2705c6bc1cc2321ad00bf78ae7e30f5d59ccea314354cb183ce5cf4871acaf1dbba7dbd3c590ddf6091b29251a5f51b97c32c01d712fcc67b8b304fd3fafa5deccd2ec63fdb21985475a83634aca613c8"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "8caaab54dbba2f7d3a39b88e05d5109bf70d49d404a0375b9b8ff4d016c745bda62f18e7411906432b52b557f70e55dfd4d2c6d5d020763d2354806959238424870251011bdeba67f86070e3e5ab97a2c506a02ba00d2ba52ad1709353150fcbe73a797db5662c2d6e"}, @NFTA_DATA_VALUE={0x100, 0x1, "5cfe95a04f09da169d646b5b323d8e8314464e17a45b05df7a9191d86c8f7d48e69b0e3ef5806401c20c5b126ad9edafbbb7e6ee09513a68a57145452371589954aa0224a186f83aa9be29c1eb9e67fea12e731684e149036d23a99e92471fb54bad35ac2c98f412f4dda5cf339f0039c35e2509de302dcbdbd4ac70fe56eada7ee6979e8234fa0447212e569a67a0598a2f3bbd19e6d1593ab411864624b6fbf4855bc7a8579604907f8c7198e64a4a40b9c70dcdb117b05205c75ac28877b45064ee1bf144da276b31cbb9814df54ec0fb8e7eb3c8d039fd3744aba0fd861e54734f0f3832100b09ac2ced1aac20a90e990cbca094b2ddd9e65c18"}, @NFTA_DATA_VALUE={0xbf, 0x1, "c0fa4ba8fa5121afbbf4dbf1ba90f8346e3a53fe799625f987c94792900c595d5ec11c895bd6efbd258b663a0017bab8caba2fa42db081368013ff9a09067ef8928b642b953a676769db0616e1b404157726464e86b7b2573c5ab6c03b35a2b663c0c808afa6f8f43d738f6e019c728706438b8c29a6a546839aeacb632c3a9a7022d05abc5d1aafcea7cdea2318a0bec2b937d6aaa23a7cced46a6289896270e70ffdbe4b356f9212955aaa2080fbfa534c46ea2910625f4bfe60"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2748, 0x3, 0x0, 0x1, [{0x1520, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xc0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xba, 0x1, "c62f2165241c1eb36e9744434f7bf1cd071ccde72a378acdaa030db6e83881c6fcc3f08decb30059ee74d77a1ee321897a730bc262ce5ff4f218268478c3a2e3633f2f115360643db973d1612ab7d6866bf046c2b9581830a5dd7a606b2d31a77fe53afd1eee072e7e9e60c920ac7de3e37bcee180e0ee12714e030ef02706df68ff9257abae87204b766c16c3f51b55482399d5c2f66d7f4b9325bca47406c7c8fb80f7f10ed1b3fda13c39fd766829af92d7f11e13"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x284, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x270, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x264, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x50, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x78, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x74, 0x1, "a0033cf6a1f1a00e22331358897ddef81776adeda509452ac9383bfb09fadb888e3ac92ab2c6e7c4aa9dbef479ae0704e01b964f73a0ecbaae968bc013df17d3f33474320c0fe1a26572a21949018d04bb1da0b43d382cfc30ae95e05b711caeafe9c0173faa3492277c5c8aad00f678"}]}, @NFTA_CMP_DATA={0x188, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "daf6"}, @NFTA_DATA_VALUE={0x56, 0x1, "0db225915a5159d0148dfe8b91d77ab3cac537e332c08637ddd028e728216d58a7194fa3e5e42057f8a399a9189dc4301229941d096df36d94db9d98346a478755daf47d4b8ed3b62e37714f5cfb1ecb3d3b"}, @NFTA_DATA_VALUE={0x68, 0x1, "9be9ededac626455ef22677a99ebd776852a518d13d76c65e07d3a60720496940b6618dbe5f85b3a91e4d43a722616658747b6a70232f9f9973472c47b60c947796d3352ccb28986eeb8fdccedcd2f52731a1c398e224501f94b17eb04e25e0c5539bdfd"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_SET_ELEM_KEY={0x1008, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_DATA={0x1ac, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x9036b37ef07debff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x3b, 0x1, "9f197d90ca26b608005cad2eef895d509cef42721de798fad8a5cddb78284308322976b5ac009d82b4134989a9d4247bad9534ea95852b"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffcd1}]}, {0x360, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @tproxy={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, @NFTA_SET_ELEM_KEY={0x310, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa0, 0x1, "dedb0f11f47c6ebcbb0863073dd6843161abea8360aedc1a4fe8b433892fe5f5667d10b2ae7b0c14786365dd021b23bc441f8621dd0eb57cab578ec6792dcc24898c9046f4574dba652011a282375a0b271aa3f13d0ed775f202e32e9d54bd94276ef72b4df3b8e35e121b789589f911da24bb4db5b54c9977717f1b7ffcc323d7e78065769c77e015aec61c7f643b93a6a7ce2bd2833d2d0aec4bfd"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xdf, 0x1, "06bcdb01d5731c837c633deebedd7a626540ec98f7238d657d5d852f7a4d2c766af49e85b870b831158a593ace0dad96a5d79b82166da41836e70a011376349a1195467e0ca3cb66134d9d1be341cd6a1aa4354a3e3f4035d4b6c15ced5c75b78db08b9826c9834946035a27615a31866e60e731dcf3b70df56b0202b27cf50a13c93fb9c7858dce0916e4c30bbd4dad52ae23f2342c6ed83963ea720a684dde889eb6ccdabb5738ccf8b7766886e2082e2758ffad9be99ded5c14477c70e0d350fe5497dc970954e1d38215b68455df5085e0a84e6e9cdb59a76e"}, @NFTA_DATA_VALUE={0x69, 0x1, "caf56c9790fa5ecc904690b8f962c73fce0d9f4480112151f31190da93d2fcb6e7d022cd4a9541534a914489c53cd438b3eaca8b32c3b973bfd55ad656d85207321c65c03b2cbf8ef413312f18cfe18ab47d475addeb65c64975efc0facde7f6977515ef93"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "5dcccd0480574dc5d82a9120ca88a0953ec6cf62096488c84a7e8acedf68d3fb8e98a8606ed581b941d25c583614dc0aabf3d6439e10912e95d632cc4b49d8e074f5598b30bb0431ddc6c18c70d1f2863091c298cd42b663e3c3722ae1fbdfc94be8a7d517c1f3906e9a63b583eb5cd73ae805b3c7e750718fd79e8c393cf4e54e9fb109c4ff9a156e768b"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xdf, 0x6, 0x1, 0x0, "3a15b4cdefefab9ce61c19ad059a1c92dac9d4a33cfe3e5171ee6da07c70cb5a6a98129ed4006815169dccd17cf6f7341826bb7880933a7cae9ad30789bec0a3962930e9ea0e60ed1f601ae00a55a59f3a6e046c06245cb1fef8c30b898d3fc2b64bda92f1eb639ef9fabdf96353909687b5b691eede6feb7b65a99710324b6345e651d3b435865eb677bf6b2af29c827ca2d33fc0ca0ee1ef40501f2bc03b7995503b62bf808459c25331f10580dfc09031612b628c20f921c7fb7beef1609d454c08ffe47c8c551bbaf4e42c5be22a94eda01282316e38b49df0"}]}, {0x7cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x3c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc4, 0x1, "c749b85e6d54a13217670febf1883e558a08c0b89b5028e9ccf31e1c00dd8113f6fccc88a515390e9d5514b2bfaf9d87068fbeac10cdd341a9a760f66bbbecbfd3e88a841e19361cf47c6151e8d47444b02721df12b4374174ea7b14a45bdf6fb991c88328b05e874dc61604681f731dd62751f80b845275c531bb4ab0405ef331f7b392f1b1b31662f2eefb5962af84aabfee18d35c7c0e98f1a7ba944e48ac298e48e2dfce866b28881836f95689262dc8b309f7f4b76b6dc401e409f978d4"}, @NFTA_DATA_VALUE={0x85, 0x1, "6c1227ab9945d8bcd2cd316a43f5fe310a2b3a05541ff83e885057009f384328bcfbd7168bdfa4618722611009fc830d7851972b92c5e2bb767ec276ee0056dfb2940c644251a7d1217c3f64e321bd47effe0ce78e08bb90c298f49dcade65d566ddb7bce2c9b9e7f99ac1fb96e81a7fde0db1d9545304319d0b2782008a067b66"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "6d22631f62f353eb73b5661737295fb491bac2d02c08b71c1fe8a93b1cec954b4428786769a751d05ee7d5c8591bbaf23a7c1842cde14c272d184ac607185480e5645b7059abe9532618e896d9455888ef838d45f2cd2c44863ecc4da9c6185bccc554b2ce3e8a38ba3ff984ce481f5ba492447d132b1e81e17414f87c35845c8262d8165d0d5a47fa1759ff7837decec1be092c9da173718ca4a260dae0e87ec021f32826eca9a018d04782363bf1c536fedbf6e4303c8f0708be4c60b3cfdd4b8c0623adc09d7bb4ff0a4b5d0d4cec96ccf7ce97a24ee33a89ed18a1685a85280cccafca26eb"}, @NFTA_DATA_VALUE={0x24, 0x1, "0249ad4cd759695759a46102240cecf9500cf28232ab91aa5a487bfab983d7b2"}, @NFTA_DATA_VALUE={0x60, 0x1, "71bcb80806aa2352ee1ec6e80bc55e8e0479d468ad87dad4690e0477196a5e5e945ce508a2b9335b1a79803d9904eeb359b6b85d60cb89f7ba7f99e0d7a895c3e3be20c2edbb458c066c0197509474d5030a238976f4c69cc07ea17a"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x45, 0x1, "50a17f2c40ebe7c6b675749a62a3587a861c7673b4cded42418e0650d285ef78d5a314b4a07fe6c367090730ea855b8845910fa361520721744902fbc34c7c2016"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x25c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x313e}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x1f}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x68, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xc}]}}}, {0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x81}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}}}, {0x5c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4c}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xed}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa9}]}}}, {0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x549f1f537365cb64}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x41}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x1a0, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x500e51636d039f67}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x18}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}, {0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}]}}}, {0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}]}]}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, @NFTA_SET_ELEM_USERDATA={0x9f, 0x6, 0x1, 0x0, "d04200abd894ae933c7a3ed62d7af9bc9688a13060f6046529135efa231f448d03fc02b1ef23d51ee90d64fadf04bb15c5a6d22c1b9e64791fae8f73fc6f86a6fdfd6f05d58dfbcb906e57868dbc6270a3aa39222e9cbed15d7165b28432830c6c52d46bf23961a275cc2ef4a8b462732d7760d71dd6bfaab370053a1f4d9e4b14885c4dc843e78c54a9a8de6168d7ddcd76771c74a132188b0c08"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0xe0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xdc, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xa8e}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x60, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x6}]}}}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8beb}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x3e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_DATA={0x3ac, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "fb370b5c0cafe4cbb9b9e940fdc1aa2f8fc4d9e38d151a6955633e52c16839203fd3afcc7493fa352b71acb28ae63fd61ce7cf120bab1535365df3f0f19287c0e38be920e6bcabfeeb50964a76eb6c1a64cb6c7ba200a533a72a0c34b151b923a06c037dce08d2ed338f9e8f096afc71407deb0cacfc26617ee88dd46cdb0498958a6a09dfd4960675af"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x28, 0x1, "e044164f609b7178cce3367d01eb06d92476400a7fc40b51c644c0d4c5c40c9ca6ab7d13"}, @NFTA_DATA_VALUE={0xea, 0x1, "4738c4314352c005e5903cc7123ea36df4d3b9e7ce10445d9d8da3ff3539d068411e99e4f2dab7b67ff4b72bfa5acdb137fc3efd44ad9d765dedf65f10f52cebf9ffc4054dfad4031407aa68a66fd83d7498bbeca4d4fa45f873d896ceb04a173323d550a7853301004bd6cc57b1e6fa2b878e2f1d390a71228e6494cb5449174754b56ed2e67bee26f5a379a7ab7fdab66d6931e3aa1d2c8bae02614bd38423d8d9ba9bb254fa70b31961a791d6e34284d8663017b3f96a47646c4cfb137fcd750588736ced65eb3b1f6d4906e281fdb02c9494580a9c37c4642461099bed39dc2b347d03fe"}, @NFTA_DATA_VALUE={0x85, 0x1, "56026f37f8031c60e070a1e04945c886b86af2475cce37d61c4c0eb16d14fd43ae11c6d8020fd745f979dd4a6d989a7073b372009e2c95baa9cd9a91c2364d2ca94351645cc82a9303ad05fc8f71d2ee53d9a182c76c96de356984b40bc59e9c12fb71d440d3bc8908f06fc195a2f7ba6f56924f85f7b448ff7f651b96243e1f2d"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "3aa17a40a358d57e0e91a2c3668451863b8833cb258b798a3abfd060dd567dc3e050d4f00267b95c2b7fe4ef551222307e892d75179039815fdca81032c577c996cdee5a803d3fcbf050f07fffab4b46b70903a3769e448230b6bfa9207b8d71ac92ce181ba5ad99164cf43da9256b5eedd505155a0c87e2c352de8a12b0e023d2bea5762787e15eb4306d272445060f36dd401a1d62568c31a37adb1501c79d9d551652e2b80c040400dbc9f65452d16a09f813c387223edf825943dd03a839237458fd3e91117fcd14e20bb112eef9f8686e91fa762c0722d5c91d6ba8d1d5866187a9bbbaf3f8a91147af01"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64d4}, 0x1, 0x0, 0x0, 0x81}, 0x5) close(r5) 990.066589ms ago: executing program 4 (id=1921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x28, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x229, 0x4, 0x6}}}}}, 0x0) (fail_nth: 4) 989.151349ms ago: executing program 5 (id=1922): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x1, 0x2}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000040)={0x60, 0x0}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000006c0)=[{0x6, 0x4, 0xfc, 0x7fff0026}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c00a8dd6f200072fc09aed8dbd82b392c3c23d9a6ce013993edb75ef1ee5d6f04c63f2b91591b439429473b7cd761a050b8b0edaae3cd7475e58557aa6d1ddaddde8a5cba474e9a0f1638e1ae230878abcd3752849048ee2e46df8009000000d72349739785ebce94dc00"/119, @ANYRES16=r7, @ANYBLOB="050000000000040000000600000008000300", @ANYRES32=r8, @ANYBLOB="08000500040000000500530000000000"], 0x2c}}, 0xc0c4) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x2d, 0x2, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000140)={r9}) r12 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r11, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x64, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000810) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast1}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 985.873857ms ago: executing program 4 (id=1923): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) write$bt_hci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00010002"], 0x8) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000540)={0x20004, 0x100003, 0x2, {0xb, @vbi={0x58c, 0x3, 0x2000370, 0x35303553, [0xb4ac, 0x2], [0x9, 0x4000003], 0x2}}, 0x9}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000020000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x28c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0xc, 0x21}) close(0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r3, 0x26, 0x0, @val=@iter={0x0}}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00') read$FUSE(r6, &(0x7f00000040c0)={0x2020}, 0x2020) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10) 699.746331ms ago: executing program 5 (id=1924): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) (fail_nth: 4) 561.537742ms ago: executing program 6 (id=1925): syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x64, 0x0, 0xfc, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0x5, 0x1, 0x0, 0xe0, 0x1, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x4, @rand_addr=0x640100fd, @rand_addr=0x50000000, {[@timestamp_prespec={0x44, 0x2c, 0x13, 0x3, 0xb, [{@empty}, {@multicast2, 0x4f}, {@remote, 0x4000}, {@multicast2, 0x81}, {@rand_addr=0x64010102, 0xcc}]}]}}}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conf_req={{0x4, 0x2, 0x4}, {0x2, 0xa44}}]}}, 0x11) 501.079267ms ago: executing program 4 (id=1926): r0 = socket$nl_route(0x10, 0x3, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:De', 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x20c, 0x0, 0x25dfdbff, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}}, 0x20}}, 0x0) 497.484964ms ago: executing program 6 (id=1927): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, &(0x7f0000000080), 0x80000000, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000004, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x26000, 0x200}) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = fcntl$getown(r1, 0x9) syz_pidfd_open(r2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x40014) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 430.943049ms ago: executing program 5 (id=1928): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1e) 368.686122ms ago: executing program 4 (id=1929): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1b6) openat(0xffffffffffffff9c, &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x800, 0x0) (fail_nth: 4) 213.568063ms ago: executing program 5 (id=1930): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = request_key(&(0x7f00000008c0)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000004c0)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xdet|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\\xd3\x03\xfc\xba[b~f\xf3\x88', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001340), 0x0, 0x20000001) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="01"], 0x6) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="e6", 0x1, 0xfffffffffffffffd) request_key(&(0x7f00000005c0)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, &(0x7f0000000080)={0x0, "55e05cb6680cc32a4bfdca1886c5aded253bc9c89ed279cb8757af722fec30f7", 0x5, 0x100, 0x2, 0x7, 0x8, 0x0, 0x75, 0x5}) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f00000063c0)=""/1024, 0x400) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="1185030e7deba3ec69da3c0cce0764c6baa1660000000000000000000000b8000000000000000000", 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var={0x0, 0x0, 0x0, 0xe, 0x0, 0x2}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x4}, {}, {0x0, 0x1}, {}, {}, {}]}, @func={0x3}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x2}, 0x28) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r2, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}]}, 0x0, 0x0, 0x0, 0x0}) 147.941378ms ago: executing program 4 (id=1931): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:1d.7/remove\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1', 0x1) (fail_nth: 4) 147.575203ms ago: executing program 6 (id=1932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000000)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @icmp={{0x24, 0x4, 0x3, 0x7, 0xa4, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote, {[@cipso={0x86, 0x13, 0x2, [{0x3, 0x7, "5f2be7d4be"}, {0x7, 0x6, "ba540b45"}]}, @cipso={0x86, 0x4e, 0x2, [{0x6, 0xe, "ee956a2c0d0e732907907ac5"}, {0x1, 0x5, "190827"}, {0x1, 0xa, "39c21a15ad3b068d"}, {0x2, 0xd, "cd88db23b31cf1fe5c4793"}, {0x1, 0x10, "95a0cf64cf48cfd6f0ac10af6268"}, {0x5, 0xe, "bbf5066d4f871302e1bba28f"}]}, @lsrr={0x83, 0x1b, 0x6d, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x229, 0x4, 0x6}}}}}, 0x0) 170.497µs ago: executing program 6 (id=1933): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x64, 0x0, 0x3, 0x1}, {0x6, 0x0, 0x0, 0x7fffbffd}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x171, 0x171, 0x3, [@var={0xc, 0x0, 0x0, 0xe, 0x3}, @datasec={0x4, 0x7, 0x0, 0xf, 0x1, [{0x1, 0x101, 0xcec}, {0x5, 0x6, 0x1c1}, {0x1, 0x40000, 0xfffffe01}, {0x2, 0x0, 0xf8}, {0x2, 0x8cf, 0x4}, {0x2, 0x7, 0x9}, {0x2, 0x7e4bb1e3, 0x53b}], "f8"}, @fwd={0xa}, @fwd={0x10}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0x4}]}, @enum64={0xa, 0x5, 0x0, 0x13, 0x0, 0x6, [{0x2, 0x7, 0x7}, {0xc, 0x6, 0x2}, {0xc, 0x3, 0x8}, {0x8, 0x9, 0x7}, {0x7, 0x1, 0x5}]}, @struct={0xb, 0xa, 0x0, 0x4, 0x0, 0x8, [{0xa, 0x0, 0x80000000}, {0x0, 0x3, 0x41}, {0xf, 0x4, 0x6}, {0x1, 0x2, 0x6}, {0x6, 0x2, 0x2}, {0x7, 0x1}, {0x0, 0x0, 0x7}, {0x3, 0x2, 0x5}, {0x10, 0x3, 0xf}, {0x8, 0x1, 0x4}]}]}, {0x0, [0x2e]}}, &(0x7f0000000340)=""/187, 0x18f, 0xbb, 0x0, 0x5, 0x10000}, 0x28) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000c00), &(0x7f0000002000)=0x4) 0s ago: executing program 5 (id=1934): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:1d.7/remove\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1', 0x14) kernel console output (not intermixed with test programs): 11047] FAULT_INJECTION: forcing a failure. [ 204.946897][T11047] name failslab, interval 1, probability 0, space 0, times 0 [ 204.959177][T11047] CPU: 2 UID: 0 PID: 11047 Comm: syz.5.1681 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.959195][T11047] Tainted: [L]=SOFTLOCKUP [ 204.959199][T11047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.959206][T11047] Call Trace: [ 204.959210][T11047] [ 204.959215][T11047] dump_stack_lvl+0x100/0x190 [ 204.959234][T11047] should_fail_ex.cold+0x5/0xa [ 204.959250][T11047] should_failslab+0xc2/0x120 [ 204.959266][T11047] __kmalloc_cache_noprof+0x91/0x6c0 [ 204.959283][T11047] ? find_held_lock+0x2b/0x80 [ 204.959300][T11047] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 204.959335][T11047] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 204.959354][T11047] tcp_sendmsg_fastopen+0x24d/0x750 [ 204.959371][T11047] tcp_sendmsg_locked+0x276d/0x44d0 [ 204.959389][T11047] ? __lock_acquire+0x49f/0x1a40 [ 204.959402][T11047] ? __lock_acquire+0x49f/0x1a40 [ 204.959416][T11047] ? sock_has_perm+0x25a/0x2f0 [ 204.959431][T11047] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 204.959446][T11047] ? do_raw_spin_lock+0x128/0x260 [ 204.959462][T11047] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 204.959480][T11047] ? __local_bh_enable_ip+0x9e/0x120 [ 204.959497][T11047] tcp_sendmsg+0x2e/0x50 [ 204.959510][T11047] ? __pfx_tcp_sendmsg+0x10/0x10 [ 204.959523][T11047] inet6_sendmsg+0xb9/0x140 [ 204.959541][T11047] sock_write_iter+0x41a/0x5b0 [ 204.959562][T11047] ? __pfx_sock_write_iter+0x10/0x10 [ 204.959581][T11047] ? bpf_lsm_file_permission+0x9/0x10 [ 204.959598][T11047] ? security_file_permission+0x76/0x210 [ 204.959616][T11047] ? rw_verify_area+0xce/0x6d0 [ 204.959632][T11047] aio_write+0x3ba/0x920 [ 204.959647][T11047] ? __pfx_aio_write+0x10/0x10 [ 204.959659][T11047] ? __lock_acquire+0x49f/0x1a40 [ 204.959680][T11047] ? __might_fault+0xc5/0x140 [ 204.959695][T11047] ? io_submit_one+0x1142/0x1fb0 [ 204.959707][T11047] io_submit_one+0x1142/0x1fb0 [ 204.959722][T11047] ? __lock_acquire+0x49f/0x1a40 [ 204.959737][T11047] ? __pfx_io_submit_one+0x10/0x10 [ 204.959755][T11047] ? __might_fault+0xc5/0x140 [ 204.959768][T11047] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 204.959781][T11047] __x64_sys_io_submit+0x1b1/0x3a0 [ 204.959797][T11047] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 204.959810][T11047] ? fput+0x79/0x100 [ 204.959828][T11047] do_syscall_64+0x115/0x870 [ 204.959840][T11047] ? clear_bhb_loop+0x40/0x90 [ 204.959853][T11047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.959864][T11047] RIP: 0033:0x7fc315f9de99 [ 204.959875][T11047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.959885][T11047] RSP: 002b:00007fc316dd0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 204.959897][T11047] RAX: ffffffffffffffda RBX: 00007fc316225fa0 RCX: 00007fc315f9de99 [ 204.959904][T11047] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 00007fc316daf000 [ 204.959910][T11047] RBP: 00007fc316dd0090 R08: 0000000000000000 R09: 0000000000000000 [ 204.959917][T11047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.959923][T11047] R13: 00007fc316226038 R14: 00007fc316225fa0 R15: 00007ffe0d2dc118 [ 204.959937][T11047] [ 204.977345][ T150] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 205.091409][ T42] kauditd_printk_skb: 763 callbacks suppressed [ 205.091421][ T42] audit: type=1800 audit(2000000110.089:2202): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1682" name="dwFrameInterval" dev="configfs" ino=40014 res=0 errno=0 [ 205.154429][ T150] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.162161][ T150] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.172352][ T150] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.182007][ T150] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.195129][ T150] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.217486][ T150] usb 9-1: config 0 descriptor?? [ 205.385777][ T42] audit: type=1400 audit(2000000110.379:2203): avc: denied { create } for pid=11053 comm="syz.5.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 205.547730][T11067] Mount JFS Failure: -5 [ 205.559135][T11067] jfs_mount failed w/return code = -5 [ 205.641020][ T150] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 205.643360][ T150] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 205.648429][ T150] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 205.656193][ T150] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 205.659934][ T150] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 205.667921][ T150] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 205.672047][ T150] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 205.679405][ T150] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 205.683396][ T150] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 205.689383][ T150] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 205.707274][ T150] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 205.954620][ T150] usb 9-1: USB disconnect, device number 15 [ 206.079259][T11081] ceph: Path missing in source [ 206.098265][T11089] CIFS mount error: No usable UNC path provided in device string! [ 206.098265][T11089] [ 206.124816][T11089] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 206.146479][T11089] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1694'. [ 206.163480][T11089] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.350269][T11095] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 206.352242][T11095] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 206.354928][ T42] audit: type=1400 audit(2000000111.349:2204): avc: denied { listen } for pid=11092 comm="syz.7.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.370503][T11095] vhci_hcd vhci_hcd.0: Device attached [ 206.386754][T11095] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(9) [ 206.388742][T11095] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.393288][T11095] vhci_hcd vhci_hcd.0: Device attached [ 206.396276][T11098] vhci_hcd: connection closed [ 206.396531][ T5834] vhci_hcd vhci_hcd.5: stop threads [ 206.396779][T11096] vhci_hcd: connection closed [ 206.398025][ T5834] vhci_hcd vhci_hcd.5: release socket [ 206.413516][ T5834] vhci_hcd vhci_hcd.5: disconnect device [ 206.440845][ T5834] vhci_hcd vhci_hcd.5: stop threads [ 206.449612][ T5834] vhci_hcd vhci_hcd.5: release socket [ 206.453960][ T5834] vhci_hcd vhci_hcd.5: disconnect device [ 206.604247][T11100] lo speed is unknown, defaulting to 1000 [ 206.610794][ T42] audit: type=1400 audit(2000000111.609:2205): avc: denied { name_connect } for pid=11083 comm="syz.6.1693" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 207.018159][ T42] audit: type=1400 audit(2000000112.019:2206): avc: denied { shutdown } for pid=11109 comm="syz.5.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.028496][T11100] lo speed is unknown, defaulting to 1000 [ 207.046179][T11112] FAULT_INJECTION: forcing a failure. [ 207.046179][T11112] name failslab, interval 1, probability 0, space 0, times 0 [ 207.071111][T11112] CPU: 0 UID: 0 PID: 11112 Comm: syz.4.1701 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.071142][T11112] Tainted: [L]=SOFTLOCKUP [ 207.071149][T11112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.071166][T11112] Call Trace: [ 207.071172][T11112] [ 207.071178][T11112] dump_stack_lvl+0x100/0x190 [ 207.071196][T11112] should_fail_ex.cold+0x5/0xa [ 207.071210][T11112] should_failslab+0xc2/0x120 [ 207.071239][T11112] __kmalloc_cache_noprof+0x91/0x6c0 [ 207.071257][T11112] ? proc_self_get_link+0xf9/0x1f0 [ 207.071270][T11112] proc_self_get_link+0xf9/0x1f0 [ 207.071282][T11112] pick_link+0xd17/0x13c0 [ 207.071296][T11112] ? selinux_inode_permission+0x14a/0x1130 [ 207.071331][T11112] ? __pfx_proc_self_get_link+0x10/0x10 [ 207.071344][T11112] step_into_slowpath+0x9ba/0xf90 [ 207.071363][T11112] ? __pfx_step_into_slowpath+0x10/0x10 [ 207.071382][T11112] ? lookup_fast+0x2da/0x600 [ 207.071396][T11112] ? inode_permission+0x374/0x620 [ 207.071412][T11112] link_path_walk+0xf28/0x1cc0 [ 207.071433][T11112] path_openat+0x1c9/0x4280 [ 207.071444][T11112] ? __kasan_slab_alloc+0x89/0x90 [ 207.071457][T11112] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 207.071468][T11112] ? do_getname+0x35/0x390 [ 207.071481][T11112] ? __x64_sys_openat+0x12d/0x210 [ 207.071499][T11112] ? __pfx_path_openat+0x10/0x10 [ 207.071516][T11112] do_file_open+0x20e/0x430 [ 207.071534][T11112] ? __pfx_do_file_open+0x10/0x10 [ 207.071568][T11112] ? alloc_fd+0x471/0x7a0 [ 207.071590][T11112] ? do_getname+0x191/0x390 [ 207.071613][T11112] do_sys_openat2+0x10f/0x1e0 [ 207.071635][T11112] ? __pfx_do_sys_openat2+0x10/0x10 [ 207.071658][T11112] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 207.071679][T11112] ? __fget_files+0x21f/0x3d0 [ 207.071701][T11112] __x64_sys_openat+0x12d/0x210 [ 207.071724][T11112] ? __pfx___x64_sys_openat+0x10/0x10 [ 207.071745][T11112] ? ksys_write+0x1ac/0x250 [ 207.071779][T11112] do_syscall_64+0x115/0x870 [ 207.071796][T11112] ? clear_bhb_loop+0x40/0x90 [ 207.071817][T11112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.071837][T11112] RIP: 0033:0x7f32df39de99 [ 207.071851][T11112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.071862][T11112] RSP: 002b:00007f32e0215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 207.071874][T11112] RAX: ffffffffffffffda RBX: 00007f32df625fa0 RCX: 00007f32df39de99 [ 207.071881][T11112] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 207.071888][T11112] RBP: 00007f32e0215090 R08: 0000000000000000 R09: 0000000000000000 [ 207.071894][T11112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.071901][T11112] R13: 00007f32df626038 R14: 00007f32df625fa0 R15: 00007ffd8fe91618 [ 207.071915][T11112] [ 207.255716][T11117] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 207.258263][T11117] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 207.263970][T11117] vhci_hcd vhci_hcd.0: Device attached [ 207.274765][T11122] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10) [ 207.277328][T11122] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.279972][T11122] vhci_hcd vhci_hcd.0: Device attached [ 207.287058][T11117] FAULT_INJECTION: forcing a failure. [ 207.287058][T11117] name failslab, interval 1, probability 0, space 0, times 0 [ 207.303055][T11128] FAULT_INJECTION: forcing a failure. [ 207.303055][T11128] name failslab, interval 1, probability 0, space 0, times 0 [ 207.307558][T11117] CPU: 0 UID: 0 PID: 11117 Comm: syz.5.1702 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.307583][T11117] Tainted: [L]=SOFTLOCKUP [ 207.307588][T11117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.307597][T11117] Call Trace: [ 207.307602][T11117] [ 207.307609][T11117] dump_stack_lvl+0x100/0x190 [ 207.307632][T11117] should_fail_ex.cold+0x5/0xa [ 207.307648][T11117] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 207.307685][T11117] should_failslab+0xc2/0x120 [ 207.307705][T11117] kmem_cache_alloc_noprof+0x91/0x6a0 [ 207.307723][T11117] ? skb_clone+0x190/0x400 [ 207.307743][T11117] skb_clone+0x190/0x400 [ 207.307761][T11117] netlink_deliver_tap+0xaed/0xcc0 [ 207.307787][T11117] netlink_unicast+0x62b/0x850 [ 207.307804][T11117] ? __pfx_netlink_unicast+0x10/0x10 [ 207.307832][T11117] netlink_sendmsg+0x8b0/0xda0 [ 207.307849][T11117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.307864][T11117] ? selinux_socket_sendmsg+0x198/0x2f0 [ 207.307889][T11117] sock_write_iter+0x53a/0x5b0 [ 207.307909][T11117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.307923][T11117] ? __pfx_sock_write_iter+0x10/0x10 [ 207.307952][T11117] ? bpf_lsm_file_permission+0x9/0x10 [ 207.307978][T11117] ? security_file_permission+0x76/0x210 [ 207.308008][T11117] ? rw_verify_area+0xce/0x6d0 [ 207.308030][T11117] vfs_write+0x6ac/0x1050 [ 207.308052][T11117] ? __pfx_sock_write_iter+0x10/0x10 [ 207.308074][T11117] ? __pfx_vfs_write+0x10/0x10 [ 207.308094][T11117] ? find_held_lock+0x2b/0x80 [ 207.308129][T11117] ksys_write+0x1f8/0x250 [ 207.308150][T11117] ? __pfx_ksys_write+0x10/0x10 [ 207.308182][T11117] do_syscall_64+0x115/0x870 [ 207.308199][T11117] ? clear_bhb_loop+0x40/0x90 [ 207.308216][T11117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.308231][T11117] RIP: 0033:0x7fc315f9de99 [ 207.308245][T11117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.308259][T11117] RSP: 002b:00007fc316dd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.308274][T11117] RAX: ffffffffffffffda RBX: 00007fc316225fa0 RCX: 00007fc315f9de99 [ 207.308283][T11117] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000005 [ 207.308292][T11117] RBP: 00007fc316dd0090 R08: 0000000000000000 R09: 0000000000000000 [ 207.308300][T11117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.308309][T11117] R13: 00007fc316226038 R14: 00007fc316225fa0 R15: 00007ffe0d2dc118 [ 207.308329][T11117] [ 207.408580][T11124] vhci_hcd: connection closed [ 207.408806][T11118] vhci_hcd: connection closed [ 207.415168][ T5834] vhci_hcd vhci_hcd.5: stop threads [ 207.420064][ T5834] vhci_hcd vhci_hcd.5: release socket [ 207.421798][ T5834] vhci_hcd vhci_hcd.5: disconnect device [ 207.426555][ T5834] vhci_hcd vhci_hcd.5: stop threads [ 207.430043][ T5834] vhci_hcd vhci_hcd.5: release socket [ 207.436165][ T5834] vhci_hcd vhci_hcd.5: disconnect device [ 207.446450][T11128] CPU: 2 UID: 0 PID: 11128 Comm: syz.4.1704 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.446481][T11128] Tainted: [L]=SOFTLOCKUP [ 207.446486][T11128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.446492][T11128] Call Trace: [ 207.446497][T11128] [ 207.446502][T11128] dump_stack_lvl+0x100/0x190 [ 207.446520][T11128] should_fail_ex.cold+0x5/0xa [ 207.446534][T11128] ? __pfx___uvcg_fill_item_entries+0x10/0x10 [ 207.446546][T11128] should_failslab+0xc2/0x120 [ 207.446560][T11128] ? __pfx___uvcg_fill_item_entries+0x10/0x10 [ 207.446571][T11128] __kmalloc_noprof+0xfc/0x820 [ 207.446583][T11128] ? rcu_is_watching+0x12/0xc0 [ 207.446600][T11128] ? __uvcg_iter_item_entries+0x5a/0x350 [ 207.446615][T11128] ? __pfx___uvcg_fill_item_entries+0x10/0x10 [ 207.446625][T11128] __uvcg_iter_item_entries+0x5a/0x350 [ 207.446638][T11128] ? __pfx___uvcg_fill_item_entries+0x10/0x10 [ 207.446651][T11128] uvcg_frame_dw_frame_interval_store+0x325/0x4b0 [ 207.446667][T11128] ? __pfx_uvcg_frame_dw_frame_interval_store+0x10/0x10 [ 207.446684][T11128] ? configfs_write_iter+0x388/0x4e0 [ 207.446699][T11128] configfs_write_iter+0x302/0x4e0 [ 207.446713][T11128] vfs_write+0x6ac/0x1050 [ 207.446730][T11128] ? __pfx_configfs_write_iter+0x10/0x10 [ 207.446744][T11128] ? __pfx_vfs_write+0x10/0x10 [ 207.446770][T11128] ksys_write+0x12a/0x250 [ 207.446787][T11128] ? __pfx_ksys_write+0x10/0x10 [ 207.446807][T11128] do_syscall_64+0x115/0x870 [ 207.446819][T11128] ? clear_bhb_loop+0x40/0x90 [ 207.446832][T11128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.446844][T11128] RIP: 0033:0x7f32df39de99 [ 207.446854][T11128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.446864][T11128] RSP: 002b:00007f32e0215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.446875][T11128] RAX: ffffffffffffffda RBX: 00007f32df625fa0 RCX: 00007f32df39de99 [ 207.446882][T11128] RDX: 0000000000000003 RSI: 0000200000000a00 RDI: 0000000000000003 [ 207.446889][T11128] RBP: 00007f32e0215090 R08: 0000000000000000 R09: 0000000000000000 [ 207.446895][T11128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.446901][T11128] R13: 00007f32df626038 R14: 00007f32df625fa0 R15: 00007ffd8fe91618 [ 207.446916][T11128] [ 207.531184][ T24] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 207.622448][T11137] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 207.625055][T11137] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 207.658612][T11137] vhci_hcd vhci_hcd.0: Device attached [ 207.704585][T11137] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(13) [ 207.706947][T11137] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.710381][ T56] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 207.736026][T11137] vhci_hcd vhci_hcd.0: Device attached [ 207.740826][T11142] vhci_hcd: connection closed [ 207.741218][ T5834] vhci_hcd vhci_hcd.7: stop threads [ 207.744270][ T5834] vhci_hcd vhci_hcd.7: release socket [ 207.746137][ T5834] vhci_hcd vhci_hcd.7: disconnect device [ 207.750338][T11138] vhci_hcd: connection closed [ 207.750754][ T5834] vhci_hcd vhci_hcd.7: stop threads [ 207.753804][ T5834] vhci_hcd vhci_hcd.7: release socket [ 207.764714][ T5834] vhci_hcd vhci_hcd.7: disconnect device [ 207.789298][ T42] audit: type=1400 audit(2000000112.789:2207): avc: denied { listen } for pid=11140 comm="syz.4.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.885378][ T56] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 207.893022][ T56] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.902004][ T56] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.909439][ T56] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.917875][ T56] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.921749][ T56] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.930646][ T56] usb 11-1: config 0 descriptor?? [ 208.406770][ T56] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 208.419214][ T42] audit: type=1400 audit(2000000113.409:2208): avc: denied { write } for pid=11150 comm="syz.5.1712" name="os_desc" dev="configfs" ino=9194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 208.444096][T11153] random: crng reseeded on system resumption [ 208.637341][ T42] audit: type=1804 audit(2000000113.639:2209): pid=11159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.1714" name="/newroot/45/file0" dev="tmpfs" ino=275 res=1 errno=0 [ 208.680764][T11161] mass_storage.usb0/lun.0: file too small: file0 [ 208.690243][ T24] usb 11-1: USB disconnect, device number 16 [ 208.847765][ T42] audit: type=1800 audit(2000000113.849:2210): pid=11166 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1716" name="use" dev="configfs" ino=39219 res=0 errno=0 [ 208.889104][T11169] lo speed is unknown, defaulting to 1000 [ 208.926103][T11173] FAULT_INJECTION: forcing a failure. [ 208.926103][T11173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.938585][T11173] CPU: 2 UID: 0 PID: 11173 Comm: syz.5.1719 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.938616][T11173] Tainted: [L]=SOFTLOCKUP [ 208.938623][T11173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.938634][T11173] Call Trace: [ 208.938641][T11173] [ 208.938647][T11173] dump_stack_lvl+0x100/0x190 [ 208.938675][T11173] should_fail_ex.cold+0x5/0xa [ 208.938705][T11173] _copy_to_user+0x32/0xd0 [ 208.938732][T11173] ioctl_standard_iw_point+0x9d6/0xc90 [ 208.938753][T11173] ? __pfx_cfg80211_wext_giwessid+0x10/0x10 [ 208.938784][T11173] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 208.938811][T11173] ? dev_load+0x8e/0x240 [ 208.938829][T11173] ? full_name_hash+0xbc/0x100 [ 208.938852][T11173] ? __pfx_cfg80211_wext_giwessid+0x10/0x10 [ 208.938879][T11173] ioctl_standard_call+0x167/0x1d0 [ 208.938900][T11173] ? __pfx_ioctl_standard_call+0x10/0x10 [ 208.938918][T11173] ? __pfx_cfg80211_wext_giwessid+0x10/0x10 [ 208.938943][T11173] wext_ioctl_dispatch.constprop.0+0x312/0x3e0 [ 208.938968][T11173] wext_handle_ioctl+0x105/0x1b0 [ 208.938988][T11173] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 208.939014][T11173] ? preempt_schedule_irq+0x7b/0x90 [ 208.939038][T11173] sock_ioctl+0x2d4/0x6b0 [ 208.939067][T11173] ? __pfx_sock_ioctl+0x10/0x10 [ 208.939099][T11173] ? __pfx_sock_ioctl+0x10/0x10 [ 208.939128][T11173] ? __x64_sys_ioctl+0x123/0x210 [ 208.939155][T11173] ? __pfx_sock_ioctl+0x10/0x10 [ 208.939184][T11173] __x64_sys_ioctl+0x18e/0x210 [ 208.939211][T11173] do_syscall_64+0x115/0x870 [ 208.939229][T11173] ? clear_bhb_loop+0x40/0x90 [ 208.939252][T11173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.939271][T11173] RIP: 0033:0x7fc315f9de99 [ 208.939287][T11173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.939327][T11173] RSP: 002b:00007fc316dd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.939347][T11173] RAX: ffffffffffffffda RBX: 00007fc316225fa0 RCX: 00007fc315f9de99 [ 208.939358][T11173] RDX: 0000200000000040 RSI: 0000000000008b1b RDI: 0000000000000003 [ 208.939369][T11173] RBP: 00007fc316dd0090 R08: 0000000000000000 R09: 0000000000000000 [ 208.939380][T11173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.939391][T11173] R13: 00007fc316226038 R14: 00007fc316225fa0 R15: 00007ffe0d2dc118 [ 208.939417][T11173] [ 209.201247][T11169] lo speed is unknown, defaulting to 1000 [ 209.319011][T11180] FAULT_INJECTION: forcing a failure. [ 209.319011][T11180] name failslab, interval 1, probability 0, space 0, times 0 [ 209.330207][T11180] CPU: 0 UID: 0 PID: 11180 Comm: syz.4.1722 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.330252][T11180] Tainted: [L]=SOFTLOCKUP [ 209.330258][T11180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.330266][T11180] Call Trace: [ 209.330274][T11180] [ 209.330281][T11180] dump_stack_lvl+0x100/0x190 [ 209.330310][T11180] should_fail_ex.cold+0x5/0xa [ 209.330332][T11180] should_failslab+0xc2/0x120 [ 209.330355][T11180] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 209.330377][T11180] ? __d_alloc+0x35/0xa50 [ 209.330402][T11180] __d_alloc+0x35/0xa50 [ 209.330418][T11180] ? __lock_acquire+0x49f/0x1a40 [ 209.330444][T11180] d_alloc_parallel+0x105/0x14b0 [ 209.330481][T11180] ? __pfx_d_alloc_parallel+0x10/0x10 [ 209.330504][T11180] ? __d_lookup+0x25c/0x4a0 [ 209.330534][T11180] ? __d_lookup+0x266/0x4a0 [ 209.330565][T11180] path_openat+0x271c/0x4280 [ 209.330595][T11180] ? __pfx_path_openat+0x10/0x10 [ 209.330623][T11180] do_file_open+0x20e/0x430 [ 209.330644][T11180] ? __pfx_do_file_open+0x10/0x10 [ 209.330686][T11180] ? alloc_fd+0x471/0x7a0 [ 209.330710][T11180] ? do_getname+0x191/0x390 [ 209.330735][T11180] do_sys_openat2+0x10f/0x1e0 [ 209.330758][T11180] ? __pfx_do_sys_openat2+0x10/0x10 [ 209.330780][T11180] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 209.330804][T11180] ? __fget_files+0x21f/0x3d0 [ 209.330827][T11180] __x64_sys_openat+0x12d/0x210 [ 209.330850][T11180] ? __pfx___x64_sys_openat+0x10/0x10 [ 209.330872][T11180] ? ksys_write+0x1ac/0x250 [ 209.330907][T11180] do_syscall_64+0x115/0x870 [ 209.330927][T11180] ? clear_bhb_loop+0x40/0x90 [ 209.330950][T11180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.330970][T11180] RIP: 0033:0x7f32df39de99 [ 209.330986][T11180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.331003][T11180] RSP: 002b:00007f32e0215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 209.331021][T11180] RAX: ffffffffffffffda RBX: 00007f32df625fa0 RCX: 00007f32df39de99 [ 209.331034][T11180] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: ffffffffffffff9c [ 209.331045][T11180] RBP: 00007f32e0215090 R08: 0000000000000000 R09: 0000000000000000 [ 209.331057][T11180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.331067][T11180] R13: 00007f32df626038 R14: 00007f32df625fa0 R15: 00007ffd8fe91618 [ 209.331092][T11180] [ 209.717456][ T42] audit: type=1400 audit(2000000114.719:2211): avc: denied { checkpoint_restore } for pid=11189 comm="syz.6.1724" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.761911][T11196] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 210.030266][T11209] FAULT_INJECTION: forcing a failure. [ 210.030266][T11209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.054836][T11209] CPU: 0 UID: 0 PID: 11209 Comm: syz.7.1731 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.054856][T11209] Tainted: [L]=SOFTLOCKUP [ 210.054860][T11209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.054867][T11209] Call Trace: [ 210.054871][T11209] [ 210.054876][T11209] dump_stack_lvl+0x100/0x190 [ 210.054894][T11209] should_fail_ex.cold+0x5/0xa [ 210.054908][T11209] _copy_to_user+0x32/0xd0 [ 210.054940][T11209] simple_read_from_buffer+0xcb/0x170 [ 210.054954][T11209] proc_fail_nth_read+0x1af/0x230 [ 210.054972][T11209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.054990][T11209] ? rw_verify_area+0xce/0x6d0 [ 210.055006][T11209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.055023][T11209] vfs_read+0x1e4/0xb40 [ 210.055042][T11209] ? __pfx_vfs_read+0x10/0x10 [ 210.055059][T11209] ? __fget_files+0x215/0x3d0 [ 210.055074][T11209] ? __fget_files+0x21f/0x3d0 [ 210.055089][T11209] ksys_read+0x12a/0x250 [ 210.055106][T11209] ? __pfx_ksys_read+0x10/0x10 [ 210.055128][T11209] do_syscall_64+0x115/0x870 [ 210.055140][T11209] ? clear_bhb_loop+0x40/0x90 [ 210.055154][T11209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.055166][T11209] RIP: 0033:0x7efd8f35e6ce [ 210.055177][T11209] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 210.055193][T11209] RSP: 002b:00007efd901fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.055205][T11209] RAX: ffffffffffffffda RBX: 00007efd902006c0 RCX: 00007efd8f35e6ce [ 210.055212][T11209] RDX: 000000000000000f RSI: 00007efd902000a0 RDI: 0000000000000004 [ 210.055219][T11209] RBP: 00007efd90200090 R08: 0000000000000000 R09: 0000000000000000 [ 210.055226][T11209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.055233][T11209] R13: 00007efd8f626038 R14: 00007efd8f625fa0 R15: 00007ffc944ac5f8 [ 210.055248][T11209] [ 210.184821][T10610] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 210.339271][T10610] usb 10-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 210.342618][T10610] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.349372][T10610] i2c-tiny-usb 10-1:1.0: version 1.00 found at bus 010 address 013 [ 210.442005][T11213] program syz.6.1733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.564897][ T24] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 210.588423][ T42] audit: type=1400 audit(2000000115.589:2212): avc: denied { read write } for pid=11214 comm="syz.6.1734" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 210.604969][ T42] audit: type=1400 audit(2000000115.589:2213): avc: denied { open } for pid=11214 comm="syz.6.1734" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 210.740468][ T24] usb 12-1: config index 0 descriptor too short (expected 45, got 36) [ 210.743433][ T24] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.744162][T11217] 9pnet_virtio: no channels available for device syz [ 210.751140][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.755613][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.760121][ T24] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.769033][T10610] (null): failure reading functionality [ 210.774309][ T24] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.783724][ T24] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.793479][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.802898][ T24] usb 12-1: config 0 descriptor?? [ 211.229757][ T24] hid_parser_main: 20 callbacks suppressed [ 211.229772][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 211.234842][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 211.237554][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 211.239929][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 211.244423][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 211.256070][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 211.261788][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 211.266281][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 211.269775][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 211.274363][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 211.288730][ T24] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 211.497318][ T56] usb 12-1: USB disconnect, device number 3 [ 212.704818][ T10] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 212.779817][T11207] i2c i2c-2: failure writing data [ 212.781443][T10610] i2c i2c-2: failure reading functionality [ 212.783332][T11207] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 212.793073][T11207] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 212.803684][T11207] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 212.808217][T10610] i2c i2c-2: connected i2c-tiny-usb device [ 212.822878][T10610] usb 10-1: USB disconnect, device number 13 [ 212.854808][ T10] usb 12-1: Using ep0 maxpacket: 8 [ 212.860854][ T10] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 212.867137][ T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.900882][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 212.908252][ T10] pvrusb2: ********** [ 212.915195][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 212.922842][ T10] pvrusb2: Important functionality might not be entirely working. [ 212.931939][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 212.951732][ T10] pvrusb2: ********** [ 213.089628][ T2519] pvrusb2: Invalid write control endpoint [ 213.232838][ T2519] pvrusb2: Invalid write control endpoint [ 213.248709][ T2519] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 213.264874][ T2519] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 213.272715][ T2519] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 213.282893][ T2519] pvrusb2: Device being rendered inoperable [ 213.294869][ T2519] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 213.302276][ T2519] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 213.320360][ T2519] pvrusb2: Attached sub-driver cx25840 [ 213.344126][ T2519] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 213.354984][ T2519] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 213.492195][T11236] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1741'. [ 213.643441][T11240] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 213.658422][T11240] loop5: detected capacity change from 0 to 7 [ 213.666130][T11240] Dev loop5: unable to read RDB block 7 [ 213.667976][T11240] loop5: unable to read partition table [ 213.671554][T11240] loop5: partition table beyond EOD, truncated [ 213.677295][T11240] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 213.714212][ T5144] Dev loop5: unable to read RDB block 7 [ 213.720863][ T5144] loop5: unable to read partition table [ 213.726376][ T5144] loop5: partition table beyond EOD, truncated [ 213.809252][T11244] syzkaller1: entered promiscuous mode [ 213.812213][T11244] syzkaller1: entered allmulticast mode [ 214.052982][ T5144] Dev loop5: unable to read RDB block 7 [ 214.058183][ T5144] loop5: unable to read partition table [ 214.063422][ T5144] loop5: partition table beyond EOD, truncated [ 214.334898][ T56] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 214.463816][T11254] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1747'. [ 214.497596][ T56] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 214.503729][ T56] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.515369][ T56] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.525555][ T56] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.536632][ T56] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.544971][ T56] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.558206][ T56] usb 10-1: config 0 descriptor?? [ 215.013949][ T56] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 215.267000][T10610] usb 10-1: USB disconnect, device number 14 [ 215.456155][ T10] usb 12-1: USB disconnect, device number 4 [ 215.743999][T11265] FAULT_INJECTION: forcing a failure. [ 215.743999][T11265] name failslab, interval 1, probability 0, space 0, times 0 [ 215.757882][T11265] CPU: 0 UID: 0 PID: 11265 Comm: syz.7.1751 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.757902][T11265] Tainted: [L]=SOFTLOCKUP [ 215.757906][T11265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.757912][T11265] Call Trace: [ 215.757917][T11265] [ 215.757922][T11265] dump_stack_lvl+0x100/0x190 [ 215.757952][T11265] should_fail_ex.cold+0x5/0xa [ 215.757967][T11265] should_failslab+0xc2/0x120 [ 215.757982][T11265] __kmalloc_noprof+0xfc/0x820 [ 215.757994][T11265] ? rcu_is_watching+0x12/0xc0 [ 215.758011][T11265] ? tomoyo_encode2+0xfb/0x3c0 [ 215.758025][T11265] tomoyo_encode2+0xfb/0x3c0 [ 215.758037][T11265] tomoyo_encode+0x29/0x50 [ 215.758046][T11265] tomoyo_realpath_from_path+0x18c/0x690 [ 215.758060][T11265] tomoyo_path_perm+0x276/0x460 [ 215.758074][T11265] ? tomoyo_path_perm+0x262/0x460 [ 215.758090][T11265] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 215.758119][T11265] ? __d_lookup+0x25c/0x4a0 [ 215.758140][T11265] tomoyo_path_rmdir+0x91/0xe0 [ 215.758152][T11265] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 215.758164][T11265] ? lookup_dcache+0x66/0x170 [ 215.758180][T11265] security_path_rmdir+0x145/0x2b0 [ 215.758196][T11265] filename_rmdir+0x29d/0x5c0 [ 215.758210][T11265] ? __pfx_filename_rmdir+0x10/0x10 [ 215.758227][T11265] ? do_getname+0x191/0x390 [ 215.758242][T11265] __x64_sys_rmdir+0x46/0x70 [ 215.758255][T11265] do_syscall_64+0x115/0x870 [ 215.758266][T11265] ? clear_bhb_loop+0x40/0x90 [ 215.758280][T11265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.758291][T11265] RIP: 0033:0x7efd8f39de99 [ 215.758301][T11265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.758312][T11265] RSP: 002b:00007efd90200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 215.758324][T11265] RAX: ffffffffffffffda RBX: 00007efd8f625fa0 RCX: 00007efd8f39de99 [ 215.758331][T11265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 215.758337][T11265] RBP: 00007efd90200090 R08: 0000000000000000 R09: 0000000000000000 [ 215.758344][T11265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.758350][T11265] R13: 00007efd8f626038 R14: 00007efd8f625fa0 R15: 00007ffc944ac5f8 [ 215.758365][T11265] [ 215.758419][T11265] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.925601][ T42] audit: type=1400 audit(2000000120.929:2214): avc: denied { write } for pid=11264 comm="syz.7.1751" name="strings" dev="configfs" ino=9193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.040180][ T42] audit: type=1400 audit(2000000121.039:2215): avc: denied { write } for pid=11271 comm="syz.6.1753" name="c.1" dev="configfs" ino=9199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.048689][T11278] audit: audit_lost=118 audit_rate_limit=0 audit_backlog_limit=64 [ 216.051190][T11278] audit: out of memory in audit_log_start [ 216.076915][ T42] audit: type=1400 audit(2000000121.069:2216): avc: denied { write } for pid=11271 comm="syz.6.1753" name="c.1" dev="configfs" ino=9199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.078024][T11279] random: crng reseeded on system resumption [ 216.188946][T11279] Restarting kernel threads ... [ 216.210098][T11279] Done restarting kernel threads. [ 216.297015][ T42] audit: type=1400 audit(2000000121.299:2217): avc: denied { write } for pid=11284 comm="syz.6.1758" name="strings" dev="configfs" ino=9193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.304934][T11279] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 216.317685][T11279] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 216.504350][T11290] netlink: zone id is out of range [ 216.512939][T11290] netlink: zone id is out of range [ 216.519873][T11290] netlink: zone id is out of range [ 216.522983][T11290] netlink: zone id is out of range [ 216.529387][T11290] netlink: zone id is out of range [ 217.644543][ T42] audit: type=1400 audit(2000000122.639:2218): avc: denied { write } for pid=11298 comm="syz.6.1761" name="strings" dev="configfs" ino=9193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.666774][ T42] audit: type=1400 audit(2000000122.659:2219): avc: denied { write } for pid=11298 comm="syz.6.1761" name="0x409" dev="configfs" ino=39807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.705171][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 217.711352][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 217.720802][T11299] netlink: 'syz.6.1761': attribute type 1 has an invalid length. [ 217.735952][T11301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.746283][ T42] audit: type=1400 audit(2000000122.739:2220): avc: denied { write } for pid=11298 comm="syz.6.1761" name="0x409" dev="configfs" ino=39807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.772881][T11304] udc usbip-vudc.0: soft-connect without a gadget driver [ 217.784345][T11304] FAULT_INJECTION: forcing a failure. [ 217.784345][T11304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.806160][T11304] CPU: 0 UID: 0 PID: 11304 Comm: syz.7.1763 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.806180][T11304] Tainted: [L]=SOFTLOCKUP [ 217.806184][T11304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.806191][T11304] Call Trace: [ 217.806196][T11304] [ 217.806200][T11304] dump_stack_lvl+0x100/0x190 [ 217.806219][T11304] should_fail_ex.cold+0x5/0xa [ 217.806246][T11304] _copy_to_user+0x32/0xd0 [ 217.806262][T11304] simple_read_from_buffer+0xcb/0x170 [ 217.806275][T11304] proc_fail_nth_read+0x1af/0x230 [ 217.806292][T11304] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.806312][T11304] ? rw_verify_area+0xce/0x6d0 [ 217.806326][T11304] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.806343][T11304] vfs_read+0x1e4/0xb40 [ 217.806361][T11304] ? __pfx_vfs_read+0x10/0x10 [ 217.806376][T11304] ? __fget_files+0x215/0x3d0 [ 217.806391][T11304] ? __fget_files+0x21f/0x3d0 [ 217.806405][T11304] ksys_read+0x12a/0x250 [ 217.806421][T11304] ? __pfx_ksys_read+0x10/0x10 [ 217.806442][T11304] do_syscall_64+0x115/0x870 [ 217.806453][T11304] ? clear_bhb_loop+0x40/0x90 [ 217.806466][T11304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.806478][T11304] RIP: 0033:0x7efd8f35e6ce [ 217.806487][T11304] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 217.806498][T11304] RSP: 002b:00007efd901fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.806509][T11304] RAX: ffffffffffffffda RBX: 00007efd902006c0 RCX: 00007efd8f35e6ce [ 217.806515][T11304] RDX: 000000000000000f RSI: 00007efd902000a0 RDI: 0000000000000004 [ 217.806526][T11304] RBP: 00007efd90200090 R08: 0000000000000000 R09: 0000000000000000 [ 217.806533][T11304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.806539][T11304] R13: 00007efd8f626038 R14: 00007efd8f625fa0 R15: 00007ffc944ac5f8 [ 217.806553][T11304] [ 217.810822][ T42] audit: type=1400 audit(2000000122.809:2221): avc: denied { map } for pid=11300 comm="syz.4.1762" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 218.028064][T11317] udc usbip-vudc.0: soft-connect without a gadget driver [ 218.334856][T11327] overlayfs: failed to resolve './file3': -2 [ 218.425734][T11329] udc usbip-vudc.0: soft-connect without a gadget driver [ 218.628849][T11336] Mass Storage Function, version: 2009/09/11 [ 218.648717][T11336] LUN: removable file: (no medium) [ 218.656176][T11336] FAULT_INJECTION: forcing a failure. [ 218.656176][T11336] name failslab, interval 1, probability 0, space 0, times 0 [ 218.672892][T11336] CPU: 0 UID: 0 PID: 11336 Comm: syz.4.1773 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.672912][T11336] Tainted: [L]=SOFTLOCKUP [ 218.672917][T11336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.672923][T11336] Call Trace: [ 218.672929][T11336] [ 218.672934][T11336] dump_stack_lvl+0x100/0x190 [ 218.672951][T11336] should_fail_ex.cold+0x5/0xa [ 218.672966][T11336] should_failslab+0xc2/0x120 [ 218.672981][T11336] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 218.673005][T11336] ? __d_alloc+0x35/0xa50 [ 218.673023][T11336] __d_alloc+0x35/0xa50 [ 218.673035][T11336] ? __lock_acquire+0x49f/0x1a40 [ 218.673050][T11336] d_alloc_parallel+0x105/0x14b0 [ 218.673071][T11336] ? __pfx_d_alloc_parallel+0x10/0x10 [ 218.673087][T11336] ? __d_lookup+0x25c/0x4a0 [ 218.673105][T11336] ? __d_lookup+0x266/0x4a0 [ 218.673124][T11336] path_openat+0x271c/0x4280 [ 218.673142][T11336] ? __pfx_path_openat+0x10/0x10 [ 218.673157][T11336] do_file_open+0x20e/0x430 [ 218.673169][T11336] ? __pfx_do_file_open+0x10/0x10 [ 218.673191][T11336] ? alloc_fd+0x471/0x7a0 [ 218.673204][T11336] ? do_getname+0x191/0x390 [ 218.673218][T11336] do_sys_openat2+0x10f/0x1e0 [ 218.673232][T11336] ? __pfx_do_sys_openat2+0x10/0x10 [ 218.673246][T11336] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 218.673260][T11336] ? __fget_files+0x21f/0x3d0 [ 218.673273][T11336] __x64_sys_openat+0x12d/0x210 [ 218.673287][T11336] ? __pfx___x64_sys_openat+0x10/0x10 [ 218.673300][T11336] ? ksys_write+0x1ac/0x250 [ 218.673321][T11336] do_syscall_64+0x115/0x870 [ 218.673332][T11336] ? clear_bhb_loop+0x40/0x90 [ 218.673345][T11336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.673357][T11336] RIP: 0033:0x7f32df39de99 [ 218.673367][T11336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.673377][T11336] RSP: 002b:00007f32e0215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 218.673389][T11336] RAX: ffffffffffffffda RBX: 00007f32df625fa0 RCX: 00007f32df39de99 [ 218.673396][T11336] RDX: 0000000000101800 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 218.673402][T11336] RBP: 00007f32e0215090 R08: 0000000000000000 R09: 0000000000000000 [ 218.673409][T11336] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000001 [ 218.673415][T11336] R13: 00007f32df626038 R14: 00007f32df625fa0 R15: 00007ffd8fe91618 [ 218.673429][T11336] [ 218.787028][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1774'. [ 219.145922][T11356] FAULT_INJECTION: forcing a failure. [ 219.145922][T11356] name failslab, interval 1, probability 0, space 0, times 0 [ 219.159289][T11356] CPU: 0 UID: 0 PID: 11356 Comm: syz.4.1781 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.159315][T11356] Tainted: [L]=SOFTLOCKUP [ 219.159321][T11356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.159329][T11356] Call Trace: [ 219.159333][T11356] [ 219.159339][T11356] dump_stack_lvl+0x100/0x190 [ 219.159370][T11356] should_fail_ex.cold+0x5/0xa [ 219.159386][T11356] should_failslab+0xc2/0x120 [ 219.159401][T11356] __kmalloc_noprof+0xfc/0x820 [ 219.159413][T11356] ? rcu_is_watching+0x12/0xc0 [ 219.159430][T11356] ? tomoyo_encode2+0xfb/0x3c0 [ 219.159443][T11356] tomoyo_encode2+0xfb/0x3c0 [ 219.159455][T11356] tomoyo_encode+0x29/0x50 [ 219.159464][T11356] tomoyo_realpath_from_path+0x18c/0x690 [ 219.159479][T11356] tomoyo_path_number_perm+0x23c/0x580 [ 219.159494][T11356] ? tomoyo_path_number_perm+0x22e/0x580 [ 219.159510][T11356] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 219.159543][T11356] ? current_check_access_path+0x269/0x430 [ 219.159559][T11356] ? __pfx_current_check_access_path+0x10/0x10 [ 219.159573][T11356] ? configfs_lookup+0x6e/0x7d0 [ 219.159589][T11356] ? lookup_one_qstr_excl+0xaf/0x250 [ 219.159605][T11356] tomoyo_path_mkdir+0x9b/0xe0 [ 219.159618][T11356] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 219.159634][T11356] security_path_mkdir+0x154/0x2e0 [ 219.159647][T11356] filename_mkdirat+0x168/0x5e0 [ 219.159661][T11356] ? __pfx_filename_mkdirat+0x10/0x10 [ 219.159673][T11356] ? strncpy_from_user+0x19d/0x2d0 [ 219.159689][T11356] ? do_getname+0x191/0x390 [ 219.159704][T11356] __x64_sys_mkdir+0x6b/0x90 [ 219.159716][T11356] do_syscall_64+0x115/0x870 [ 219.159729][T11356] ? clear_bhb_loop+0x40/0x90 [ 219.159742][T11356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.159753][T11356] RIP: 0033:0x7f32df39de99 [ 219.159763][T11356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.159774][T11356] RSP: 002b:00007f32e0215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 219.159785][T11356] RAX: ffffffffffffffda RBX: 00007f32df625fa0 RCX: 00007f32df39de99 [ 219.159792][T11356] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000200000000140 [ 219.159798][T11356] RBP: 00007f32e0215090 R08: 0000000000000000 R09: 0000000000000000 [ 219.159805][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.159811][T11356] R13: 00007f32df626038 R14: 00007f32df625fa0 R15: 00007ffd8fe91618 [ 219.159826][T11356] [ 219.159879][T11356] ERROR: Out of memory at tomoyo_realpath_from_path. [ 219.484420][T11367] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1785'. [ 219.514271][T11368] FAULT_INJECTION: forcing a failure. [ 219.514271][T11368] name failslab, interval 1, probability 0, space 0, times 0 [ 219.544876][T11368] CPU: 0 UID: 0 PID: 11368 Comm: syz.4.1784 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.544907][T11368] Tainted: [L]=SOFTLOCKUP [ 219.544913][T11368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.544924][T11368] Call Trace: [ 219.544931][T11368] [ 219.544939][T11368] dump_stack_lvl+0x100/0x190 [ 219.544982][T11368] should_fail_ex.cold+0x5/0xa [ 219.545006][T11368] should_failslab+0xc2/0x120 [ 219.545030][T11368] __kmalloc_noprof+0xfc/0x820 [ 219.545051][T11368] ? rcu_is_watching+0x12/0xc0 [ 219.545078][T11368] ? tomoyo_realpath_from_path+0xb6/0x690 [ 219.545102][T11368] tomoyo_realpath_from_path+0xb6/0x690 [ 219.545127][T11368] tomoyo_check_open_permission+0x2af/0x3c0 [ 219.545154][T11368] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 219.545188][T11368] ? hook_file_open+0x24f/0x8f0 [ 219.545239][T11368] ? lock_acquire+0x1b9/0x370 [ 219.545270][T11368] tomoyo_file_open+0x6b/0x90 [ 219.545292][T11368] security_file_open+0xb5/0x1e0 [ 219.545311][T11368] do_dentry_open+0x588/0x14d0 [ 219.545335][T11368] vfs_open+0x82/0x3f0 [ 219.545361][T11368] path_openat+0x2873/0x4280 [ 219.545388][T11368] ? __pfx_path_openat+0x10/0x10 [ 219.545408][T11368] do_file_open+0x20e/0x430 [ 219.545424][T11368] ? __pfx_do_file_open+0x10/0x10 [ 219.545454][T11368] ? alloc_fd+0x471/0x7a0 [ 219.545488][T11368] ? do_getname+0x191/0x390 [ 219.545509][T11368] do_sys_openat2+0x10f/0x1e0 [ 219.545534][T11368] ? __pfx_do_sys_openat2+0x10/0x10 [ 219.545552][T11368] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 219.545570][T11368] ? __fget_files+0x21f/0x3d0 [ 219.545588][T11368] __x64_sys_openat+0x12d/0x210 [ 219.545613][T11368] ? __pfx___x64_sys_openat+0x10/0x10 [ 219.545634][T11368] ? ksys_write+0x1ac/0x250 [ 219.545670][T11368] do_syscall_64+0x115/0x870 [ 219.545688][T11368] ? clear_bhb_loop+0x40/0x90 [ 219.545712][T11368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.545731][T11368] RIP: 0033:0x7f32df39de99 [ 219.545746][T11368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.545763][T11368] RSP: 002b:00007f32e0215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 219.545780][T11368] RAX: ffffffffffffffda RBX: 00007f32df625fa0 RCX: 00007f32df39de99 [ 219.545792][T11368] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 219.545803][T11368] RBP: 00007f32e0215090 R08: 0000000000000000 R09: 0000000000000000 [ 219.545813][T11368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.545824][T11368] R13: 00007f32df626038 R14: 00007f32df625fa0 R15: 00007ffd8fe91618 [ 219.545849][T11368] [ 219.665623][T11368] ERROR: Out of memory at tomoyo_realpath_from_path. [ 219.950501][T11384] FAULT_INJECTION: forcing a failure. [ 219.950501][T11384] name failslab, interval 1, probability 0, space 0, times 0 [ 219.974895][T11384] CPU: 0 UID: 0 PID: 11384 Comm: syz.7.1790 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.974916][T11384] Tainted: [L]=SOFTLOCKUP [ 219.974920][T11384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.974927][T11384] Call Trace: [ 219.974931][T11384] [ 219.974936][T11384] dump_stack_lvl+0x100/0x190 [ 219.974968][T11384] should_fail_ex.cold+0x5/0xa [ 219.974981][T11384] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 219.974999][T11384] should_failslab+0xc2/0x120 [ 219.975014][T11384] kmem_cache_alloc_noprof+0x91/0x6a0 [ 219.975028][T11384] ? skb_clone+0x190/0x400 [ 219.975043][T11384] skb_clone+0x190/0x400 [ 219.975057][T11384] netlink_deliver_tap+0xaed/0xcc0 [ 219.975077][T11384] netlink_unicast+0x62b/0x850 [ 219.975089][T11384] ? __pfx_netlink_unicast+0x10/0x10 [ 219.975110][T11384] netlink_sendmsg+0x8b0/0xda0 [ 219.975123][T11384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.975134][T11384] ? selinux_socket_sendmsg+0x198/0x2f0 [ 219.975153][T11384] ____sys_sendmsg+0xa4d/0xbe0 [ 219.975168][T11384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.975179][T11384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.975202][T11384] ___sys_sendmsg+0x190/0x1e0 [ 219.975219][T11384] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.975235][T11384] ? __lock_acquire+0x49f/0x1a40 [ 219.975274][T11384] ? get_pid_task+0x106/0x250 [ 219.975322][T11384] __sys_sendmsg+0x160/0x210 [ 219.975338][T11384] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.975358][T11384] do_syscall_64+0x115/0x870 [ 219.975370][T11384] ? clear_bhb_loop+0x40/0x90 [ 219.975384][T11384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.975395][T11384] RIP: 0033:0x7efd8f39de99 [ 219.975405][T11384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.975416][T11384] RSP: 002b:00007efd90200028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.975428][T11384] RAX: ffffffffffffffda RBX: 00007efd8f625fa0 RCX: 00007efd8f39de99 [ 219.975435][T11384] RDX: 00000000240008c4 RSI: 0000200000000180 RDI: 0000000000000004 [ 219.975442][T11384] RBP: 00007efd90200090 R08: 0000000000000000 R09: 0000000000000000 [ 219.975448][T11384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.975455][T11384] R13: 00007efd8f626038 R14: 00007efd8f625fa0 R15: 00007ffc944ac5f8 [ 219.975469][T11384] [ 220.721831][T11409] xt_bpf: check failed: parse error [ 220.804243][T11412] FAULT_INJECTION: forcing a failure. [ 220.804243][T11412] name failslab, interval 1, probability 0, space 0, times 0 [ 220.827255][T11412] CPU: 2 UID: 0 PID: 11412 Comm: syz.4.1799 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.827286][T11412] Tainted: [L]=SOFTLOCKUP [ 220.827292][T11412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.827302][T11412] Call Trace: [ 220.827308][T11412] [ 220.827315][T11412] dump_stack_lvl+0x100/0x190 [ 220.827343][T11412] should_fail_ex.cold+0x5/0xa [ 220.827364][T11412] should_failslab+0xc2/0x120 [ 220.827385][T11412] __kmalloc_noprof+0xfc/0x820 [ 220.827403][T11412] ? rcu_is_watching+0x12/0xc0 [ 220.827427][T11412] ? tomoyo_encode2+0xfb/0x3c0 [ 220.827448][T11412] tomoyo_encode2+0xfb/0x3c0 [ 220.827467][T11412] tomoyo_encode+0x29/0x50 [ 220.827481][T11412] tomoyo_realpath_from_path+0x18c/0x690 [ 220.827503][T11412] tomoyo_path_number_perm+0x23c/0x580 [ 220.827524][T11412] ? tomoyo_path_number_perm+0x22e/0x580 [ 220.827548][T11412] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 220.827591][T11412] ? current_check_access_path+0x269/0x430 [ 220.827613][T11412] ? __pfx_current_check_access_path+0x10/0x10 [ 220.827633][T11412] ? configfs_lookup+0x6e/0x7d0 [ 220.827657][T11412] ? lookup_one_qstr_excl+0xaf/0x250 [ 220.827681][T11412] tomoyo_path_mkdir+0x9b/0xe0 [ 220.827699][T11412] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 220.827723][T11412] security_path_mkdir+0x154/0x2e0 [ 220.827742][T11412] filename_mkdirat+0x168/0x5e0 [ 220.827762][T11412] ? __pfx_filename_mkdirat+0x10/0x10 [ 220.827779][T11412] ? strncpy_from_user+0x19d/0x2d0 [ 220.827802][T11412] ? do_getname+0x191/0x390 [ 220.827824][T11412] __x64_sys_mkdirat+0x89/0xc0 [ 220.827843][T11412] do_syscall_64+0x115/0x870 [ 220.827860][T11412] ? clear_bhb_loop+0x40/0x90 [ 220.827880][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.827896][T11412] RIP: 0033:0x7f32df39de99 [ 220.827911][T11412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.827926][T11412] RSP: 002b:00007f32e0215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 220.827943][T11412] RAX: ffffffffffffffda RBX: 00007f32df625fa0 RCX: 00007f32df39de99 [ 220.827954][T11412] RDX: 00000000000001ed RSI: 0000200000000a00 RDI: ffffffffffffff9c [ 220.827965][T11412] RBP: 00007f32e0215090 R08: 0000000000000000 R09: 0000000000000000 [ 220.827975][T11412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.827985][T11412] R13: 00007f32df626038 R14: 00007f32df625fa0 R15: 00007ffd8fe91618 [ 220.828008][T11412] [ 220.828026][T11412] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.985322][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 220.985372][ T42] audit: type=1400 audit(2000000125.989:2235): avc: denied { write } for pid=11411 comm="syz.4.1799" name="functions" dev="configfs" ino=9191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.035997][ T42] audit: type=1400 audit(2000000126.039:2236): avc: denied { write } for pid=11413 comm="syz.7.1800" name="functions" dev="configfs" ino=9191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.255346][T11423] FAULT_INJECTION: forcing a failure. [ 221.255346][T11423] name failslab, interval 1, probability 0, space 0, times 0 [ 221.276359][T11423] CPU: 2 UID: 0 PID: 11423 Comm: syz.7.1803 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.276387][T11423] Tainted: [L]=SOFTLOCKUP [ 221.276393][T11423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.276403][T11423] Call Trace: [ 221.276409][T11423] [ 221.276416][T11423] dump_stack_lvl+0x100/0x190 [ 221.276441][T11423] should_fail_ex.cold+0x5/0xa [ 221.276461][T11423] should_failslab+0xc2/0x120 [ 221.276483][T11423] __kmalloc_cache_noprof+0x91/0x6c0 [ 221.276509][T11423] ? configfs_write_iter+0x388/0x4e0 [ 221.276532][T11423] configfs_write_iter+0x388/0x4e0 [ 221.276553][T11423] vfs_write+0x6ac/0x1050 [ 221.276579][T11423] ? __pfx_configfs_write_iter+0x10/0x10 [ 221.276599][T11423] ? __pfx_vfs_write+0x10/0x10 [ 221.276637][T11423] ksys_write+0x12a/0x250 [ 221.276660][T11423] ? __pfx_ksys_write+0x10/0x10 [ 221.276691][T11423] do_syscall_64+0x115/0x870 [ 221.276708][T11423] ? clear_bhb_loop+0x40/0x90 [ 221.276728][T11423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.276744][T11423] RIP: 0033:0x7efd8f39de99 [ 221.276759][T11423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.276773][T11423] RSP: 002b:00007efd90200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.276790][T11423] RAX: ffffffffffffffda RBX: 00007efd8f625fa0 RCX: 00007efd8f39de99 [ 221.276801][T11423] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 221.276810][T11423] RBP: 00007efd90200090 R08: 0000000000000000 R09: 0000000000000000 [ 221.276820][T11423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.276829][T11423] R13: 00007efd8f626038 R14: 00007efd8f625fa0 R15: 00007ffc944ac5f8 [ 221.276852][T11423] [ 221.359184][T11425] tipc: Started in network mode [ 221.364175][T11425] tipc: Node identity 000000000000000003, cluster identity 4711 [ 221.453043][ T42] audit: type=1800 audit(2000000126.449:2237): pid=11432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1806" name="bTransferCharacteristics" dev="configfs" ino=41384 res=0 errno=0 [ 221.563379][ T42] audit: type=1400 audit(2000000126.559:2238): avc: denied { setopt } for pid=11435 comm="syz.4.1808" lport=40094 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 221.616671][T11439] FAULT_INJECTION: forcing a failure. [ 221.616671][T11439] name failslab, interval 1, probability 0, space 0, times 0 [ 221.641788][T11439] CPU: 2 UID: 0 PID: 11439 Comm: syz.6.1809 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.641808][T11439] Tainted: [L]=SOFTLOCKUP [ 221.641812][T11439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.641819][T11439] Call Trace: [ 221.641823][T11439] [ 221.641828][T11439] dump_stack_lvl+0x100/0x190 [ 221.641846][T11439] should_fail_ex.cold+0x5/0xa [ 221.641860][T11439] should_failslab+0xc2/0x120 [ 221.641875][T11439] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 221.641889][T11439] ? __d_alloc+0x35/0xa50 [ 221.641904][T11439] __d_alloc+0x35/0xa50 [ 221.641915][T11439] ? __lock_acquire+0x49f/0x1a40 [ 221.641931][T11439] d_alloc_parallel+0x105/0x14b0 [ 221.641952][T11439] ? __pfx_d_alloc_parallel+0x10/0x10 [ 221.641968][T11439] ? __d_lookup+0x25c/0x4a0 [ 221.641986][T11439] ? __d_lookup+0x266/0x4a0 [ 221.642005][T11439] path_openat+0x271c/0x4280 [ 221.642022][T11439] ? __pfx_path_openat+0x10/0x10 [ 221.642037][T11439] do_file_open+0x20e/0x430 [ 221.642050][T11439] ? __pfx_do_file_open+0x10/0x10 [ 221.642071][T11439] ? alloc_fd+0x471/0x7a0 [ 221.642084][T11439] ? do_getname+0x191/0x390 [ 221.642099][T11439] do_sys_openat2+0x10f/0x1e0 [ 221.642113][T11439] ? __pfx_do_sys_openat2+0x10/0x10 [ 221.642127][T11439] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 221.642141][T11439] ? __fget_files+0x21f/0x3d0 [ 221.642154][T11439] __x64_sys_openat+0x12d/0x210 [ 221.642168][T11439] ? __pfx___x64_sys_openat+0x10/0x10 [ 221.642181][T11439] ? ksys_write+0x1ac/0x250 [ 221.642223][T11439] do_syscall_64+0x115/0x870 [ 221.642236][T11439] ? clear_bhb_loop+0x40/0x90 [ 221.642250][T11439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.642261][T11439] RIP: 0033:0x7f045239de99 [ 221.642271][T11439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.642282][T11439] RSP: 002b:00007f045323c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 221.642293][T11439] RAX: ffffffffffffffda RBX: 00007f0452625fa0 RCX: 00007f045239de99 [ 221.642300][T11439] RDX: 0000000000000002 RSI: 0000200000001100 RDI: ffffffffffffff9c [ 221.642307][T11439] RBP: 00007f045323c090 R08: 0000000000000000 R09: 0000000000000000 [ 221.642314][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.642320][T11439] R13: 00007f0452626038 R14: 00007f0452625fa0 R15: 00007ffdef53ba58 [ 221.642335][T11439] [ 221.815949][ T42] audit: type=1400 audit(2000000126.819:2239): avc: denied { read } for pid=11440 comm="syz.4.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 221.876141][ T42] audit: type=1400 audit(2000000126.879:2240): avc: denied { setopt } for pid=11440 comm="syz.4.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 221.898234][ T42] audit: type=1400 audit(2000000126.879:2241): avc: denied { ioctl } for pid=11440 comm="syz.4.1810" path="socket:[41613]" dev="sockfs" ino=41613 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 221.928032][ T42] audit: type=1800 audit(2000000126.879:2242): pid=11452 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1810" name="bTransferCharacteristics" dev="configfs" ino=42365 res=0 errno=0 [ 222.137035][ T42] audit: type=1400 audit(2000000127.129:2243): avc: denied { connect } for pid=11461 comm="syz.6.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 222.198132][T11468] 9p: Unknown access argument 18446744073709551615: -34 [ 223.004113][T11515] FAULT_INJECTION: forcing a failure. [ 223.004113][T11515] name failslab, interval 1, probability 0, space 0, times 0 [ 223.037875][T11515] CPU: 2 UID: 0 PID: 11515 Comm: syz.7.1826 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.037904][T11515] Tainted: [L]=SOFTLOCKUP [ 223.037910][T11515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.037919][T11515] Call Trace: [ 223.037926][T11515] [ 223.037934][T11515] dump_stack_lvl+0x100/0x190 [ 223.037960][T11515] should_fail_ex.cold+0x5/0xa [ 223.037983][T11515] should_failslab+0xc2/0x120 [ 223.038008][T11515] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 223.038030][T11515] ? __d_alloc+0x35/0xa50 [ 223.038056][T11515] __d_alloc+0x35/0xa50 [ 223.038080][T11515] d_alloc+0x4a/0x1e0 [ 223.038103][T11515] lookup_one_qstr_excl+0x171/0x250 [ 223.038125][T11515] ? mnt_want_write+0x161/0x410 [ 223.038144][T11515] filename_create+0x1cf/0x400 [ 223.038171][T11515] ? __pfx_filename_create+0x10/0x10 [ 223.038203][T11515] ? find_held_lock+0x2b/0x80 [ 223.038235][T11515] filename_symlinkat+0xe1/0x560 [ 223.038257][T11515] ? __pfx_filename_symlinkat+0x10/0x10 [ 223.038275][T11515] ? strncpy_from_user+0x19d/0x2d0 [ 223.038301][T11515] ? do_getname+0x191/0x390 [ 223.038325][T11515] __x64_sys_symlink+0x79/0xb0 [ 223.038346][T11515] do_syscall_64+0x115/0x870 [ 223.038365][T11515] ? clear_bhb_loop+0x40/0x90 [ 223.038388][T11515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.038407][T11515] RIP: 0033:0x7efd8f39de99 [ 223.038424][T11515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.038441][T11515] RSP: 002b:00007efd90200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 223.038459][T11515] RAX: ffffffffffffffda RBX: 00007efd8f625fa0 RCX: 00007efd8f39de99 [ 223.038471][T11515] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000200000001200 [ 223.038482][T11515] RBP: 00007efd90200090 R08: 0000000000000000 R09: 0000000000000000 [ 223.038493][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.038503][T11515] R13: 00007efd8f626038 R14: 00007efd8f625fa0 R15: 00007ffc944ac5f8 [ 223.038535][T11515] [ 223.178348][T11512] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1824'. [ 223.198780][T11512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.223762][T11524] FAULT_INJECTION: forcing a failure. [ 223.223762][T11524] name failslab, interval 1, probability 0, space 0, times 0 [ 223.236815][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'. [ 223.246848][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'. [ 223.251425][T11524] CPU: 0 UID: 0 PID: 11524 Comm: syz.7.1829 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.251453][T11524] Tainted: [L]=SOFTLOCKUP [ 223.251459][T11524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.251470][T11524] Call Trace: [ 223.251477][T11524] [ 223.251485][T11524] dump_stack_lvl+0x100/0x190 [ 223.251521][T11524] should_fail_ex.cold+0x5/0xa [ 223.251560][T11524] should_failslab+0xc2/0x120 [ 223.251580][T11524] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 223.251593][T11524] ? kasan_save_stack+0x30/0x50 [ 223.251604][T11524] ? kasan_save_track+0x14/0x30 [ 223.251617][T11524] ? __d_alloc+0x35/0xa50 [ 223.251639][T11524] __d_alloc+0x35/0xa50 [ 223.251661][T11524] d_alloc_parallel+0x105/0x14b0 [ 223.251698][T11524] ? __pfx_d_alloc_parallel+0x10/0x10 [ 223.251723][T11524] ? __pfx___might_resched+0x10/0x10 [ 223.251739][T11524] ? try_to_unlazy+0x296/0x910 [ 223.251756][T11524] ? down_read+0x13b/0x4c0 [ 223.251770][T11524] ? __pfx_down_read+0x10/0x10 [ 223.251784][T11524] __lookup_slow+0x98/0x320 [ 223.251799][T11524] lookup_slow+0x50/0x70 [ 223.251814][T11524] link_path_walk+0x1377/0x1cc0 [ 223.251836][T11524] path_openat+0x1c9/0x4280 [ 223.251847][T11524] ? __kasan_slab_alloc+0x89/0x90 [ 223.251859][T11524] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 223.251871][T11524] ? do_getname+0x35/0x390 [ 223.251884][T11524] ? __x64_sys_openat+0x12d/0x210 [ 223.251902][T11524] ? __pfx_path_openat+0x10/0x10 [ 223.251917][T11524] do_file_open+0x20e/0x430 [ 223.251930][T11524] ? __pfx_do_file_open+0x10/0x10 [ 223.251951][T11524] ? alloc_fd+0x471/0x7a0 [ 223.251965][T11524] ? do_getname+0x191/0x390 [ 223.251979][T11524] do_sys_openat2+0x10f/0x1e0 [ 223.251993][T11524] ? __pfx_do_sys_openat2+0x10/0x10 [ 223.252009][T11524] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 223.252022][T11524] ? __fget_files+0x21f/0x3d0 [ 223.252035][T11524] __x64_sys_openat+0x12d/0x210 [ 223.252049][T11524] ? __pfx___x64_sys_openat+0x10/0x10 [ 223.252062][T11524] ? ksys_write+0x1ac/0x250 [ 223.252083][T11524] do_syscall_64+0x115/0x870 [ 223.252094][T11524] ? clear_bhb_loop+0x40/0x90 [ 223.252108][T11524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.252119][T11524] RIP: 0033:0x7efd8f39de99 [ 223.252130][T11524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.252141][T11524] RSP: 002b:00007efd90200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 223.252154][T11524] RAX: ffffffffffffffda RBX: 00007efd8f625fa0 RCX: 00007efd8f39de99 [ 223.252161][T11524] RDX: 000000000014b981 RSI: 0000200000001000 RDI: ffffffffffffff9c [ 223.252168][T11524] RBP: 00007efd90200090 R08: 0000000000000000 R09: 0000000000000000 [ 223.252174][T11524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.252183][T11524] R13: 00007efd8f626038 R14: 00007efd8f625fa0 R15: 00007ffc944ac5f8 [ 223.252205][T11524] [ 223.564080][ T42] audit: type=1800 audit(2000000128.559:2244): pid=11535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1834" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 223.579384][T11535] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 223.673555][ T10] hid_parser_main: 20 callbacks suppressed [ 223.673572][ T10] hid-generic 0006:0008:0008.000F: unknown main item tag 0x0 [ 223.684913][ T10] hid-generic 0006:0008:0008.000F: unknown main item tag 0x0 [ 223.688239][ T10] hid-generic 0006:0008:0008.000F: unknown main item tag 0x0 [ 223.703812][T11538] fuse: Unknown parameter '000000000000000000080xffffffffffffffff' [ 223.703958][ T10] hid-generic 0006:0008:0008.000F: unknown main item tag 0x0 [ 223.711859][ T10] hid-generic 0006:0008:0008.000F: unknown main item tag 0x0 [ 223.742177][ T10] hid-generic 0006:0008:0008.000F: unknown main item tag 0x0 [ 223.745915][ T10] hid-generic 0006:0008:0008.000F: unknown main item tag 0x0 [ 223.748485][ T10] hid-generic 0006:0008:0008.000F: unknown main item tag 0x0 [ 223.754887][ T56] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 223.755532][ T10] hid-generic 0006:0008:0008.000F: unknown main item tag 0x0 [ 223.765984][ T10] hid-generic 0006:0008:0008.000F: unknown main item tag 0x0 [ 223.807362][ T10] hid-generic 0006:0008:0008.000F: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 223.841913][T11541] fido_id[11541]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 223.894877][ T56] usb 9-1: device descriptor read/64, error -71 [ 224.027848][T11548] FAULT_INJECTION: forcing a failure. [ 224.027848][T11548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.048924][T11548] CPU: 2 UID: 0 PID: 11548 Comm: syz.5.1839 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.048943][T11548] Tainted: [L]=SOFTLOCKUP [ 224.048948][T11548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.048954][T11548] Call Trace: [ 224.048958][T11548] [ 224.048963][T11548] dump_stack_lvl+0x100/0x190 [ 224.048981][T11548] should_fail_ex.cold+0x5/0xa [ 224.048995][T11548] _copy_from_iter+0x43a/0x1690 [ 224.049014][T11548] ? __pfx__copy_from_iter+0x10/0x10 [ 224.049028][T11548] ? trace_kmalloc+0xeb/0x110 [ 224.049047][T11548] ? __kasan_kmalloc+0xaa/0xb0 [ 224.049061][T11548] ? __kmalloc_noprof+0x343/0x820 [ 224.049074][T11548] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 224.049090][T11548] kernfs_fop_write_iter+0x186/0x5f0 [ 224.049121][T11548] do_iter_readv_writev+0x6f7/0x930 [ 224.049140][T11548] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 224.049162][T11548] vfs_writev+0x360/0xdd0 [ 224.049182][T11548] ? __pfx_vfs_writev+0x10/0x10 [ 224.049207][T11548] ? __fget_files+0x21f/0x3d0 [ 224.049222][T11548] ? do_pwritev+0x1ac/0x270 [ 224.049236][T11548] do_pwritev+0x1ac/0x270 [ 224.049252][T11548] ? __pfx_do_pwritev+0x10/0x10 [ 224.049272][T11548] do_syscall_64+0x115/0x870 [ 224.049284][T11548] ? clear_bhb_loop+0x40/0x90 [ 224.049297][T11548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.049308][T11548] RIP: 0033:0x7fc315f9de99 [ 224.049318][T11548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.049328][T11548] RSP: 002b:00007fc316dd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 224.049340][T11548] RAX: ffffffffffffffda RBX: 00007fc316225fa0 RCX: 00007fc315f9de99 [ 224.049347][T11548] RDX: 0000000000000007 RSI: 0000200000002280 RDI: 0000000000000003 [ 224.049353][T11548] RBP: 00007fc316dd0090 R08: 000000000000000a R09: 0000000000000000 [ 224.049359][T11548] R10: 000000000000009a R11: 0000000000000246 R12: 0000000000000001 [ 224.049366][T11548] R13: 00007fc316226038 R14: 00007fc316225fa0 R15: 00007ffe0d2dc118 [ 224.049380][T11548] [ 224.130351][T11550] xt_hashlimit: size too large, truncated to 1048576 [ 224.192217][T11556] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1841'. [ 224.218769][ T56] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 224.234425][T11554] gadgetfs: bound to dummy_udc driver [ 224.354768][ T56] usb 9-1: device descriptor read/64, error -71 [ 224.475192][ T56] usb usb9-port1: attempt power cycle [ 224.814787][ T56] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 224.835354][ T56] usb 9-1: device descriptor read/8, error -71 [ 225.074854][ T56] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 225.102300][ T56] usb 9-1: device descriptor read/8, error -71 [ 225.113476][T11573] gadgetfs: bound to dummy_udc driver [ 225.216621][ T56] usb usb9-port1: unable to enumerate USB device [ 225.247156][T11577] FAULT_INJECTION: forcing a failure. [ 225.247156][T11577] name failslab, interval 1, probability 0, space 0, times 0 [ 225.264438][T11577] CPU: 0 UID: 0 PID: 11577 Comm: syz.5.1849 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.264481][T11577] Tainted: [L]=SOFTLOCKUP [ 225.264488][T11577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.264497][T11577] Call Trace: [ 225.264501][T11577] [ 225.264506][T11577] dump_stack_lvl+0x100/0x190 [ 225.264523][T11577] should_fail_ex.cold+0x5/0xa [ 225.264537][T11577] should_failslab+0xc2/0x120 [ 225.264552][T11577] kmem_cache_alloc_noprof+0x91/0x6a0 [ 225.264570][T11577] ? trace_kmem_cache_alloc+0xdd/0x100 [ 225.264584][T11577] ? security_file_alloc+0x34/0x2c0 [ 225.264603][T11577] security_file_alloc+0x34/0x2c0 [ 225.264620][T11577] init_file+0x95/0x480 [ 225.264634][T11577] alloc_empty_file+0x79/0x1c0 [ 225.264647][T11577] path_openat+0xe7/0x4280 [ 225.264658][T11577] ? __kasan_slab_alloc+0x89/0x90 [ 225.264671][T11577] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 225.264682][T11577] ? do_getname+0x35/0x390 [ 225.264698][T11577] ? do_sys_openat2+0xc7/0x1e0 [ 225.264716][T11577] ? __x64_sys_openat+0x12d/0x210 [ 225.264733][T11577] ? do_syscall_64+0x115/0x870 [ 225.264754][T11577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.264779][T11577] ? __pfx_path_openat+0x10/0x10 [ 225.264797][T11577] do_file_open+0x20e/0x430 [ 225.264810][T11577] ? __pfx_do_file_open+0x10/0x10 [ 225.264831][T11577] ? alloc_fd+0x471/0x7a0 [ 225.264844][T11577] ? do_getname+0x191/0x390 [ 225.264859][T11577] do_sys_openat2+0x10f/0x1e0 [ 225.264873][T11577] ? __pfx_do_sys_openat2+0x10/0x10 [ 225.264887][T11577] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 225.264900][T11577] ? __fget_files+0x21f/0x3d0 [ 225.264913][T11577] __x64_sys_openat+0x12d/0x210 [ 225.264927][T11577] ? __pfx___x64_sys_openat+0x10/0x10 [ 225.264941][T11577] ? ksys_write+0x1ac/0x250 [ 225.264962][T11577] do_syscall_64+0x115/0x870 [ 225.264973][T11577] ? clear_bhb_loop+0x40/0x90 [ 225.264986][T11577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.264997][T11577] RIP: 0033:0x7fc315f9de99 [ 225.265008][T11577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.265018][T11577] RSP: 002b:00007fc316dd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 225.265029][T11577] RAX: ffffffffffffffda RBX: 00007fc316225fa0 RCX: 00007fc315f9de99 [ 225.265036][T11577] RDX: 0000000000000800 RSI: 0000200000001500 RDI: ffffffffffffff9c [ 225.265043][T11577] RBP: 00007fc316dd0090 R08: 0000000000000000 R09: 0000000000000000 [ 225.265049][T11577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.265056][T11577] R13: 00007fc316226038 R14: 00007fc316225fa0 R15: 00007ffe0d2dc118 [ 225.265072][T11577] [ 225.389057][T11581] FAULT_INJECTION: forcing a failure. [ 225.389057][T11581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.393695][T11581] CPU: 2 UID: 0 PID: 11581 Comm: syz.6.1851 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.393723][T11581] Tainted: [L]=SOFTLOCKUP [ 225.393730][T11581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.393741][T11581] Call Trace: [ 225.393748][T11581] [ 225.393757][T11581] dump_stack_lvl+0x100/0x190 [ 225.393784][T11581] should_fail_ex.cold+0x5/0xa [ 225.393807][T11581] _copy_from_user+0x2e/0xd0 [ 225.393833][T11581] video_usercopy+0xe71/0x1730 [ 225.393858][T11581] ? __pfx___video_do_ioctl+0x10/0x10 [ 225.393880][T11581] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 225.393910][T11581] ? __pfx_video_usercopy+0x10/0x10 [ 225.393948][T11581] v4l2_ioctl+0x1bd/0x250 [ 225.393971][T11581] ? __pfx_v4l2_ioctl+0x10/0x10 [ 225.393996][T11581] __x64_sys_ioctl+0x18e/0x210 [ 225.394025][T11581] do_syscall_64+0x115/0x870 [ 225.394044][T11581] ? clear_bhb_loop+0x40/0x90 [ 225.394066][T11581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.394085][T11581] RIP: 0033:0x7f045239de99 [ 225.394101][T11581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.394119][T11581] RSP: 002b:00007f045323c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.394138][T11581] RAX: ffffffffffffffda RBX: 00007f0452625fa0 RCX: 00007f045239de99 [ 225.394151][T11581] RDX: 0000200000000500 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 225.394162][T11581] RBP: 00007f045323c090 R08: 0000000000000000 R09: 0000000000000000 [ 225.394189][T11581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.394200][T11581] R13: 00007f0452626038 R14: 00007f0452625fa0 R15: 00007ffdef53ba58 [ 225.394226][T11581] [ 225.568287][T11587] FAULT_INJECTION: forcing a failure. [ 225.568287][T11587] name failslab, interval 1, probability 0, space 0, times 0 [ 225.572942][T11587] CPU: 2 UID: 0 PID: 11587 Comm: syz.6.1854 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.572960][T11587] Tainted: [L]=SOFTLOCKUP [ 225.572964][T11587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.572971][T11587] Call Trace: [ 225.572975][T11587] [ 225.572980][T11587] dump_stack_lvl+0x100/0x190 [ 225.572997][T11587] should_fail_ex.cold+0x5/0xa [ 225.573011][T11587] should_failslab+0xc2/0x120 [ 225.573026][T11587] __kmalloc_cache_noprof+0x91/0x6c0 [ 225.573044][T11587] ? sctp_association_new+0xbb/0x2990 [ 225.573063][T11587] sctp_association_new+0xbb/0x2990 [ 225.573081][T11587] ? sctp_v4_scope+0x183/0x1a0 [ 225.573094][T11587] sctp_connect_new_asoc+0x1a8/0x770 [ 225.573112][T11587] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 225.573134][T11587] sctp_sendmsg+0x1743/0x22e0 [ 225.573154][T11587] ? __pfx_sctp_sendmsg+0x10/0x10 [ 225.573171][T11587] ? sock_has_perm+0x25a/0x2f0 [ 225.573186][T11587] ? __pfx_sock_has_perm+0x10/0x10 [ 225.573204][T11587] ? __might_fault+0xc5/0x140 [ 225.573219][T11587] ? __pfx_sctp_sendmsg+0x10/0x10 [ 225.573236][T11587] inet_sendmsg+0x11c/0x140 [ 225.573250][T11587] __sys_sendto+0x453/0x4e0 [ 225.573261][T11587] ? __pfx_inet_sendmsg+0x10/0x10 [ 225.573275][T11587] ? __pfx___sys_sendto+0x10/0x10 [ 225.573290][T11587] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 225.573308][T11587] ? ksys_write+0x1ac/0x250 [ 225.573324][T11587] ? __pfx_ksys_write+0x10/0x10 [ 225.573342][T11587] __x64_sys_sendto+0xe0/0x1c0 [ 225.573353][T11587] ? do_syscall_64+0x90/0x870 [ 225.573364][T11587] ? lockdep_hardirqs_on+0x78/0x100 [ 225.573375][T11587] do_syscall_64+0x115/0x870 [ 225.573386][T11587] ? clear_bhb_loop+0x40/0x90 [ 225.573399][T11587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.573411][T11587] RIP: 0033:0x7f045239de99 [ 225.573420][T11587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.573431][T11587] RSP: 002b:00007f045323c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 225.573442][T11587] RAX: ffffffffffffffda RBX: 00007f0452625fa0 RCX: 00007f045239de99 [ 225.573449][T11587] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003 [ 225.573456][T11587] RBP: 00007f045323c090 R08: 0000200000000380 R09: 0000000000000010 [ 225.573462][T11587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.573469][T11587] R13: 00007f0452626038 R14: 00007f0452625fa0 R15: 00007ffdef53ba58 [ 225.573483][T11587] [ 225.898092][T11600] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 3692 out of range (51000000..2150000000) [ 225.901233][T11600] FAULT_INJECTION: forcing a failure. [ 225.901233][T11600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.909446][T11600] CPU: 2 UID: 0 PID: 11600 Comm: syz.7.1858 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.909464][T11600] Tainted: [L]=SOFTLOCKUP [ 225.909468][T11600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.909475][T11600] Call Trace: [ 225.909479][T11600] [ 225.909484][T11600] dump_stack_lvl+0x100/0x190 [ 225.909502][T11600] should_fail_ex.cold+0x5/0xa [ 225.909515][T11600] _copy_to_user+0x32/0xd0 [ 225.909532][T11600] simple_read_from_buffer+0xcb/0x170 [ 225.909545][T11600] proc_fail_nth_read+0x1af/0x230 [ 225.909562][T11600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.909579][T11600] ? rw_verify_area+0xce/0x6d0 [ 225.909597][T11600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.909614][T11600] vfs_read+0x1e4/0xb40 [ 225.909632][T11600] ? __pfx_vfs_read+0x10/0x10 [ 225.909647][T11600] ? __fget_files+0x215/0x3d0 [ 225.909661][T11600] ? __fget_files+0x21f/0x3d0 [ 225.909676][T11600] ksys_read+0x12a/0x250 [ 225.909692][T11600] ? __pfx_ksys_read+0x10/0x10 [ 225.909712][T11600] do_syscall_64+0x115/0x870 [ 225.909724][T11600] ? clear_bhb_loop+0x40/0x90 [ 225.909737][T11600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.909749][T11600] RIP: 0033:0x7efd8f35e6ce [ 225.909758][T11600] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.909769][T11600] RSP: 002b:00007efd901fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.909780][T11600] RAX: ffffffffffffffda RBX: 00007efd902006c0 RCX: 00007efd8f35e6ce [ 225.909787][T11600] RDX: 000000000000000f RSI: 00007efd902000a0 RDI: 0000000000000004 [ 225.909793][T11600] RBP: 00007efd90200090 R08: 0000000000000000 R09: 0000000000000000 [ 225.909799][T11600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.909806][T11600] R13: 00007efd8f626038 R14: 00007efd8f625fa0 R15: 00007ffc944ac5f8 [ 225.909820][T11600] [ 226.320697][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 226.320715][ T42] audit: type=1400 audit(2000000131.319:2251): avc: denied { ioctl } for pid=11615 comm="syz.5.1863" path="mnt:[4026533077]" dev="nsfs" ino=4026533077 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 226.348547][T11614] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 3692 out of range (51000000..2150000000) [ 226.515669][ T56] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 226.633972][T11620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.651797][T11620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.843594][ T5604] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.850850][ T5604] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.867386][ T5604] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.888693][ T5604] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.903115][T11630] FAULT_INJECTION: forcing a failure. [ 226.903115][T11630] name failslab, interval 1, probability 0, space 0, times 0 [ 226.908999][T11630] CPU: 2 UID: 0 PID: 11630 Comm: syz.4.1867 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.909028][T11630] Tainted: [L]=SOFTLOCKUP [ 226.909035][T11630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.909046][T11630] Call Trace: [ 226.909052][T11630] [ 226.909060][T11630] dump_stack_lvl+0x100/0x190 [ 226.909089][T11630] should_fail_ex.cold+0x5/0xa [ 226.909111][T11630] ? __pfx___uvcg_count_item_entries+0x10/0x10 [ 226.909134][T11630] should_failslab+0xc2/0x120 [ 226.909157][T11630] ? __pfx___uvcg_count_item_entries+0x10/0x10 [ 226.909176][T11630] __kmalloc_noprof+0xfc/0x820 [ 226.909198][T11630] ? __uvcg_iter_item_entries+0x5a/0x350 [ 226.909223][T11630] ? __pfx___uvcg_count_item_entries+0x10/0x10 [ 226.909243][T11630] __uvcg_iter_item_entries+0x5a/0x350 [ 226.909265][T11630] ? __pfx___uvcg_count_item_entries+0x10/0x10 [ 226.909288][T11630] uvcg_frame_dw_frame_interval_store+0x291/0x4b0 [ 226.909314][T11630] ? __pfx_uvcg_frame_dw_frame_interval_store+0x10/0x10 [ 226.909341][T11630] ? configfs_write_iter+0x388/0x4e0 [ 226.909367][T11630] configfs_write_iter+0x302/0x4e0 [ 226.909391][T11630] vfs_write+0x6ac/0x1050 [ 226.909420][T11630] ? __pfx_configfs_write_iter+0x10/0x10 [ 226.909443][T11630] ? __pfx_vfs_write+0x10/0x10 [ 226.909487][T11630] ksys_write+0x12a/0x250 [ 226.909514][T11630] ? __pfx_ksys_write+0x10/0x10 [ 226.909554][T11630] do_syscall_64+0x115/0x870 [ 226.909573][T11630] ? clear_bhb_loop+0x40/0x90 [ 226.909592][T11630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.909608][T11630] RIP: 0033:0x7f32df39de99 [ 226.909624][T11630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.909639][T11630] RSP: 002b:00007f32e0215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 226.909656][T11630] RAX: ffffffffffffffda RBX: 00007f32df625fa0 RCX: 00007f32df39de99 [ 226.909666][T11630] RDX: 0000000000000002 RSI: 0000200000000a00 RDI: 0000000000000003 [ 226.909678][T11630] RBP: 00007f32e0215090 R08: 0000000000000000 R09: 0000000000000000 [ 226.909688][T11630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.909715][T11630] R13: 00007f32df626038 R14: 00007f32df625fa0 R15: 00007ffd8fe91618 [ 226.909740][T11630] [ 227.029083][T11632] FAULT_INJECTION: forcing a failure. [ 227.029083][T11632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.034534][T11632] CPU: 2 UID: 0 PID: 11632 Comm: syz.7.1868 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.034562][T11632] Tainted: [L]=SOFTLOCKUP [ 227.034569][T11632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.034580][T11632] Call Trace: [ 227.034587][T11632] [ 227.034595][T11632] dump_stack_lvl+0x100/0x190 [ 227.034622][T11632] should_fail_ex.cold+0x5/0xa [ 227.034644][T11632] _copy_from_user+0x2e/0xd0 [ 227.034683][T11632] video_usercopy+0xe71/0x1730 [ 227.034708][T11632] ? __pfx___video_do_ioctl+0x10/0x10 [ 227.034728][T11632] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 227.034756][T11632] ? __pfx_video_usercopy+0x10/0x10 [ 227.034795][T11632] v4l2_ioctl+0x1bd/0x250 [ 227.034817][T11632] ? __pfx_v4l2_ioctl+0x10/0x10 [ 227.034839][T11632] __x64_sys_ioctl+0x18e/0x210 [ 227.034868][T11632] do_syscall_64+0x115/0x870 [ 227.034888][T11632] ? clear_bhb_loop+0x40/0x90 [ 227.034910][T11632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.034928][T11632] RIP: 0033:0x7efd8f39de99 [ 227.034944][T11632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.034960][T11632] RSP: 002b:00007efd90200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.034978][T11632] RAX: ffffffffffffffda RBX: 00007efd8f625fa0 RCX: 00007efd8f39de99 [ 227.034989][T11632] RDX: 0000200000000500 RSI: 00000000c0d05605 RDI: 0000000000000006 [ 227.034999][T11632] RBP: 00007efd90200090 R08: 0000000000000000 R09: 0000000000000000 [ 227.035010][T11632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.035021][T11632] R13: 00007efd8f626038 R14: 00007efd8f625fa0 R15: 00007ffc944ac5f8 [ 227.035043][T11632] [ 227.568636][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1872'. [ 227.571589][T11642] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 227.594757][ T56] usb 9-1: device descriptor read/64, error -71 [ 227.608227][T11644] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1873'. [ 227.686958][T11648] FAULT_INJECTION: forcing a failure. [ 227.686958][T11648] name failslab, interval 1, probability 0, space 0, times 0 [ 227.690973][T11648] CPU: 2 UID: 0 PID: 11648 Comm: syz.7.1875 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.690992][T11648] Tainted: [L]=SOFTLOCKUP [ 227.690996][T11648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.691003][T11648] Call Trace: [ 227.691008][T11648] [ 227.691013][T11648] dump_stack_lvl+0x100/0x190 [ 227.691032][T11648] should_fail_ex.cold+0x5/0xa [ 227.691045][T11648] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 227.691063][T11648] should_failslab+0xc2/0x120 [ 227.691078][T11648] kmem_cache_alloc_noprof+0x91/0x6a0 [ 227.691092][T11648] ? skb_clone+0x190/0x400 [ 227.691108][T11648] skb_clone+0x190/0x400 [ 227.691122][T11648] netlink_deliver_tap+0xaed/0xcc0 [ 227.691142][T11648] netlink_unicast+0x62b/0x850 [ 227.691155][T11648] ? __pfx_netlink_unicast+0x10/0x10 [ 227.691176][T11648] netlink_sendmsg+0x8b0/0xda0 [ 227.691189][T11648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.691202][T11648] ? selinux_socket_sendmsg+0x198/0x2f0 [ 227.691240][T11648] sock_write_iter+0x53a/0x5b0 [ 227.691256][T11648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.691266][T11648] ? __pfx_sock_write_iter+0x10/0x10 [ 227.691287][T11648] ? __pfx___file_has_perm+0x10/0x10 [ 227.691304][T11648] do_iter_readv_writev+0x6f7/0x930 [ 227.691322][T11648] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 227.691337][T11648] ? selinux_file_permission+0x8f/0x6d0 [ 227.691356][T11648] ? bpf_lsm_file_permission+0x9/0x10 [ 227.691372][T11648] ? security_file_permission+0x76/0x210 [ 227.691391][T11648] ? rw_verify_area+0xce/0x6d0 [ 227.691407][T11648] vfs_writev+0x360/0xdd0 [ 227.691426][T11648] ? __pfx_vfs_writev+0x10/0x10 [ 227.691443][T11648] ? rcu_read_lock_any_held+0x6a/0xa0 [ 227.691467][T11648] ? __fget_files+0x21f/0x3d0 [ 227.691482][T11648] ? do_writev+0x28a/0x340 [ 227.691497][T11648] do_writev+0x28a/0x340 [ 227.691513][T11648] ? __pfx_do_writev+0x10/0x10 [ 227.691533][T11648] do_syscall_64+0x115/0x870 [ 227.691545][T11648] ? clear_bhb_loop+0x40/0x90 [ 227.691561][T11648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.691572][T11648] RIP: 0033:0x7efd8f39de99 [ 227.691583][T11648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.691594][T11648] RSP: 002b:00007efd90200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 227.691605][T11648] RAX: ffffffffffffffda RBX: 00007efd8f625fa0 RCX: 00007efd8f39de99 [ 227.691613][T11648] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000011 [ 227.691620][T11648] RBP: 00007efd90200090 R08: 0000000000000000 R09: 0000000000000000 [ 227.691626][T11648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.691633][T11648] R13: 00007efd8f626038 R14: 00007efd8f625fa0 R15: 00007ffc944ac5f8 [ 227.691648][T11648] [ 227.853184][T11650] netlink: set zone limit has 4 unknown bytes [ 227.925137][ T56] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 227.937346][ T42] audit: type=1400 audit(2000000132.939:2252): avc: denied { create } for pid=11651 comm="syz.7.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 228.040079][ T42] audit: type=1326 audit(2000000133.039:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.7.1878" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd8f39de99 code=0x0 [ 228.076590][ T56] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.081493][ T56] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 228.085286][ T56] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.088122][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.094559][T11634] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 228.108254][ T56] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.171420][ T150] IPVS: starting estimator thread 0... [ 228.193767][ T42] audit: type=1400 audit(2000000133.189:2254): avc: denied { setopt } for pid=11654 comm="syz.7.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 228.232660][T11660] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11660 comm=syz.6.1879 [ 228.240931][T11660] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11660 comm=syz.6.1879 [ 228.264791][T11658] IPVS: using max 43 ests per chain, 103200 per kthread [ 228.327988][ T42] audit: type=1400 audit(2000000133.329:2255): avc: denied { ioctl } for pid=11633 comm="syz.4.1869" path="socket:[43167]" dev="sockfs" ino=43167 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 228.383176][T11665] FAULT_INJECTION: forcing a failure. [ 228.383176][T11665] name failslab, interval 1, probability 0, space 0, times 0 [ 228.387732][T11665] CPU: 0 UID: 0 PID: 11665 Comm: syz.6.1880 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.387750][T11665] Tainted: [L]=SOFTLOCKUP [ 228.387754][T11665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.387761][T11665] Call Trace: [ 228.387765][T11665] [ 228.387770][T11665] dump_stack_lvl+0x100/0x190 [ 228.387787][T11665] should_fail_ex.cold+0x5/0xa [ 228.387801][T11665] should_failslab+0xc2/0x120 [ 228.387829][T11665] __kmalloc_noprof+0xfc/0x820 [ 228.387842][T11665] ? __might_fault+0xc5/0x140 [ 228.387852][T11665] ? do_insn_ioctl+0xda/0x4e0 [ 228.387869][T11665] do_insn_ioctl+0xda/0x4e0 [ 228.387885][T11665] comedi_unlocked_ioctl+0xf68/0x3310 [ 228.387900][T11665] ? tomoyo_path_number_perm+0x188/0x580 [ 228.387918][T11665] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 228.387937][T11665] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 228.387951][T11665] ? do_vfs_ioctl+0x226/0x13e0 [ 228.387967][T11665] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 228.387983][T11665] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 228.388004][T11665] ? __fget_files+0x215/0x3d0 [ 228.388015][T11665] ? hook_file_ioctl_common+0x140/0x440 [ 228.388031][T11665] ? selinux_file_ioctl+0x13b/0x290 [ 228.388046][T11665] ? selinux_file_ioctl+0xb6/0x290 [ 228.388063][T11665] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 228.388084][T11665] __x64_sys_ioctl+0x18e/0x210 [ 228.388107][T11665] do_syscall_64+0x115/0x870 [ 228.388124][T11665] ? clear_bhb_loop+0x40/0x90 [ 228.388142][T11665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.388153][T11665] RIP: 0033:0x7f045239de99 [ 228.388163][T11665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.388174][T11665] RSP: 002b:00007f045323c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.388185][T11665] RAX: ffffffffffffffda RBX: 00007f0452625fa0 RCX: 00007f045239de99 [ 228.388191][T11665] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 228.388198][T11665] RBP: 00007f045323c090 R08: 0000000000000000 R09: 0000000000000000 [ 228.388204][T11665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.388211][T11665] R13: 00007f0452626038 R14: 00007f0452625fa0 R15: 00007ffdef53ba58 [ 228.388225][T11665] [ 228.536743][ T56] usb 9-1: USB disconnect, device number 21 [ 228.545588][T11671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.660258][T11675] FAULT_INJECTION: forcing a failure. [ 228.660258][T11675] name failslab, interval 1, probability 0, space 0, times 0 [ 228.665901][T11675] CPU: 2 UID: 0 PID: 11675 Comm: syz.6.1884 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.665927][T11675] Tainted: [L]=SOFTLOCKUP [ 228.665934][T11675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.665943][T11675] Call Trace: [ 228.665949][T11675] [ 228.665955][T11675] dump_stack_lvl+0x100/0x190 [ 228.665981][T11675] should_fail_ex.cold+0x5/0xa [ 228.666003][T11675] should_failslab+0xc2/0x120 [ 228.666025][T11675] kmem_cache_alloc_noprof+0x91/0x6a0 [ 228.666041][T11675] ? dst_alloc+0x99/0x1a0 [ 228.666062][T11675] dst_alloc+0x99/0x1a0 [ 228.666082][T11675] rt_dst_alloc+0x35/0x3a0 [ 228.666101][T11675] ip_route_input_rcu.part.0+0x5e0/0xe20 [ 228.666124][T11675] ? __pfx_ip_route_input_rcu.part.0+0x10/0x10 [ 228.666144][T11675] ? ip_check_mc_rcu+0x22b/0x780 [ 228.666174][T11675] ip_route_input_noref+0x1c3/0x2e0 [ 228.666197][T11675] ? __pfx_ip_route_input_noref+0x10/0x10 [ 228.666223][T11675] ? __pfx_ip_rcv_finish+0x10/0x10 [ 228.666243][T11675] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 228.666269][T11675] ip_rcv_finish_core+0x459/0x2c30 [ 228.666306][T11675] ip_rcv+0x1c0/0x3c0 [ 228.666330][T11675] ? __pfx_ip_rcv+0x10/0x10 [ 228.666346][T11675] __netif_receive_skb_one_core+0x197/0x1e0 [ 228.666364][T11675] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 228.666383][T11675] ? lock_acquire+0x1b9/0x370 [ 228.666409][T11675] __netif_receive_skb+0x1f/0x120 [ 228.666426][T11675] netif_receive_skb+0x139/0x7d0 [ 228.666439][T11675] ? __pfx_netif_receive_skb+0x10/0x10 [ 228.666462][T11675] tun_rx_batched.isra.0+0x3f6/0x750 [ 228.666490][T11675] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 228.666528][T11675] tun_get_user+0x1e31/0x3c20 [ 228.666554][T11675] ? __pfx_tun_get_user+0x10/0x10 [ 228.666571][T11675] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 228.666603][T11675] ? find_held_lock+0x2b/0x80 [ 228.666627][T11675] ? tun_get+0x191/0x370 [ 228.666645][T11675] ? tun_get+0x191/0x370 [ 228.666674][T11675] tun_chr_write_iter+0xdc/0x200 [ 228.666692][T11675] vfs_write+0x6ac/0x1050 [ 228.666718][T11675] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 228.666734][T11675] ? __pfx_vfs_write+0x10/0x10 [ 228.666754][T11675] ? find_held_lock+0x2b/0x80 [ 228.666793][T11675] ksys_write+0x12a/0x250 [ 228.666817][T11675] ? __pfx_ksys_write+0x10/0x10 [ 228.666842][T11675] do_syscall_64+0x115/0x870 [ 228.666860][T11675] ? clear_bhb_loop+0x40/0x90 [ 228.666879][T11675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.666896][T11675] RIP: 0033:0x7f045235e6ce [ 228.666910][T11675] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 228.666925][T11675] RSP: 002b:00007f045323bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.666939][T11675] RAX: ffffffffffffffda RBX: 00007f045323c6c0 RCX: 00007f045235e6ce [ 228.666947][T11675] RDX: 000000000000002a RSI: 0000200000000100 RDI: 00000000000000c8 [ 228.666957][T11675] RBP: 00007f045323c090 R08: 0000000000000000 R09: 0000000000000000 [ 228.666967][T11675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.666977][T11675] R13: 00007f0452626038 R14: 00007f0452625fa0 R15: 00007ffdef53ba58 [ 228.667000][T11675] [ 228.861893][T11679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12577 sclass=netlink_route_socket pid=11679 comm=syz.6.1886 [ 228.957599][T11681] wireguard0: entered promiscuous mode [ 228.988641][T11686] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1889'. [ 229.131574][T11691] FAULT_INJECTION: forcing a failure. [ 229.131574][T11691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.153333][T11691] CPU: 2 UID: 0 PID: 11691 Comm: syz.5.1890 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.153363][T11691] Tainted: [L]=SOFTLOCKUP [ 229.153370][T11691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.153381][T11691] Call Trace: [ 229.153388][T11691] [ 229.153396][T11691] dump_stack_lvl+0x100/0x190 [ 229.153426][T11691] should_fail_ex.cold+0x5/0xa [ 229.153451][T11691] _copy_to_user+0x32/0xd0 [ 229.153480][T11691] simple_read_from_buffer+0xcb/0x170 [ 229.153504][T11691] proc_fail_nth_read+0x1af/0x230 [ 229.153533][T11691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.153571][T11691] ? rw_verify_area+0xce/0x6d0 [ 229.153597][T11691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.153625][T11691] vfs_read+0x1e4/0xb40 [ 229.153675][T11691] ? __pfx_vfs_read+0x10/0x10 [ 229.153703][T11691] ? __fget_files+0x215/0x3d0 [ 229.153730][T11691] ? __fget_files+0x21f/0x3d0 [ 229.153757][T11691] ksys_read+0x12a/0x250 [ 229.153785][T11691] ? __pfx_ksys_read+0x10/0x10 [ 229.153821][T11691] do_syscall_64+0x115/0x870 [ 229.153842][T11691] ? clear_bhb_loop+0x40/0x90 [ 229.153866][T11691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.153886][T11691] RIP: 0033:0x7fc315f5e6ce [ 229.153903][T11691] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 229.153922][T11691] RSP: 002b:00007fc316dcffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 229.153940][T11691] RAX: ffffffffffffffda RBX: 00007fc316dd06c0 RCX: 00007fc315f5e6ce [ 229.153954][T11691] RDX: 000000000000000f RSI: 00007fc316dd00a0 RDI: 0000000000000004 [ 229.153965][T11691] RBP: 00007fc316dd0090 R08: 0000000000000000 R09: 0000000000000000 [ 229.153977][T11691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.153988][T11691] R13: 00007fc316226038 R14: 00007fc316225fa0 R15: 00007ffe0d2dc118 [ 229.154016][T11691] [ 229.217157][T11697] FAULT_INJECTION: forcing a failure. [ 229.217157][T11697] name failslab, interval 1, probability 0, space 0, times 0 [ 229.221081][T11697] CPU: 0 UID: 0 PID: 11697 Comm: syz.4.1891 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.221099][T11697] Tainted: [L]=SOFTLOCKUP [ 229.221103][T11697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.221109][T11697] Call Trace: [ 229.221114][T11697] [ 229.221119][T11697] dump_stack_lvl+0x100/0x190 [ 229.221137][T11697] should_fail_ex.cold+0x5/0xa [ 229.221150][T11697] should_failslab+0xc2/0x120 [ 229.221165][T11697] kmem_cache_alloc_noprof+0x91/0x6a0 [ 229.221189][T11697] ? trace_kmem_cache_alloc+0xdd/0x100 [ 229.221205][T11697] ? security_file_alloc+0x34/0x2c0 [ 229.221226][T11697] security_file_alloc+0x34/0x2c0 [ 229.221243][T11697] init_file+0x95/0x480 [ 229.221257][T11697] alloc_empty_file+0x79/0x1c0 [ 229.221271][T11697] path_openat+0xe7/0x4280 [ 229.221281][T11697] ? __kasan_slab_alloc+0x89/0x90 [ 229.221294][T11697] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 229.221305][T11697] ? do_getname+0x35/0x390 [ 229.221318][T11697] ? do_sys_openat2+0xc7/0x1e0 [ 229.221330][T11697] ? __x64_sys_openat+0x12d/0x210 [ 229.221343][T11697] ? do_syscall_64+0x115/0x870 [ 229.221354][T11697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.221370][T11697] ? __pfx_path_openat+0x10/0x10 [ 229.221385][T11697] do_file_open+0x20e/0x430 [ 229.221397][T11697] ? __pfx_do_file_open+0x10/0x10 [ 229.221419][T11697] ? alloc_fd+0x471/0x7a0 [ 229.221432][T11697] ? do_getname+0x191/0x390 [ 229.221447][T11697] do_sys_openat2+0x10f/0x1e0 [ 229.221460][T11697] ? __pfx_do_sys_openat2+0x10/0x10 [ 229.221474][T11697] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 229.221487][T11697] ? __fget_files+0x21f/0x3d0 [ 229.221500][T11697] __x64_sys_openat+0x12d/0x210 [ 229.221514][T11697] ? __pfx___x64_sys_openat+0x10/0x10 [ 229.221528][T11697] ? ksys_write+0x1ac/0x250 [ 229.221548][T11697] do_syscall_64+0x115/0x870 [ 229.221559][T11697] ? clear_bhb_loop+0x40/0x90 [ 229.221572][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.221584][T11697] RIP: 0033:0x7f32df39de99 [ 229.221598][T11697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.221609][T11697] RSP: 002b:00007f32e01f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 229.221620][T11697] RAX: ffffffffffffffda RBX: 00007f32df626090 RCX: 00007f32df39de99 [ 229.221628][T11697] RDX: 0000000000000000 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 229.221634][T11697] RBP: 00007f32e01f4090 R08: 0000000000000000 R09: 0000000000000000 [ 229.221641][T11697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.221647][T11697] R13: 00007f32df626128 R14: 00007f32df626090 R15: 00007ffd8fe91618 [ 229.221661][T11697] [ 229.415796][T11703] netlink: 'syz.4.1894': attribute type 14 has an invalid length. [ 229.438464][ T42] audit: type=1800 audit(2000000134.439:2256): pid=11703 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1894" name="fn_play" dev="configfs" ino=42647 res=0 errno=0 [ 229.564529][T11718] sctp: [Deprecated]: syz.7.1900 (pid 11718) Use of int in maxseg socket option. [ 229.564529][T11718] Use struct sctp_assoc_value instead [ 229.570517][T11718] dyndbg: bad flag-op f, at start of fi6udc_pci.c<+p [ 229.573247][T11718] dyndbg: flags parse failed [ 229.575429][T11718] dyndbg: bad flag-op , at start of CŽC(–€ÖYû9YÎÞéµ`VÜyº [ 229.577829][T11718] dyndbg: flags parse failed [ 229.622110][T11717] bond5: entered promiscuous mode [ 229.761041][T11723] fuse: Bad value for 'user_id' [ 229.776894][T11723] fuse: Bad value for 'user_id' [ 229.814432][T11728] FAULT_INJECTION: forcing a failure. [ 229.814432][T11728] name failslab, interval 1, probability 0, space 0, times 0 [ 229.825696][T11728] CPU: 0 UID: 0 PID: 11728 Comm: syz.4.1903 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.825716][T11728] Tainted: [L]=SOFTLOCKUP [ 229.825720][T11728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.825726][T11728] Call Trace: [ 229.825731][T11728] [ 229.825735][T11728] dump_stack_lvl+0x100/0x190 [ 229.825775][T11728] should_fail_ex.cold+0x5/0xa [ 229.825789][T11728] should_failslab+0xc2/0x120 [ 229.825804][T11728] kmem_cache_alloc_noprof+0x91/0x6a0 [ 229.825817][T11728] ? trace_kmem_cache_alloc+0xdd/0x100 [ 229.825831][T11728] ? security_file_alloc+0x34/0x2c0 [ 229.825854][T11728] security_file_alloc+0x34/0x2c0 [ 229.825872][T11728] init_file+0x95/0x480 [ 229.825886][T11728] alloc_empty_file+0x79/0x1c0 [ 229.825900][T11728] path_openat+0xe7/0x4280 [ 229.825910][T11728] ? __kasan_slab_alloc+0x89/0x90 [ 229.825923][T11728] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 229.825934][T11728] ? do_getname+0x35/0x390 [ 229.825947][T11728] ? do_sys_openat2+0xc7/0x1e0 [ 229.825959][T11728] ? __x64_sys_openat+0x12d/0x210 [ 229.825972][T11728] ? do_syscall_64+0x115/0x870 [ 229.825987][T11728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.826003][T11728] ? __pfx_path_openat+0x10/0x10 [ 229.826018][T11728] do_file_open+0x20e/0x430 [ 229.826030][T11728] ? __pfx_do_file_open+0x10/0x10 [ 229.826051][T11728] ? alloc_fd+0x471/0x7a0 [ 229.826066][T11728] ? do_getname+0x191/0x390 [ 229.826082][T11728] do_sys_openat2+0x10f/0x1e0 [ 229.826096][T11728] ? __pfx_do_sys_openat2+0x10/0x10 [ 229.826110][T11728] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 229.826122][T11728] ? __fget_files+0x21f/0x3d0 [ 229.826135][T11728] __x64_sys_openat+0x12d/0x210 [ 229.826149][T11728] ? __pfx___x64_sys_openat+0x10/0x10 [ 229.826162][T11728] ? ksys_write+0x1ac/0x250 [ 229.826183][T11728] do_syscall_64+0x115/0x870 [ 229.826194][T11728] ? clear_bhb_loop+0x40/0x90 [ 229.826207][T11728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.826218][T11728] RIP: 0033:0x7f32df35e6ce [ 229.826242][T11728] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 229.826252][T11728] RSP: 002b:00007f32e0214ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 229.826263][T11728] RAX: ffffffffffffffda RBX: 00007f32e02156c0 RCX: 00007f32df35e6ce [ 229.826270][T11728] RDX: 0000000000000002 RSI: 00007f32e0214f90 RDI: ffffffffffffff9c [ 229.826277][T11728] RBP: 00007f32e0215090 R08: 0000000000000000 R09: 0000000000000000 [ 229.826283][T11728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.826289][T11728] R13: 00007f32df626038 R14: 00007f32df625fa0 R15: 00007ffd8fe91618 [ 229.826306][T11728] [ 230.018199][T11733] binder: 11732:11733 ioctl c0306201 200000000040 returned -14 [ 230.056056][T11734] binder: 11732:11734 ioctl c0306201 200000000640 returned -22 [ 230.068366][T11734] binder: 11732:11734 ioctl c0306201 200000000640 returned -22 [ 230.079432][T11734] binder: 11732:11734 ioctl c0306201 200000000640 returned -22 [ 230.093019][T11734] binder: 11732:11734 ioctl c0306201 200000000640 returned -22 [ 230.131833][ T42] audit: type=1400 audit(2000000135.129:2257): avc: denied { write } for pid=11737 comm="syz.6.1907" name="c.1" dev="configfs" ino=9199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 230.435572][T11749] Bluetooth: MGMT ver 1.23 [ 230.463448][T11751] overlay: Unknown parameter 'smackfsfloor' [ 230.489238][ T42] audit: type=1400 audit(2000000135.489:2258): avc: denied { lock } for pid=11752 comm="syz.5.1911" path="socket:[43760]" dev="sockfs" ino=43760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.592031][T11757] FAULT_INJECTION: forcing a failure. [ 230.592031][T11757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.625109][T11757] CPU: 2 UID: 0 PID: 11757 Comm: syz.5.1913 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.625137][T11757] Tainted: [L]=SOFTLOCKUP [ 230.625155][T11757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.625166][T11757] Call Trace: [ 230.625173][T11757] [ 230.625180][T11757] dump_stack_lvl+0x100/0x190 [ 230.625206][T11757] should_fail_ex.cold+0x5/0xa [ 230.625230][T11757] _copy_from_iter+0x1f4/0x1690 [ 230.625256][T11757] ? __asan_memset+0x23/0x50 [ 230.625274][T11757] ? __pfx__copy_from_iter+0x10/0x10 [ 230.625297][T11757] ? __pfx___alloc_skb+0x10/0x10 [ 230.625328][T11757] netlink_sendmsg+0x808/0xda0 [ 230.625349][T11757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.625368][T11757] ? selinux_socket_sendmsg+0x198/0x2f0 [ 230.625397][T11757] ____sys_sendmsg+0xa4d/0xbe0 [ 230.625422][T11757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.625442][T11757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.625478][T11757] ___sys_sendmsg+0x190/0x1e0 [ 230.625508][T11757] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.625533][T11757] ? __lock_acquire+0x49f/0x1a40 [ 230.625556][T11757] ? get_pid_task+0x106/0x250 [ 230.625616][T11757] __sys_sendmsg+0x160/0x210 [ 230.625638][T11757] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.625673][T11757] do_syscall_64+0x115/0x870 [ 230.625693][T11757] ? clear_bhb_loop+0x40/0x90 [ 230.625716][T11757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.625734][T11757] RIP: 0033:0x7fc315f9de99 [ 230.625749][T11757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.625766][T11757] RSP: 002b:00007fc316dd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.625783][T11757] RAX: ffffffffffffffda RBX: 00007fc316225fa0 RCX: 00007fc315f9de99 [ 230.625795][T11757] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 230.625806][T11757] RBP: 00007fc316dd0090 R08: 0000000000000000 R09: 0000000000000000 [ 230.625817][T11757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.625827][T11757] R13: 00007fc316226038 R14: 00007fc316225fa0 R15: 00007ffe0d2dc118 [ 230.625852][T11757] [ 231.347721][ T42] audit: type=1400 audit(2000000136.349:2259): avc: denied { name_bind } for pid=11779 comm="syz.5.1919" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 231.531590][ T42] audit: type=1400 audit(2000000136.529:2260): avc: denied { create } for pid=11786 comm="syz.5.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 231.549277][T11787] syzkaller1: entered promiscuous mode [ 231.551062][ T42] audit: type=1400 audit(2000000136.539:2261): avc: denied { ioctl } for pid=11786 comm="syz.5.1922" path="socket:[43906]" dev="sockfs" ino=43906 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 231.560539][T11787] syzkaller1: entered allmulticast mode [ 231.783337][T11792] FAULT_INJECTION: forcing a failure. [ 231.783337][T11792] name failslab, interval 1, probability 0, space 0, times 0 [ 231.794382][T11792] CPU: 2 UID: 0 PID: 11792 Comm: syz.5.1924 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.794411][T11792] Tainted: [L]=SOFTLOCKUP [ 231.794417][T11792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.794428][T11792] Call Trace: [ 231.794435][T11792] [ 231.794447][T11792] dump_stack_lvl+0x100/0x190 [ 231.794474][T11792] should_fail_ex.cold+0x5/0xa [ 231.794498][T11792] should_failslab+0xc2/0x120 [ 231.794521][T11792] __kmalloc_cache_noprof+0x91/0x6c0 [ 231.794551][T11792] ? gsmld_open+0x105/0xd40 [ 231.794575][T11792] ? __pfx_gsmld_open+0x10/0x10 [ 231.794596][T11792] gsmld_open+0x105/0xd40 [ 231.794620][T11792] ? __pfx_gsmld_open+0x10/0x10 [ 231.794642][T11792] tty_ldisc_open+0xa2/0x120 [ 231.794676][T11792] tty_set_ldisc+0x325/0x740 [ 231.794699][T11792] tty_ioctl+0x5b2/0x1640 [ 231.794722][T11792] ? __pfx_tty_ioctl+0x10/0x10 [ 231.794744][T11792] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 231.794780][T11792] ? __fget_files+0x215/0x3d0 [ 231.794798][T11792] ? hook_file_ioctl_common+0x140/0x440 [ 231.794827][T11792] ? selinux_file_ioctl+0x13b/0x290 [ 231.794852][T11792] ? selinux_file_ioctl+0xb6/0x290 [ 231.794880][T11792] ? __pfx_tty_ioctl+0x10/0x10 [ 231.794902][T11792] __x64_sys_ioctl+0x18e/0x210 [ 231.794929][T11792] do_syscall_64+0x115/0x870 [ 231.794949][T11792] ? clear_bhb_loop+0x40/0x90 [ 231.794970][T11792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.794990][T11792] RIP: 0033:0x7fc315f9de99 [ 231.795005][T11792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.795022][T11792] RSP: 002b:00007fc316dd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.795040][T11792] RAX: ffffffffffffffda RBX: 00007fc316225fa0 RCX: 00007fc315f9de99 [ 231.795051][T11792] RDX: 0000200000000140 RSI: 0000000000005423 RDI: 0000000000000006 [ 231.795062][T11792] RBP: 00007fc316dd0090 R08: 0000000000000000 R09: 0000000000000000 [ 231.795072][T11792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.795082][T11792] R13: 00007fc316226038 R14: 00007fc316225fa0 R15: 00007ffe0d2dc118 [ 231.795107][T11792] [ 231.987058][ T42] audit: type=1400 audit(2000000136.979:2262): avc: denied { write } for pid=11793 comm="syz.4.1926" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 232.143565][T11807] FAULT_INJECTION: forcing a failure. [ 232.143565][T11807] name failslab, interval 1, probability 0, space 0, times 0 [ 232.163033][T11807] CPU: 2 UID: 0 PID: 11807 Comm: syz.4.1929 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.163052][T11807] Tainted: [L]=SOFTLOCKUP [ 232.163056][T11807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.163062][T11807] Call Trace: [ 232.163067][T11807] [ 232.163071][T11807] dump_stack_lvl+0x100/0x190 [ 232.163089][T11807] should_fail_ex.cold+0x5/0xa [ 232.163103][T11807] should_failslab+0xc2/0x120 [ 232.163117][T11807] kmem_cache_alloc_noprof+0x91/0x6a0 [ 232.163130][T11807] ? trace_kmem_cache_alloc+0xdd/0x100 [ 232.163144][T11807] ? security_file_alloc+0x34/0x2c0 [ 232.163165][T11807] security_file_alloc+0x34/0x2c0 [ 232.163201][T11807] init_file+0x95/0x480 [ 232.163218][T11807] alloc_empty_file+0x79/0x1c0 [ 232.163232][T11807] path_openat+0xe7/0x4280 [ 232.163242][T11807] ? __kasan_slab_alloc+0x89/0x90 [ 232.163255][T11807] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 232.163266][T11807] ? do_getname+0x35/0x390 [ 232.163279][T11807] ? do_sys_openat2+0xc7/0x1e0 [ 232.163291][T11807] ? __x64_sys_openat+0x12d/0x210 [ 232.163310][T11807] ? do_syscall_64+0x115/0x870 [ 232.163322][T11807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.163340][T11807] ? __pfx_path_openat+0x10/0x10 [ 232.163360][T11807] do_file_open+0x20e/0x430 [ 232.163373][T11807] ? __pfx_do_file_open+0x10/0x10 [ 232.163393][T11807] ? alloc_fd+0x471/0x7a0 [ 232.163406][T11807] ? do_getname+0x191/0x390 [ 232.163420][T11807] do_sys_openat2+0x10f/0x1e0 [ 232.163434][T11807] ? __pfx_do_sys_openat2+0x10/0x10 [ 232.163448][T11807] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 232.163461][T11807] ? __fget_files+0x21f/0x3d0 [ 232.163474][T11807] __x64_sys_openat+0x12d/0x210 [ 232.163487][T11807] ? __pfx___x64_sys_openat+0x10/0x10 [ 232.163503][T11807] ? ksys_write+0x1ac/0x250 [ 232.163527][T11807] do_syscall_64+0x115/0x870 [ 232.163540][T11807] ? clear_bhb_loop+0x40/0x90 [ 232.163553][T11807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.163564][T11807] RIP: 0033:0x7f32df39de99 [ 232.163575][T11807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.163587][T11807] RSP: 002b:00007f32e0215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 232.163599][T11807] RAX: ffffffffffffffda RBX: 00007f32df625fa0 RCX: 00007f32df39de99 [ 232.163606][T11807] RDX: 0000000000000800 RSI: 0000200000001500 RDI: ffffffffffffff9c [ 232.163612][T11807] RBP: 00007f32e0215090 R08: 0000000000000000 R09: 0000000000000000 [ 232.163619][T11807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.163625][T11807] R13: 00007f32df626038 R14: 00007f32df625fa0 R15: 00007ffd8fe91618 [ 232.163639][T11807] [ 232.289719][T11812] uhci_hcd 0000:00:1d.0: remove, state 4 [ 232.291587][T11812] usb usb2: USB disconnect, device number 1 [ 232.321675][T11814] CIFS: Unable to determine destination address [ 232.382189][T11812] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 232.549313][T11816] FAULT_INJECTION: forcing a failure. [ 232.549313][T11816] name failslab, interval 1, probability 0, space 0, times 0 [ 232.555457][T11816] CPU: 2 UID: 0 PID: 11816 Comm: syz.4.1931 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.555488][T11816] Tainted: [L]=SOFTLOCKUP [ 232.555492][T11816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.555500][T11816] Call Trace: [ 232.555504][T11816] [ 232.555509][T11816] dump_stack_lvl+0x100/0x190 [ 232.555527][T11816] should_fail_ex.cold+0x5/0xa [ 232.555546][T11816] should_failslab+0xc2/0x120 [ 232.555560][T11816] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 232.555574][T11816] ? __pfx_vsnprintf+0x10/0x10 [ 232.555586][T11816] ? kvasprintf_const+0x66/0x1a0 [ 232.555604][T11816] kvasprintf+0xbc/0x150 [ 232.555618][T11816] ? __pfx_kvasprintf+0x10/0x10 [ 232.555632][T11816] ? pci_dev_assign_slot+0x28/0x1b0 [ 232.555649][T11816] ? acpi_dev_for_each_child+0x88/0xc0 [ 232.555664][T11816] ? find_held_lock+0x2b/0x80 [ 232.555682][T11816] kvasprintf_const+0x66/0x1a0 [ 232.555698][T11816] kobject_set_name_vargs+0x5a/0x140 [ 232.555714][T11816] dev_set_name+0xc7/0x100 [ 232.555732][T11816] ? __pfx_dev_set_name+0x10/0x10 [ 232.555752][T11816] ? pci_dev_assign_slot+0x28/0x1b0 [ 232.555766][T11816] ? pci_dev_assign_slot+0x151/0x1b0 [ 232.555784][T11816] pci_setup_device+0x5f5/0x2500 [ 232.555805][T11816] ? __pfx_pci_setup_device+0x10/0x10 [ 232.555824][T11816] ? kasan_save_track+0x14/0x30 [ 232.555836][T11816] ? __kasan_kmalloc+0xaa/0xb0 [ 232.555849][T11816] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 232.555868][T11816] ? lockdep_init_map_type+0x5c/0x250 [ 232.555882][T11816] ? __raw_spin_lock_init+0x3a/0x110 [ 232.555900][T11816] pci_scan_single_device+0x1ac/0x240 [ 232.555911][T11816] ? __pfx_pci_scan_single_device+0x10/0x10 [ 232.555921][T11816] ? __mutex_lock+0x82c/0x1bd0 [ 232.555934][T11816] ? __mutex_lock+0x82c/0x1bd0 [ 232.555947][T11816] pci_scan_slot+0x1c9/0x7c0 [ 232.555959][T11816] ? __pfx_pci_scan_slot+0x10/0x10 [ 232.555971][T11816] ? rcu_is_watching+0x12/0xc0 [ 232.555989][T11816] pci_scan_child_bus_extend+0x6b/0x7b0 [ 232.556000][T11816] ? pci_find_next_bus+0x60/0xb0 [ 232.556015][T11816] pci_rescan_bus+0x18/0x40 [ 232.556026][T11816] rescan_store+0xfb/0x130 [ 232.556037][T11816] ? __pfx_rescan_store+0x10/0x10 [ 232.556047][T11816] ? sysfs_file_kobj+0xe4/0x290 [ 232.556064][T11816] ? __pfx_rescan_store+0x10/0x10 [ 232.556075][T11816] bus_attr_store+0x74/0xb0 [ 232.556091][T11816] ? __pfx_bus_attr_store+0x10/0x10 [ 232.556107][T11816] sysfs_kf_write+0xf2/0x150 [ 232.556124][T11816] kernfs_fop_write_iter+0x3e0/0x5f0 [ 232.556137][T11816] ? __pfx_sysfs_kf_write+0x10/0x10 [ 232.556154][T11816] vfs_write+0x6ac/0x1050 [ 232.556172][T11816] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 232.556188][T11816] ? __pfx_vfs_write+0x10/0x10 [ 232.556213][T11816] ksys_write+0x12a/0x250 [ 232.556230][T11816] ? __pfx_ksys_write+0x10/0x10 [ 232.556250][T11816] do_syscall_64+0x115/0x870 [ 232.556262][T11816] ? clear_bhb_loop+0x40/0x90 [ 232.556275][T11816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.556287][T11816] RIP: 0033:0x7f32df39de99 [ 232.556300][T11816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.556311][T11816] RSP: 002b:00007f32e01f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.556322][T11816] RAX: ffffffffffffffda RBX: 00007f32df626090 RCX: 00007f32df39de99 [ 232.556329][T11816] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000005 [ 232.556336][T11816] RBP: 00007f32e01f4090 R08: 0000000000000000 R09: 0000000000000000 [ 232.556342][T11816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.556348][T11816] R13: 00007f32df626128 R14: 00007f32df626090 R15: 00007ffd8fe91618 [ 232.556363][T11816] [ 232.557094][T11816] pci (null): [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 232.682669][T11816] pci (null): BAR 4 [io 0x2000-0x201f] [ 232.685594][T11816] ------------[ cut here ]------------ [ 232.687285][T11816] ret < 0 [ 232.687293][T11816] WARNING: drivers/pci/probe.c:2768 at pci_device_add+0x133b/0x1810, CPU#2: syz.4.1931/11816 [ 232.691376][T11816] Modules linked in: [ 232.692949][T11816] CPU: 2 UID: 0 PID: 11816 Comm: syz.4.1931 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.696350][T11816] Tainted: [L]=SOFTLOCKUP [ 232.697689][T11816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.702250][T11816] RIP: 0010:pci_device_add+0x133b/0x1810 [ 232.704383][T11816] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 28 f4 ff ff e8 18 a3 ae fc 90 0f 0b 90 90 0f 0b 90 e9 0e f7 ff ff e8 06 a3 ae fc 90 <0f> 0b 90 e9 7e fa ff ff e8 f8 a2 ae fc 90 0f 0b 90 e9 11 fa ff ff [ 232.710571][T11816] RSP: 0018:ffffc9000381f928 EFLAGS: 00010293 [ 232.712474][T11816] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: ffffffff855bb419 [ 232.715065][T11816] RDX: ffff888038468000 RSI: ffffffff855bb99a RDI: ffff888038468000 [ 232.717492][T11816] RBP: ffff88801c2e9000 R08: 0000000000000005 R09: 0000000000000000 [ 232.720346][T11816] R10: 00000000ffffffea R11: 0000000000000000 R12: ffff8880227e7028 [ 232.723524][T11816] R13: ffff8880227e7000 R14: 0000000000000001 R15: ffff888022660000 [ 232.726750][T11816] FS: 00007f32e01f46c0(0000) GS:ffff8880d5fde000(0000) knlGS:0000000000000000 [ 232.730325][T11816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.733032][T11816] CR2: 00007f04525eb158 CR3: 000000003adfd000 CR4: 0000000000352ef0 [ 232.736442][T11816] Call Trace: [ 232.737891][T11816] [ 232.739232][T11816] ? __pfx_pci_device_add+0x10/0x10 [ 232.741395][T11816] ? __raw_spin_lock_init+0x3a/0x110 [ 232.743602][T11816] pci_scan_single_device+0x1d0/0x240 [ 232.745848][T11816] ? __pfx_pci_scan_single_device+0x10/0x10 [ 232.748214][T11816] ? __mutex_lock+0x82c/0x1bd0 [ 232.750179][T11816] ? __mutex_lock+0x82c/0x1bd0 [ 232.752126][T11816] pci_scan_slot+0x1c9/0x7c0 [ 232.753999][T11816] ? __pfx_pci_scan_slot+0x10/0x10 [ 232.755837][T11816] ? rcu_is_watching+0x12/0xc0 [ 232.757392][T11816] pci_scan_child_bus_extend+0x6b/0x7b0 [ 232.759124][T11816] ? pci_find_next_bus+0x60/0xb0 [ 232.760670][T11816] pci_rescan_bus+0x18/0x40 [ 232.762069][T11816] rescan_store+0xfb/0x130 [ 232.763446][T11816] ? __pfx_rescan_store+0x10/0x10 [ 232.765121][T11816] ? sysfs_file_kobj+0xe4/0x290 [ 232.766642][T11816] ? __pfx_rescan_store+0x10/0x10 [ 232.768282][T11816] bus_attr_store+0x74/0xb0 [ 232.769707][T11816] ? __pfx_bus_attr_store+0x10/0x10 [ 232.771303][T11816] sysfs_kf_write+0xf2/0x150 [ 232.772731][T11816] kernfs_fop_write_iter+0x3e0/0x5f0 [ 232.774348][T11816] ? __pfx_sysfs_kf_write+0x10/0x10 [ 232.776130][T11816] vfs_write+0x6ac/0x1050 [ 232.777486][T11816] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 232.779357][T11816] ? __pfx_vfs_write+0x10/0x10 [ 232.780889][T11816] ksys_write+0x12a/0x250 [ 232.782318][T11816] ? __pfx_ksys_write+0x10/0x10 [ 232.783832][T11816] do_syscall_64+0x115/0x870 [ 232.785563][T11816] ? clear_bhb_loop+0x40/0x90 [ 232.787059][T11816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.788908][T11816] RIP: 0033:0x7f32df39de99 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 232.790358][T11816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.796381][T11816] RSP: 002b:00007f32e01f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.798973][T11816] RAX: ffffffffffffffda RBX: 00007f32df626090 RCX: 00007f32df39de99 [ 232.801408][T11816] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000005 [ 232.803854][T11816] RBP: 00007f32e01f4090 R08: 0000000000000000 R09: 0000000000000000 [ 232.806443][T11816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.808945][T11816] R13: 00007f32df626128 R14: 00007f32df626090 R15: 00007ffd8fe91618 [ 232.811385][T11816] [ 232.812373][T11816] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 232.814612][T11816] CPU: 2 UID: 0 PID: 11816 Comm: syz.4.1931 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.818055][T11816] Tainted: [L]=SOFTLOCKUP [ 232.819407][T11816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.822538][T11816] Call Trace: [ 232.823734][T11816] [ 232.824765][T11816] dump_stack_lvl+0x100/0x190 [ 232.826400][T11816] vpanic+0x552/0x970 [ 232.827786][T11816] ? __pfx_vpanic+0x10/0x10 [ 232.829233][T11816] panic+0xd1/0xe0 [ 232.830520][T11816] ? __pfx_panic+0x10/0x10 [ 232.832297][T11816] ? check_panic_on_warn+0x1f/0x90 [ 232.833874][T11816] check_panic_on_warn.cold+0x19/0x34 [ 232.835582][T11816] ? pci_device_add+0x133b/0x1810 [ 232.837266][T11816] __warn.cold+0x191/0x318 [ 232.838651][T11816] __report_bug+0x30f/0x440 [ 232.840078][T11816] ? pci_device_add+0x133b/0x1810 [ 232.841638][T11816] ? __pfx___report_bug+0x10/0x10 [ 232.843197][T11816] ? kasan_quarantine_put+0x104/0x240 [ 232.844883][T11816] ? lockdep_hardirqs_on+0x78/0x100 [ 232.846498][T11816] ? device_add+0x290/0x1970 [ 232.847932][T11816] ? pci_device_add+0x133b/0x1810 [ 232.849498][T11816] report_bug+0xb2/0x220 [ 232.850811][T11816] ? pci_device_add+0x133b/0x1810 [ 232.852365][T11816] handle_bug+0x16a/0x2a0 [ 232.853706][T11816] exc_invalid_op+0x17/0x50 [ 232.855150][T11816] asm_exc_invalid_op+0x1a/0x20 [ 232.856670][T11816] RIP: 0010:pci_device_add+0x133b/0x1810 [ 232.858399][T11816] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 28 f4 ff ff e8 18 a3 ae fc 90 0f 0b 90 90 0f 0b 90 e9 0e f7 ff ff e8 06 a3 ae fc 90 <0f> 0b 90 e9 7e fa ff ff e8 f8 a2 ae fc 90 0f 0b 90 e9 11 fa ff ff [ 232.864225][T11816] RSP: 0018:ffffc9000381f928 EFLAGS: 00010293 [ 232.866142][T11816] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: ffffffff855bb419 [ 232.868568][T11816] RDX: ffff888038468000 RSI: ffffffff855bb99a RDI: ffff888038468000 [ 232.870873][T11816] RBP: ffff88801c2e9000 R08: 0000000000000005 R09: 0000000000000000 [ 232.873274][T11816] R10: 00000000ffffffea R11: 0000000000000000 R12: ffff8880227e7028 [ 232.875720][T11816] R13: ffff8880227e7000 R14: 0000000000000001 R15: ffff888022660000 [ 232.878154][T11816] ? pci_device_add+0xdb9/0x1810 [ 232.879716][T11816] ? pci_device_add+0x133a/0x1810 [ 232.881287][T11816] ? pci_device_add+0x133a/0x1810 [ 232.882851][T11816] ? __pfx_pci_device_add+0x10/0x10 [ 232.884417][T11816] ? __raw_spin_lock_init+0x3a/0x110 [ 232.886054][T11816] pci_scan_single_device+0x1d0/0x240 [ 232.887722][T11816] ? __pfx_pci_scan_single_device+0x10/0x10 [ 232.889544][T11816] ? __mutex_lock+0x82c/0x1bd0 [ 232.891033][T11816] ? __mutex_lock+0x82c/0x1bd0 [ 232.892543][T11816] pci_scan_slot+0x1c9/0x7c0 [ 232.893980][T11816] ? __pfx_pci_scan_slot+0x10/0x10 [ 232.895629][T11816] ? rcu_is_watching+0x12/0xc0 [ 232.897109][T11816] pci_scan_child_bus_extend+0x6b/0x7b0 [ 232.898809][T11816] ? pci_find_next_bus+0x60/0xb0 [ 232.900362][T11816] pci_rescan_bus+0x18/0x40 [ 232.901769][T11816] rescan_store+0xfb/0x130 [ 232.903152][T11816] ? __pfx_rescan_store+0x10/0x10 [ 232.904730][T11816] ? sysfs_file_kobj+0xe4/0x290 [ 232.906271][T11816] ? __pfx_rescan_store+0x10/0x10 [ 232.907852][T11816] bus_attr_store+0x74/0xb0 [ 232.909262][T11816] ? __pfx_bus_attr_store+0x10/0x10 [ 232.910800][T11816] sysfs_kf_write+0xf2/0x150 [ 232.912237][T11816] kernfs_fop_write_iter+0x3e0/0x5f0 [ 232.913880][T11816] ? __pfx_sysfs_kf_write+0x10/0x10 [ 232.915512][T11816] vfs_write+0x6ac/0x1050 [ 232.916938][T11816] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 232.918750][T11816] ? __pfx_vfs_write+0x10/0x10 [ 232.920250][T11816] ksys_write+0x12a/0x250 [ 232.921624][T11816] ? __pfx_ksys_write+0x10/0x10 [ 232.923132][T11816] do_syscall_64+0x115/0x870 [ 232.924593][T11816] ? clear_bhb_loop+0x40/0x90 [ 232.926160][T11816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.927986][T11816] RIP: 0033:0x7f32df39de99 [ 232.929396][T11816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.934993][T11816] RSP: 002b:00007f32e01f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.937533][T11816] RAX: ffffffffffffffda RBX: 00007f32df626090 RCX: 00007f32df39de99 [ 232.939957][T11816] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000005 [ 232.942370][T11816] RBP: 00007f32e01f4090 R08: 0000000000000000 R09: 0000000000000000 [ 232.944807][T11816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.947231][T11816] R13: 00007f32df626128 R14: 00007f32df626090 R15: 00007ffd8fe91618 [ 232.949682][T11816] [ 232.951172][T11816] Kernel Offset: disabled [ 232.952534][T11816] Rebooting in 86400 seconds..