last executing test programs: 4m41.191470304s ago: executing program 1 (id=61): ioctl$OCFS2_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={0x2, 0x1, 0x6, 0xf, 0xb76, 0x6}) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x5, 0x4000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x18) preadv2(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000240)=""/100, 0x64}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/159, 0x9f}], 0x6, 0x5, 0x6, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x0, 0x3, 0x58000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) flock(r0, 0x2) r2 = fsmount(r0, 0x0, 0x78) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = getpgrp(0xffffffffffffffff) r4 = fcntl$getown(r0, 0x9) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000480)={r2, r0, 0xf2b1}) recvmsg$kcm(r0, &(0x7f0000000740)={&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)=""/2, 0x2}, {&(0x7f0000000580)=""/203, 0xcb}, {&(0x7f0000000680)=""/41, 0x29}, {&(0x7f00000006c0)=""/38, 0x26}], 0x4}, 0x10100) flock(r2, 0x1) lsetxattr$security_ima(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), &(0x7f0000000800)=@sha1={0x1, "6315fd597e19902414c2dc2f7913d868da83b5a5"}, 0x15, 0x0) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000840)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000880)="650f01d16466663e2e66660f38829bf60f00000f01c80f01c20f01cbc4e2fd05a42e8000c0fef30f1af50f6b55043e0f01be0a000000676436f4", 0x3a}], 0x1, 0xc, &(0x7f0000000900)=[@dstype0={0x6, 0xd}], 0x1) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000940)) mmap$xdp(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r0, 0x180000000) rt_sigpending(&(0x7f0000000980), 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000009c0)={0x72, 0x6, 0x5, 0x2, 0x7, 0x1, 0x5, 0x5, 0x0}, &(0x7f0000000a00)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={r6, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0xfffffff9, 0x2, 0x4c23, 0x7, 0xa2, 0x3d61, 0x7}, 0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r0, 0x84, 0x25, &(0x7f0000000b00)={r6, @in={{0x2, 0x4e23, @multicast2}}, 0x8, 0x6, 0xa}, &(0x7f0000000bc0)=0x90) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000c00)={r7, 0x3, 0x6, 0x7f, 0x9c, 0x10000}, &(0x7f0000000c40)=0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000c80)={'ip_vti0\x00', 0x2000}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x2, @raw_data="c34a685f7fb3e26be6ccc426f02a602f8a66d4a542ff8d6b586b7308f2ee239646ca1940fd9c4ba78f1b7868de02c7fd2d9cc28e9fc7f64e2d41a658529c189104d7ce3b01b6d34002f99a5e3883b41820fb9afa81661bd8fce26c20f933d65e872594c7d3e99b98d25c70339f9a9a0fb88a60f86433e92a93b048033f4678bba13402959a893b3e10671e91a3aa205ec66e117df90667ac3d46408cbeb17a15a7a0e0320bdf45f653712bcb58e9008f1f7898630c9e1ee13feed4948a2f863570d146646f70ffda"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r5, 0x84, 0x7a, &(0x7f0000000dc0)={r6, 0xffffffffffffffff, 0x1800}, &(0x7f0000000e00)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000e40)={r6, 0x80}, &(0x7f0000000e80)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000ec0)={0x6, 0xc, 0x3, 0x18, r8}, &(0x7f0000000f00)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000f40)={r10, 0x8}, &(0x7f0000000f80)=0x8) 4m41.114348957s ago: executing program 1 (id=62): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x264, 0x15, 0x200, 0x70bd2b, 0x25dfdbfe, {0x15, 0x7f}, [@INET_DIAG_REQ_BYTECODE={0x42, 0x1, "d37b540e319de3dc3174b58ac406c9075de90a95e677356d77d4454df7fc6351770eb7ce119059874e05c3251f6a4bff03486b1743c7a9ab99124f74fff9"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "c1dbb4270951e6ba0dd592e23ff2c2b0abf3e20dd4b827cf25f0bc09a14cbc56a6dc363de52e526121b42beff559d17d68c3e5d9dfb41723c5475e0659f009da1f4e2fc1afb47aa64ecdf58d0685991550f3d68ddc572ddf6d2528a587f05f8dca6a0a8246a138cfa4adc81be94b6103dde9917c811ce10804a14c5e1535a362d8e8d5675afd2a1b971a9ffbb4d2f74a1e81"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "fb4aacacb751157f5cf65acf12c61fb79f5648e269c7222c0148664df310855377fb56a023cf112fb223505a9d7912e98a5787de57b47bbf947fc20e455bb65c39b452b9d8521f0bd903cc7c37de526e031c1ef6f2d678a22f67836560f6eb955acf2f088e8dc0220bc07abda78c4f358db9782e628ec94d78251d278daacec61d8a51e3c0c1b5133585aa47ab4835df92e37c70d28a02207e60c844c87a3f4b20872fe623b5e6e7e9cdcabff1f10b1e8f8c9bb28e53a1e1f1ee50fcc46911a46a4ef1ad080f528f85871e"}, @INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "40fd9472f1f6de52a3c5f3cccd80ea79bcebd8d915b3974c5630725a3bd057f1e5a2c46dbdb7ce89f35dcdf69f6cf7e411ba2202e3427a0a81227166f9ccaa3b4129be6d61d3a850a0889e0353a8ede948dd5a7c4ebb7235bcd59234a2622d4e66a1481ec3a57c71f8b5073da19ed84082e2a15d75e5a08852aaf580be2935c7c7312a2beb6e22a9d6d2a0fc5cdb3bb49dff162b825f4d03f05e42659d"}]}, 0x264}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000480), 0x0, 0x400000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000000440)="1027725e959f50ecfbb57697d61cb9b40d817046bac4da9fc1a79cf9926ee10effc993d839d064e7b0afccef9d125a", 0x2f, r2}, 0x68) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000640)={'tunl0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x80, 0x7800, 0xfffffffd, 0x9, {{0xd, 0x4, 0x0, 0x34, 0x34, 0x65, 0x0, 0x5d, 0x29, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x1f, 0x84, [@broadcast, @remote, @multicast1, @empty, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r4, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000800)={0x1, 0xf0, 0x20, 0x2, 0x4, 0x4, 0x5, 0xfe, 0xb3, 0x5, 0x1, 0x4, 0x10, 0x4}, 0xe) epoll_pwait2(r1, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f00000008c0)={0x0, 0x989680}, &(0x7f0000000900)={[0x1]}, 0x8) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, r7, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x14) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x110, r8, 0x122, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "2a4d59e1ad3aedfc158c71e1e65a5ca4ae2536feda09331cad55c0ab87a01be7d9820464"}}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8014}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5a5}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000d00)={0x2, 0xdc0}, &(0x7f0000000d40)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r1, 0x84, 0x25, &(0x7f0000000d80)={r9, @in6={{0xa, 0x4e21, 0x5, @local, 0x9}}, 0x6, 0xd}, 0x90) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x6c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004004}, 0x14) r10 = add_key$user(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x0}, &(0x7f0000001100)="35d8f12415c6abe223c3e1dc695571c32c02d29cf7da144b54714f903a8a4816fb2fe6c9bf475058d589da03d3391993f34a82cc2177414749ed4341002ba1c54c5e86a53a6854d862425aab85de993514a2fad131fd026ff9cd40792b7fad09f038e701f391313a073eeacaaf473de2678e74bd44ecfe0540b0c2998ef082e052c6523e5a098ff980c7d5781ac2007591e15cad8bf8263cd85767a149c989cf6ca3ba27cf99305f1830c68222b4576ebd2fb27f619c3a78720fecd9c1c9c539f9298b430ad943ec8cc6cd5737e7d1cef579c91bdd93729eeb22eaafc530d03c50d681a1077d34977d9fb1f55352df0397285d", 0xf3, 0xfffffffffffffff9) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001200), 0x105000, 0x0) r11 = add_key$keyring(&(0x7f00000012c0), &(0x7f0000001300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r12 = add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x1}, 0x0, 0x0, r11) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001340)={'pimreg1\x00'}) keyctl$reject(0x13, r10, 0xffffffffffffffff, 0x700000000, r12) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r13, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x68, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x60e56770}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000090}, 0x880) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f00000014c0)={{r3}, "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"}) 4m41.054557094s ago: executing program 1 (id=64): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000100)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x8, 0x70bd09, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) shmctl$SHM_LOCK(r0, 0xb) 4m41.05313956s ago: executing program 1 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x20842, 0x63) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) truncate(&(0x7f0000000780)='./file0\x00', 0x8fff5) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=[0x4], 0x0, 0xec6f, 0x1, 0x1}}, 0x40) (async) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='27', 0x2) mkdir(&(0x7f0000000540)='my_sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000580)='my_sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x4) (async) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000900)={'gretap0\x00', {0x2, 0x4e22, @private=0xa010100}}) (async) openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0xc2, 0x0) (async) file_setattr(r1, &(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)={0xc040, 0x2, 0x2, 0x6, 0x10001}, 0x18, 0x400) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x163) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c0007800800064000000001"], 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f0000000540), 0x40000000000009f, 0x0) (async, rerun: 32) fstat(0xffffffffffffffff, 0x0) (rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@gettaction={0x14, 0x5a, 0x1, 0xffffffff}, 0x14}}, 0x24004000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000100)) (async) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000000)) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) 4m40.951548887s ago: executing program 1 (id=69): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x400000000010, 0x3, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) mlockall(0x7) capset(0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000004c0)={0x1, 0x0, [{0xeafddb4deff0001c, 0x0, 0x0}]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000002060100000000060000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a32000000001800078005000300000000000c0001800c000140e000000205000500020000000500010006"], 0x64}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000380000000000019078ac1e0005ac1414aa04009078e00000e0450000000000000000110000ac1414aa0000000017c1b7df60c70000"], 0x0) r3 = getpid() process_vm_readv(r3, 0x0, 0x0, &(0x7f0000000d40)=[{0x0}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000540)='auth.unix.ip/channel\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000000d80)={0x2020}, 0x2020) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000180)={0x0, 0x2, 0x2, {0x5, @win={{0xa1, 0x80000000, 0x5, 0xffffff80}, 0x6, 0x8000, &(0x7f0000000280)={{0x1, 0xc, 0xe0000, 0x3}}, 0x800, 0x0, 0xc}}}) mbind(&(0x7f000049c000/0x4000)=nil, 0x4000, 0xc000, &(0x7f0000000100)=0x68, 0x8, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./binfmt\x00', &(0x7f00000003c0)='binfmt_misc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./binfmt/status\x00', 0x1, 0x0) write$P9_RREAD(r7, 0x0, 0x0) syz_clone(0x22304000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m40.581844171s ago: executing program 1 (id=82): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x2, 0x70bd2b, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x7, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x7, 0x6, 0x4094}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc085}, 0x4008000) recvmsg(r1, &(0x7f0000000840)={&(0x7f0000000540)=@nfc_llcp, 0x80, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/5, 0x5}, {&(0x7f0000000600)=""/228, 0xe4}, {&(0x7f0000000700)=""/223, 0xdf}], 0x3}, 0x60) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e130100"], 0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./trace\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./bus\x00', &(0x7f0000000040)='ufs\x00', 0x200002b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./mnt\x00', 0x1ff) mount(&(0x7f0000000980)=@filename='./dev/sda1\x00', &(0x7f00000009c0)='./mnt\x00', &(0x7f0000000a00)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f00005d3000/0x2000)=nil, 0x2000, 0x1) chdir(&(0x7f0000000a40)='./mnt\x00') r3 = open(&(0x7f0000000a80)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb5c949b8418560a1, 0x30, r3, 0x2000) capset(0x0, 0x0) keyctl$invalidate(0x15, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000ac0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000c00)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @remote}}}, 0x108) close(r6) writev(r4, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) 4m40.276255185s ago: executing program 32 (id=85): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000540)=""/24, &(0x7f0000000740)=0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r2, &(0x7f0000000040)='transport=loop,nqn=testsubsys,disable_sqflow', 0x2c) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x800, 0x40000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000090000000000000007000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000001833000001000000000000000000000018420000fcffffff0000000000000000186100000e000000000000000900000095002d4519ae0000"], &(0x7f0000000140)='GPL\x00', 0x1f, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x34, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000300)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x6, 0x1ff, 0xfffffffa}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[r4], &(0x7f0000000400)=[{0x5, 0x5, 0xe, 0x2}, {0x1, 0x2, 0x2, 0x9}, {0x4, 0x5, 0x0, 0xb}, {0x4, 0x5, 0x3, 0x5}, {0x3, 0x3, 0xd, 0x2}, {0x4, 0x2, 0x1, 0x5}, {0x5, 0x1, 0x10, 0x9}], 0x10, 0x2}, 0x94) 4m25.414029435s ago: executing program 33 (id=82): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x2, 0x70bd2b, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x7, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x7, 0x6, 0x4094}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc085}, 0x4008000) recvmsg(r1, &(0x7f0000000840)={&(0x7f0000000540)=@nfc_llcp, 0x80, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/5, 0x5}, {&(0x7f0000000600)=""/228, 0xe4}, {&(0x7f0000000700)=""/223, 0xdf}], 0x3}, 0x60) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e130100"], 0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./trace\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./bus\x00', &(0x7f0000000040)='ufs\x00', 0x200002b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./mnt\x00', 0x1ff) mount(&(0x7f0000000980)=@filename='./dev/sda1\x00', &(0x7f00000009c0)='./mnt\x00', &(0x7f0000000a00)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f00005d3000/0x2000)=nil, 0x2000, 0x1) chdir(&(0x7f0000000a40)='./mnt\x00') r3 = open(&(0x7f0000000a80)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb5c949b8418560a1, 0x30, r3, 0x2000) capset(0x0, 0x0) keyctl$invalidate(0x15, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000ac0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000c00)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @remote}}}, 0x108) close(r6) writev(r4, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) 4m9.263945828s ago: executing program 5 (id=396): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x100}, 0x50) mount$afs(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/@cell/foo@sys\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000540)={0xfc, {"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", 0x1000}}, 0x1006) umount2(&(0x7f0000000500)='./mnt\x00', 0x8) 4m9.183972116s ago: executing program 5 (id=399): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7f, 0x1d58}, &(0x7f00000001c0)=0x7fff, 0x0, 0x100000001, 0x9, 0x5, 0xda, 0x65, 0xa}}], 0x58}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/100, 0x64) syz_fuse_handle_req(r1, &(0x7f0000000340)="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", 0x2000, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x6}}, 0x24, 0x3) listxattr(&(0x7f0000000280)='.\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000002400)=0x909, 0x4) 4m9.123512435s ago: executing program 5 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000019700)='./file1\x00', 0x13e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000019740), 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_open_dev$mtd(&(0x7f0000000600), 0x0, 0x2) ioctl$BLKPG(r2, 0x400c4d0f, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x4001, 0x3, 0x310, 0x148, 0x0, 0x148, 0x148, 0x148, 0x278, 0x240, 0x240, 0x278, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@multiport={{0x50}, {0x0, 0x3, [0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e00, 0x4e21, 0x4e22, 0x4e23, 0x4e23, 0x4e21, 0x4e21, 0x4e24], [0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4c, 0x100, 0x2}}}, {{@ip={@local, @remote, 0xff000000, 0xffffff00, 'geneve0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x1, 0x2}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x2, 0x3, 0x1, 0x7}}, @common=@ttl={{0x28}, {0x0, 0xa3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x15, 0x5, 0x7, 0x9, 'snmp\x00', 'syz0\x00', {0xf7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) mount$fuse(0x0, &(0x7f0000019780)='./file0\x00', &(0x7f00000197c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRES64=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0011ff7217c1c8a49baf772c1ba95956c3dfbb8c2244ca7988804b6eaa0c281a6b5d7e14632f42626d82871a4cee238ba20d8354a68f61da3a8310193426a73159bbc912bd4533166e93d6e6e882c4926fc01eb44476b19e9838034f782d0c5f58b22a836be1f76c3d6d5a46a5ed1ea66e5087618141e24491daa82434278043a4dc3d8cd4180691b01dd890e958554a9e289e86e10375bd2492c9670c1c482815b08a11e0946095163ea710b40a8f0fe3e2f5c412f986c604f4c2a1ccab371ca201b9756350"]) acct(&(0x7f0000019880)='./file0/file0/file0\x00') read$FUSE(r0, &(0x7f00000198c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r0, &(0x7f000001b900)={0x50, 0x0, r4, {0x7, 0x29, 0x80000001, 0x11012450, 0x7, 0x0, 0x81}}, 0x50) r7 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x22401, 0x0) fallocate(r8, 0x11, 0x460e, 0x40003) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r9 = open(&(0x7f0000000040)='./file1\x00', 0x60840, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r10, 0x1, 0x48, &(0x7f0000000480)=""/174, &(0x7f0000000540)=0xae) fcntl$setlease(r9, 0x400, 0x0) mkdirat(r10, &(0x7f0000000580)='./file0\x00', 0x109) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000640)={0x2, {{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7}}, 0xfffffffffffffffc}, 0x90) syz_fuse_handle_req(r0, &(0x7f000001b980)="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", 0x2000, &(0x7f000001d980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000001da40)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x3b1, 0x8, 0x1, 0x0, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r5, r6, 0x6, 0x3f29}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m9.120752001s ago: executing program 5 (id=402): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0xa38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff02000000110000002000000088a276657468305f746f5f62726964676500736974300000000000000000000000006272696467655f736c6176655f30000076657468305f766c616e0000000000000180c2000001ff000000ffffdf0921f6558bffffffff00000000b8080000b808000008090000616d6f6e6700000000000000000000000000000000000000000000000000000018040000000000000c000000000000000200000008000000070000000002000007000000c002000064550000060000007f0000000600000000000000f86f000008000000ff0100004e0000000b00000003000000060000000000010009000000f8ffffff090000000a000000090000009e0100000700000003000000020000005512ffff04000000f7ffffffff7f000007000000060000008300000007000000060000000500000007000000080000000b000000070000004d05000001000000230f000001000000080000000600000040000000090000000000000006000000000200000000000005000000000003000600000064130000010000000800000071f800000500000007000000ee0500000700000006000000e9000000050000000500000001010000ff0f000000800000207e000002000000d6050000090000000f0000000600000008000000010000002a6200008674000006000000ffffffff9528cc77ffffff7f07000000030000000400000006000000000000e0090000000800000008000000080000000300000008000000020000008dc0c064af0a00000500000087ba000081000000df01000003000000220a00009b00000009000000ff4900000900000004000000c5000000050000000200000000000000030000006378c55408000000f5000000cadc000083b600000900000005000000ff0000000300000000000000020000000600000005000000070000000700000003000000050000000000000c05000000c40000000200000003000000070000000b000000e80300000500000008000000ee00000000100000ea000000aa06000010000000060000000300000008000000060000000500000001000100010000000900000001000000000000003e00000020a90b0002000000b4050000ff7f000018210000050000005111000004000000010000000200000000040000b9000000ff000000020000000900000007000000fcffffff400000000100000005000000020000008a030000030000000a00000004000000000000007d010000c639000008000000ff000000070000000300000040000000030000000600000004000000060000000600000000020000002000000800000007000000020000004c0000007a0f00000000000001000000010000800600000002000000560b0000ff00000006000000040000000180000001000100030000000000000007000000ffff0000070000000200000000080000040000000d000000ffffff7f020000005f000000ffffffff10000000000000000b00000004000000040000000100000064340000020000000000000001000000000000000104000005000000c9020000fcffffff0e000000430000004015000004000000800000000600000004000000ff030000640400006a000000060000000900000002000000090000000080000000000000050000000400000000000000ff0700000400000009000000e2a6dc555a0000000c000000510000000b00000002000000090000000100000007000000ffffffff07000000070000000400000048630000ffff00000700000004000000b11b0000040000000700000002000000090000000200000005000000000001007f00000009000000d90d0000ffffffff01000000e601000008000000f104000004000000f7ffffff09000000040000008c00000005000000000000000800000001000100020000007600000006000000400000000010000001000000090000000600000007000000030000000700000002000000ff0f00000800000000000000010000000900000000080000418b0000080000000aa50000ff03000052ffffff0700000000000000040000000900000000e003004000000045000000000000000900000004000000090000000200000005000000aa000000ffffff7f0100010094000000090000000400000002000000800000000c0000000500000003000000852d0000040000000700000007000000070000000a0000000100000009000000980d00000c0000004c000000030000000900000006000000ff0f00000010000000000000ff0f0000040000000100000080000000ffffff7fff01000001040000030000001a000000000001000200000005000000f8ffffff01000000a00d000002000000330c000004000000040000000000050009000000020000000000000006000000040000000900000000000000010000800747000002000000060000000800000004000000080000000000000005000000250e00000900000006000000fb000000ff0300000900000005000000010000003a0e00009f0400000c00000001040000ea0c3c77ffffffff04000000090000008200000009000000080000000104000002000000070000009a000000070000000000000001000080030000000100000063a60000020000003f0d000007000000010000000a000000b34200000000000007000000330c0000001000000500000000000000080000006a0000008100000002000000d3080000001000000900000000feffff0500000003000000626f00000c0000000000000006000000030000000000000005000000000020800500000007000000000000007fffffff6f0a0000130c000000000000910000000400000007000000010001000700000039070000070000000300000007000000d0a400000300000002000000c54c00000300000001000000000000000700000008000000070000000f000000850f000007000000030000000000040009000000080000000a00000004000000090000000400000004000000ff0300000300000004000000d30b000006000000986a00000900000002000000350d0000990200000104000001000000000000000000000049444c4554494d455200000000000000000000000000000000000000000000002800000000000000460f000073797a31000000000000000000000000000000000000000000000011000000200000005cd476657468305f746f5f687372000000006e69637666300000000000000000000064756d6d7930000000000000000000006d616373656330000000000000000000000000000000ffff00ffff00aaaaaaaaaabb00ff0000ff0000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff00"/2616]}, 0xab0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = inotify_init1(0x0) r2 = dup(r1) openat(r2, &(0x7f0000000340)='./file0\x00', 0x305c00, 0x142) r3 = syz_open_dev$vim2m(&(0x7f0000000e00), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000e40)={0xf0f029, 0x1}) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000e80)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x1fffffff, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x9, 0xa733, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) 4m8.842612005s ago: executing program 5 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x2800402, 0x0) (async) mount(0x0, &(0x7f0000000ac0)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x2800402, 0x0) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000900)='27', 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='map_files\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x10000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='27', 0x2) (async) write(r2, &(0x7f0000000100)='27', 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xffeffffffffffff9]}, 0x8, 0x800) (async) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xffeffffffffffff9]}, 0x8, 0x800) io_setup(0x206, &(0x7f0000000200)) (async) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r4, 0x47f, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000002c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) getdents(r1, &(0x7f0000000c00)=""/4114, 0x1012) 4m8.712496466s ago: executing program 5 (id=404): openat$urandom(0xffffffffffffff9c, &(0x7f0000000480), 0x103902, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/70, 0x46}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x2, 0x40000002, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0), 0x628a40, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f00000006c0)={0x3, [[0x6, 0x9, 0x5, 0x1, 0x7, 0x7, 0x4, 0x4], [0x3, 0x9, 0x3, 0x1, 0x6, 0xe05, 0x6, 0xa9], [0x0, 0x0, 0x206, 0xffff, 0x1, 0x7, 0xffffffff, 0x3]], '\x00', [{0x8000, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x7, 0x1, 0x1}, {0xb, 0x7, 0x1, 0x1}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x8e, 0xffff, 0x1, 0x0, 0x0, 0x1}, {0x400, 0x100, 0x1, 0x1, 0x1, 0x1}, {0xe900, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x377080, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x1e29, 0x0, 0x1, 0x1}, {0x6, 0xa459, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x198, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x5552, 0x1, 0x1, 0x1, 0x1}], '\x00', 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000480), 0x103902, 0x0) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/70, 0x46}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x2, 0x40000002, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0), 0x628a40, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f00000006c0)={0x3, [[0x6, 0x9, 0x5, 0x1, 0x7, 0x7, 0x4, 0x4], [0x3, 0x9, 0x3, 0x1, 0x6, 0xe05, 0x6, 0xa9], [0x0, 0x0, 0x206, 0xffff, 0x1, 0x7, 0xffffffff, 0x3]], '\x00', [{0x8000, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x7, 0x1, 0x1}, {0xb, 0x7, 0x1, 0x1}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x8e, 0xffff, 0x1, 0x0, 0x0, 0x1}, {0x400, 0x100, 0x1, 0x1, 0x1, 0x1}, {0xe900, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x377080, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x1e29, 0x0, 0x1, 0x1}, {0x6, 0xa459, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x198, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x5552, 0x1, 0x1, 0x1, 0x1}], '\x00', 0x5}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 3m53.503244003s ago: executing program 34 (id=404): openat$urandom(0xffffffffffffff9c, &(0x7f0000000480), 0x103902, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/70, 0x46}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x2, 0x40000002, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0), 0x628a40, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f00000006c0)={0x3, [[0x6, 0x9, 0x5, 0x1, 0x7, 0x7, 0x4, 0x4], [0x3, 0x9, 0x3, 0x1, 0x6, 0xe05, 0x6, 0xa9], [0x0, 0x0, 0x206, 0xffff, 0x1, 0x7, 0xffffffff, 0x3]], '\x00', [{0x8000, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x7, 0x1, 0x1}, {0xb, 0x7, 0x1, 0x1}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x8e, 0xffff, 0x1, 0x0, 0x0, 0x1}, {0x400, 0x100, 0x1, 0x1, 0x1, 0x1}, {0xe900, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x377080, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x1e29, 0x0, 0x1, 0x1}, {0x6, 0xa459, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x198, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x5552, 0x1, 0x1, 0x1, 0x1}], '\x00', 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000480), 0x103902, 0x0) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/70, 0x46}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x2, 0x40000002, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0), 0x628a40, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f00000006c0)={0x3, [[0x6, 0x9, 0x5, 0x1, 0x7, 0x7, 0x4, 0x4], [0x3, 0x9, 0x3, 0x1, 0x6, 0xe05, 0x6, 0xa9], [0x0, 0x0, 0x206, 0xffff, 0x1, 0x7, 0xffffffff, 0x3]], '\x00', [{0x8000, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x7, 0x1, 0x1}, {0xb, 0x7, 0x1, 0x1}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x8e, 0xffff, 0x1, 0x0, 0x0, 0x1}, {0x400, 0x100, 0x1, 0x1, 0x1, 0x1}, {0xe900, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x377080, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x1e29, 0x0, 0x1, 0x1}, {0x6, 0xa459, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x198, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x5552, 0x1, 0x1, 0x1, 0x1}], '\x00', 0x5}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 3m48.998285233s ago: executing program 2 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001200)='./proc\x00', &(0x7f0000001240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) write(r0, &(0x7f0000001340)='27', 0x2) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000000)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000540)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000600)={[0x8000, 0x1000000003, 0x1ffffffffffd, 0x5, 0x2d391, 0x3da0000000000, 0x2004cb, 0x80001000, 0xa7c, 0x3, 0x5, 0x9, 0x9, 0x0, 0xfffffffffffffffd, 0x5], 0xeeee8000, 0xa02}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000009c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) socket$inet(0x2, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000ac0)=[{{0x0, 0x4b, &(0x7f0000000b00), 0x1}}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000000206030a00000000000000000000000005000100070000000500050002000000050000000000000c000780080006400000000000"], 0x38}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = epoll_create(0x7) r9 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000980)={0x60000000}) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000880)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 3m48.794323074s ago: executing program 2 (id=483): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000011c0)='./sys\x00', &(0x7f0000001200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./sys/class/net/bridge0/bridge/max_age\x00', 0x2, 0x0) symlink(&(0x7f0000000000)='./sys/class/net/bridge0/bridge/max_age\x00', &(0x7f0000000080)='./sys/class/net/bridge0/bridge/max_age\x00') write$P9_RGETLOCK(r0, &(0x7f0000001280)=ANY=[@ANYBLOB='5'], 0x24) 3m48.744426567s ago: executing program 2 (id=484): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000200)={0xffffffff, 0x6, 0x0, 0xfffffffc, '\x00', '\x00', '\x00', 0x1, 0x4, 0xfffffffe, 0x80000001, "b6855a32474ffa64f77a9dcf29c94337"}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x2, @pix_mp={0x7, 0x6, 0x33524742, 0x3, 0x5, [{0x4d5, 0x6}, {0x3, 0xec2}, {0x7, 0xb44c}, {0x1, 0x6}, {0x314, 0x818}, {0x5, 0x7}, {0x7}, {0x89, 0x9}], 0x1, 0x3, 0x7, 0x0, 0x6}}) 3m48.744069484s ago: executing program 2 (id=485): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) (async) mount$fuse(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x88000, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000480)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x149000, 0x19a) sendto$packet(0xffffffffffffffff, &(0x7f0000000500)="6867fd2e20512ee8a79b9eb644274a1f33abe5f055605c4449ad8e4b3110185fb09b02e5f2526075caa60be676a4f1b14c805470a355a3b0bd3e976fad53098b4a478695127daae4a16da912e4504e02c89e9523f7906f8530761d07261713178066a114a0", 0x65, 0x4040, 0x0, 0x0) (async) ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000580)={0x3ffff, 0x7fffffff, 0x3}) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, 0x0, 0x22081, 0x0) write(r1, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000440), 0x88, &(0x7f0000002540)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 3m48.640390645s ago: executing program 2 (id=486): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xfff}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x8000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000002100010025bd7000fddbdf250200001400000000010001001400030069703665727370616e3000000089a454"], 0x30}}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) write(r2, &(0x7f00000000c0), 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f046}) 3m48.271441351s ago: executing program 2 (id=491): r0 = socket(0x10, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) ioctl$FIOCLEX(r1, 0x5451) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f00000000c0)=0x10) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000180)=""/75, &(0x7f0000000200)=0x4b) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x8, 0x8, 0xf1e5, 0x0, 0x2, 0x2, 0x1, 0x7, 0x9, 0x3, 0x400, 0x100, 0xc07, 0x9, 0x40], 0x8080000}) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e24, 0x2, @empty, 0x2}}}, &(0x7f0000000280)=0x84) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="a00000002100010000000000feffffff7f00000100000000000000000000000000000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc0200030020000000000000000000007688f27e0000000000040000dd4231fd00000000000000000000ffffffffffffffffffff0000000000000000000000006c01"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0x0, 0x0}) (async) r7 = syz_io_uring_setup(0x82, &(0x7f0000000540)={0x0, 0x0, 0x20, 0x3, 0x10020b}, &(0x7f0000001600)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000001680)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000016c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8f9, 0x0, &(0x7f0000001740), 0x40, 0x0, 0x0, {0x1}}) (async) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$unix(r6, &(0x7f00000005c0)="690f77d7cbc827b3103693f0aebe7c57217642f65a7a9cb269200d548005c10d9058f2d8839141bb70ad7ff79e6fa757161a87ebd8dd934d5ebf574947635c8b2bd4f537b54e3c342f1deb054c16eccbc10c42e11938f8dbbe2b793a87deb068aa9c7ee57ed06caf47fc7696afbd42f6fedb1ac9b72d13768644b052d42ab746ca7630875e4230ec9b13005a39bc80dbc459eb99fd5f", 0x96, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r8, r9, r10, &(0x7f00000017c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r5, 0x0, 0x0, 0x0, 0x40010022, 0x0, {0x1}}) (async) io_uring_enter(r7, 0xfffffffd, 0x1, 0x1, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0x2}) (async) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) socket$inet_udp(0x2, 0x2, 0x0) (async) r12 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$int_in(r12, 0x40000000af01, 0x0) (async) socket$packet(0x11, 0x3, 0x300) 3m48.178739601s ago: executing program 35 (id=491): r0 = socket(0x10, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) ioctl$FIOCLEX(r1, 0x5451) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f00000000c0)=0x10) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000180)=""/75, &(0x7f0000000200)=0x4b) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x8, 0x8, 0xf1e5, 0x0, 0x2, 0x2, 0x1, 0x7, 0x9, 0x3, 0x400, 0x100, 0xc07, 0x9, 0x40], 0x8080000}) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e24, 0x2, @empty, 0x2}}}, &(0x7f0000000280)=0x84) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="a00000002100010000000000feffffff7f00000100000000000000000000000000000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc0200030020000000000000000000007688f27e0000000000040000dd4231fd00000000000000000000ffffffffffffffffffff0000000000000000000000006c01"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0x0, 0x0}) (async) r7 = syz_io_uring_setup(0x82, &(0x7f0000000540)={0x0, 0x0, 0x20, 0x3, 0x10020b}, &(0x7f0000001600)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000001680)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000016c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8f9, 0x0, &(0x7f0000001740), 0x40, 0x0, 0x0, {0x1}}) (async) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$unix(r6, &(0x7f00000005c0)="690f77d7cbc827b3103693f0aebe7c57217642f65a7a9cb269200d548005c10d9058f2d8839141bb70ad7ff79e6fa757161a87ebd8dd934d5ebf574947635c8b2bd4f537b54e3c342f1deb054c16eccbc10c42e11938f8dbbe2b793a87deb068aa9c7ee57ed06caf47fc7696afbd42f6fedb1ac9b72d13768644b052d42ab746ca7630875e4230ec9b13005a39bc80dbc459eb99fd5f", 0x96, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r8, r9, r10, &(0x7f00000017c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r5, 0x0, 0x0, 0x0, 0x40010022, 0x0, {0x1}}) (async) io_uring_enter(r7, 0xfffffffd, 0x1, 0x1, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0x2}) (async) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) socket$inet_udp(0x2, 0x2, 0x0) (async) r12 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$int_in(r12, 0x40000000af01, 0x0) (async) socket$packet(0x11, 0x3, 0x300) 2m50.378241393s ago: executing program 4 (id=867): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8080, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text32={0x20, &(0x7f00000007c0)="65640f01df660ff8c866ba4100b800000000efc4c1b5fcc10fc7bac26aabb466b8d8000f00d0650f14ed65f30f0766baf80cb89b22158bef66bafc0cb0b5ee666567640f32", 0x45}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c400714"], 0x11) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x7}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x200, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', 0x1}) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000700)='syzkaller0\x00', 0xb) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2, 0x4e20, @loopback}, 0x10) 2m48.86554023s ago: executing program 4 (id=873): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x40) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000010c0), 0x28000, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001100)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001140)={r4, &(0x7f0000001180), 0x0}, 0x20) ioctl$RTC_UIE_OFF(r3, 0x40187013) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="40000000140001002abd7000fddbdf250a8084c8", @ANYRES32=0x0, @ANYBLOB="14000200fc020000000000000000000000000000140006001fa88a41f000000003000000040000002d8025ca3b319b3128eadac4a0d8d71c2f1c90039e81928e1b6da247b636c713ccd25ca7c26f920e97fa27f632865e68fd77a532cd58aaa8ec1e1f74fe6b809731c1ffc8c1d7680f083ac7afda262b776ed1c9c448afe6d9d7d4402848f40e549b9a26af129de9549b1d5ad4bd588e3134410c229eb9d424283c9747d4a7b387fb2dc4129eff62"], 0x40}}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x40) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000020301000000727cab97000045000000080001000100000209000200000000000200000008000400000000020800050000000002"], 0x38}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000020301000000727cab97000045000000080001000100000209000200000000000200000008000400000000020800050000000002"], 0x38}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, &(0x7f00000005c0)="11223344", 0x4, 0x0, &(0x7f0000000600)={0x2, 0x4d2, @remote}, 0x10) (async) sendto$inet(r7, &(0x7f00000005c0)="11223344", 0x4, 0x0, &(0x7f0000000600)={0x2, 0x4d2, @remote}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9]) ioctl$RTC_AIE_OFF(r9, 0x7002) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYBLOB="7f0000017f00000a0000000800000000"], 0x230}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x2) (async) socket$kcm(0x10, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x3, 0x6, &(0x7f0000000f40)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000006000000095"], &(0x7f0000000f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x3, 0x6, &(0x7f0000000f40)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000006000000095"], &(0x7f0000000f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r10, 0x0, 0xf, 0x0, &(0x7f0000001040)="63eced8e46dc3f0100000000000080", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r10, 0x0, 0xf, 0x0, &(0x7f0000001040)="63eced8e46dc3f0100000000000080", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000300), &(0x7f0000000340)=""/95, 0x2}, 0x20) 2m48.521134868s ago: executing program 4 (id=876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000040)={0x0, [[0xffffffff, 0xfffffffb, 0x6, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffff03, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x6, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f00000002c0)={0x0, &(0x7f0000000300)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000340)={0x1, 0x8, 0x7, 0x6, 0x1, 0xf6, 0x0, 0x1, 0x0, 0x2000001, 0x5}) (async) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x4000000004002, 0x0) r5 = dup(r4) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f0000000400)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000640)={0xf000, 0x118000}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m47.212395554s ago: executing program 4 (id=880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000200)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000bff000/0x400000)=nil, 0x50000, 0x3, 0x11, r2, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 2m46.647759289s ago: executing program 4 (id=883): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001240)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001280)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) close(r6) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r8, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x4, 0x1, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r9 = semget$private(0x0, 0x4000000009, 0xa0) semctl$GETPID(r9, 0x3, 0xb, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000001500)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f0000001540)={&(0x7f0000001580)=@xdp={0x2c, 0x7, r5, 0x41}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001640)="c0", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x70) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r10, &(0x7f00000016c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r10, 0x1, 0x3d, &(0x7f0000001700), 0x8) sendmmsg$sock(r10, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000017c0)="74b17a07", 0x4}], 0x1, &(0x7f0000001800)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}}], 0x1, 0x20000000) fadvise64(r1, 0x9, 0x2, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r12 = socket$inet6(0xa, 0x5, 0x0) getsockopt$bt_hci(r12, 0x0, 0x1, 0x0, &(0x7f0000001680)) ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f0000001900)={"55d8af7121134bad4497a431578b196d037a8734d12496734f1bf9c7c5558a15da88f142bb23c8a6300330e8ee05e1306d2bbe3c62ed1bb01555b61581e9f985b6c1be3805d5ba644fd14b23a8e6785b817780700d12776553d341c4eb7e0180ac49e6553e03d536a2893bb740dafd933364feed12c506c16708a621fe759771308b13a2352bf56de7abf9d5c61acfa134540579325b5015fe885880c270f5e258154cc9839b371c4f2c18245a10f92a81cccc4ccf3940be71fd89e18609500673404dc6ecb23bac2f5146997d22c5427f0433f917837fa4372af1debebf6ed80bc5a78f08106202dee8d22570c1a8bde6f8f80a3df95b8cb9f752a2e37b36ffde49b7004c9f75a572a9ebae5ffca9c494fc5c3c2cfe049906b5a20f39848ae00b88763974addf7b77defbd6234e62c4cbffee72ecaba284178e42067c6bf21438172582ddbbf27b9f9b066f16251ba076c38518c7f194f0ee1fc3a630fb24a1d43b1a9fb3730bae504b0dc72dd6a0e0ce734ab9457be4f9edf843363307899324c1c08a0333e52d5994dcace90b707737becbdb42ced66bbe0f7c64a275e58652d9839f5d5dc73bd8616e9683fed01e8e9c73d38aec45da11e8e93843a20fe32cb373e7e8b7339c213d9a5831c91b5d1c9d8de75702032d2febeac1c84e4b13ad6b65adfd6e25e8cdaa2d938827fa7a6379617df8963dfa4ee8da8343237902e1abfc583440636fb2e38097fb6080d4dcf9a40042346d309f6b52c617132b7ee5ef8118e45dde267bee5eddd18c891ee14d315fec059ed92a7c98111255d0de32b30becd3e7cd19654eabaf3495af63d82dae9bf35c291b0bf7d0f7f9668670792535a62b129fd98892501b314a69271c5c70ebc349e75bca4913d21db8eb7b68c0b505dc0d2215fc1de0323c1438f6bee3fd22781fe3fa8310aa5d95e3912638f6f7d1b1fc32253d0933254a1bd066fdd24a91b2d4c21b0e1a265914857e7d6774f2b2d65f23e8634c9f2913413642472aa186acef789ba5c75e99cdc93a4be93040c2124d70ebd828c1b1dc98ef8067b2e597094d842370262bef047e095390af43e4192fb28d26660d34933c4dfacfaef7cc9275fed46c3bc507a14b66f4142abf90b37ee09d82e505cfe8dd55aa8219e8999b630116516ccc1d9d3f6494e488dc3a704e087cc1fca109d3bb13b7d62abe49e62e738710b8f18e2b6b958dac8f2efb3a68019cc5f6a62ff3a32a1a6cd56262a52faca58e2aa28a9fbc2b74b09395e599a2c55e3ac5203721807cb67a5732a1b17f9239a33e245d9d2e28700ee465dade6b9a8296897fc083b08407eabe0ebec246ed214400b064206ebca4a21871fd04bd8312671be25430b5654df1b12d372dbb5910e0a783d3319cd45b0407b5a4b9921dd12f817447a53d40720ab50b8291e8b92efb558c6327c11f41"}) 2m45.773553922s ago: executing program 4 (id=888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1c5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000480), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) chdir(&(0x7f0000000500)='./bus\x00') (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x1}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async, rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, 0x0, &(0x7f0000000600)) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x2000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)=0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1000021, 0x800000000004, @tid=r4}, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') (async) prlimit64(0x0, 0x9, &(0x7f0000000040)={0x2000004, 0x3}, 0x0) 2m30.52402561s ago: executing program 36 (id=888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1c5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000480), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) chdir(&(0x7f0000000500)='./bus\x00') (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x1}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async, rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, 0x0, &(0x7f0000000600)) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x2000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)=0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1000021, 0x800000000004, @tid=r4}, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') (async) prlimit64(0x0, 0x9, &(0x7f0000000040)={0x2000004, 0x3}, 0x0) 1m16.023140217s ago: executing program 0 (id=1355): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r3 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (async) syz_usb_disconnect(r3) close_range(r2, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xd}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004d819}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x17, &(0x7f0000000240)=0x3, 0x4) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000140)='100', 0x3) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a6c020000060a030400000000000000000a0000010900010073797a3100000000400204803c0201800a0001006d617463680000002c0202800b0001006367726f75700000080002400000000214020300100000002770226714b06026799504d26462d0f7a66ead44d6899e1445d97832ad457d06138b69af69d529be95f1911eab1846eb51bda151a6b0736302fdfb9f2c903fa04bb26b5a1ce76b17878e8174d345499079f1da597f0326854d62b1f5d97f2de35a9cb60da0764d08dbaf00939de34af914a3ea3f02ca57df07e9ed10aecb90bdbabcfcdd62e3ef6913b29a63fd42d92765c54b68f9bc26a02ba79777eb523727e0e6ca141e405417118a3316ef2a473417d47a2c37cecc2f4333caf9b5d8096a71bc60c57dd3fc882043377d4140b7f4580a622043a0da245a977be1af6ec12bf2ec5c7ed50e1b4f9e144fe641036e5673089a6707b709515c62734ab864914ef7e6e82143b0f6a3a6ec884fb0ecb0567dff30ef656a1316898954a71db76db8b74d4749e35b33481ad897934c4c5b1ca2f8b7e93e8dadaa1d2c96c5f1e9ce253fc6f3335b981003f183afc65a3618d2ac05c2a557154862dc7805bf408ec8c74aef836fff2e2caf6925c8bb1f460cc68d410733bd2ff5d15c60bfd8c080839e416b589d51e18c402e0282aa1918d13aadca89120112ba089e9925a0b4cbf9441a2e63268c0b2fc90c38b840eb48e9800d6f4d731051bcae4924d5a7176d83d5951cf4dbd6108032b6a35b67d6c585ee1c047b1fea250f941fccce0210922b1d9f6c6a0da7e9bf3704c31afdf08438c1021cbe05fb24ec20dc9630f8c92a4f833f431b8ac1b0cc0a19fbf9420900020073797a32"], 0x294}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) nanosleep(&(0x7f00000003c0)={0x0, 0x2faf080}, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x152) 1m14.807490025s ago: executing program 0 (id=1363): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e23, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x5, 0x4) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x4000010) r2 = socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xf) symlinkat(&(0x7f0000000400)='./dev/ttyS0\x00', r3, &(0x7f0000000640)='./file1\x00') (async) symlinkat(&(0x7f0000000400)='./dev/ttyS0\x00', r3, &(0x7f0000000640)='./file1\x00') r4 = open(&(0x7f0000000000)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f00000006c0)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000700)=0x4183, 0x4) sendmmsg$inet6(r5, &(0x7f0000000740)=[{{&(0x7f0000000780)={0xa, 0x4e23, 0x800, @mcast2}, 0x1c, 0x0}}], 0x1, 0x60040000) (async) sendmmsg$inet6(r5, &(0x7f0000000740)=[{{&(0x7f0000000780)={0xa, 0x4e23, 0x800, @mcast2}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r5, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x100cb30}], 0x1, 0x40002062, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000240)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x110009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000240)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x110009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) faccessat2(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x48, 0x300) sendfile(r4, r4, &(0x7f0000000300), 0x7f03) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000480)={@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x2, 0x2, 0x8, {0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}, {&(0x7f0000000540)=""/226, 0xe2}, &(0x7f0000000440), 0x4}, 0xa0) 1m8.622243815s ago: executing program 0 (id=1381): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) (fail_nth: 2) 1m8.521936615s ago: executing program 0 (id=1382): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000004700)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000004740)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004780)=@bpf_ext={0x1a, 0xf, &(0x7f0000004c00)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000048c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000400)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000440)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000480)={0x6, 0x8000, {0xffffffffffffffff}, {0xee01}, 0x2, 0x5}) r6 = getgid() read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000004680)={{}, {0x1, 0x5}, [{0x2, 0x4, r3}, {0x2, 0x0, r4}, {0x2, 0x8, r5}], {0x4, 0x6}, [{0x8, 0x4, r6}, {0x8, 0x5, r7}, {0x8, 0x5, r8}, {0x8, 0x4, 0xffffffffffffffff}], {}, {0x20, 0x1}}, 0x5c, 0x1) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000004900), 0x18000, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000004980)={&(0x7f0000004940)=[0x0], 0x1, 0x0, 0x0}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r11, &(0x7f0000004a40)=[{{&(0x7f0000004a80)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000004ac0)=ANY=[@ANYBLOB="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"], 0x198}}], 0x1, 0x20000810) ioctl$DRM_IOCTL_MODE_GETFB(r9, 0xc01c64ad, &(0x7f0000004a00)={r10}) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 1m8.155370836s ago: executing program 0 (id=1386): socket(0x10, 0x3, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x1c00, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x90, 0x0, 0x88, 'crypt\x00', {'capi:cbc(aes)-essiv:sha256', 0x20, @keyring=':32:trusted:syz', 0x20, '1', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '4096'}, ' 1 submit_from_crypt_cpus'}}]}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x5, 0xffff}}, @TCA_U32_SEL={0x24, 0x5, {0x9, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x7, 0x58f, [{0x2, 0x20008000, 0x4, 0xffffffff}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) 1m7.074636743s ago: executing program 0 (id=1389): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x80001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r0, &(0x7f00000005c0)=""/10, 0x5b) 1m6.649366297s ago: executing program 37 (id=1389): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x80001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r0, &(0x7f00000005c0)=""/10, 0x5b) 56.105959515s ago: executing program 8 (id=1443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a40)={0x1, &(0x7f0000000a80)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a40)={0x1, &(0x7f0000000a80)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) (async) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) (async) 55.539428757s ago: executing program 8 (id=1444): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000280)={0x232, 0x7d, 0x1, {{0x500, 0xf1, 0x0, 0x5000000, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffff, 0x8000000000000001, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1W\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) 54.505732322s ago: executing program 8 (id=1449): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fdfffff3000000007f000000e5000100000000002500fcfffffffff795000000000000009f69c6eb9f3edaeb43752e2c8809efc05716a5b0555235dbe571b79cba42274291a4b3dabbc7202ea332f197617372b5bba1bd3c9bfbb11c1d6686bf2b74cdc3e8dcc166e6883d0e205f44efdc39ed64ffdeb8de0e90c5411bca4ace1fa586904b1b5dc895616c696b993ff493e87fa13a85854a60b392"], &(0x7f0000000540)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x6}, 0x94) 54.086609016s ago: executing program 8 (id=1452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0xf03, &(0x7f0000000340)={0x0, 0x5b5f, 0x800, 0xfffffffc, 0x4e}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000480)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x20, r2, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[{0x10, 0x6, 0x4}, {0x10, 0x10e}], 0x20}, 0x2, 0xdba90280b90ecbba, 0x1, {0x2}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x89901) move_mount(r7, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x262) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000036000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x74, &(0x7f0000000040)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0xf, 0x1, 0x7575, 0x979}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) (async) syz_io_uring_setup(0xf03, &(0x7f0000000340)={0x0, 0x5b5f, 0x800, 0xfffffffc, 0x4e}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) (async) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000480)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x20, r2, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[{0x10, 0x6, 0x4}, {0x10, 0x10e}], 0x20}, 0x2, 0xdba90280b90ecbba, 0x1, {0x2}}) (async) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x89901) (async) move_mount(r7, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x262) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000036000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x74, &(0x7f0000000040)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) (async) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0xf, 0x1, 0x7575, 0x979}]}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) 52.951746637s ago: executing program 8 (id=1458): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x40042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000640)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000680)='./bus\x00', &(0x7f0000000840), 0x40, &(0x7f0000000880)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000008c0)='./bus\x00') ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f00000004c0)={&(0x7f0000000340)=[{0x2, 0x4, 0x200, 0x6, 0xfffffff7}, {0x3ff, 0x0, 0xa6d, 0x40}, {0xffffffffffffffff, 0x5, 0x7, 0x8f, 0x8001}, {0x7fff, 0x9, 0x7, 0xd11d, 0x3}, {0x7f, 0x0, 0x4, 0x3d5c, 0xc078}, {0x1, 0xa, 0x3, 0xe, 0x6}, {0x1, 0x0, 0x1, 0xc3d8, 0x9}, {0x2, 0xfffffffffffffff8, 0x3, 0xde, 0x8}, {0x401, 0x80000001, 0x6, 0xac, 0x400}], 0x9, 0x28, 0x77, 0x401}) unlinkat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x200) mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0) accept(r0, &(0x7f0000000000)=@ax25={{}, [@remote, @null, @rose, @null, @default, @bcast, @rose, @default]}, &(0x7f0000000080)=0x80) 51.702593464s ago: executing program 8 (id=1465): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) (fail_nth: 10) 51.14354437s ago: executing program 38 (id=1465): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) (fail_nth: 10) 12.896317996s ago: executing program 9 (id=1577): r0 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x0, 'bond_slave_0\x00', {0x4}, 0x1}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000240)={0x44, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b15, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000200040010000800034004000000", 0x58}], 0x1) 9.441813665s ago: executing program 9 (id=1591): rt_sigsuspend(&(0x7f0000000340)={[0x7e44]}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) (async) landlock_restrict_self(0xffffffffffffffff, 0xc) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x81, @local, 0x3936bf7}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="a0000000000000000f010000fbffffff862c70e79ce06563a029846be16e74d2e874b578d448ff2b546ddd9387a3baf51a06a6b018e35d20b48bd2df679bca4b4b97c589813732893008d8164d6f6e5983985937239ff4073b891e97d774666cbee3f02ad57122c7c6047dd446eee2393a7adf7600cdd67b25d5430077dc7b6b8ce3176f85a819f79f685285d14ed2ee79c8ffefc56cb7ff7faf4dae99f8d579"], 0xa0}, 0x20000010) r1 = socket$tipc(0x1e, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f0000000040)={0xc1, 0x0, 0x2}) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f0000000040)={0xc1, 0x0, 0x2}) r4 = socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r6, @ANYRES16=r4], 0xfdef) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) 7.684473412s ago: executing program 9 (id=1601): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000000b300)={@multicast2, @local, @remote}, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000005a00)={0x1, &(0x7f0000005a40)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x4000000}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x2}]}, 0x24}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x201}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000000b300)={@multicast2, @local, @remote}, 0xc) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000005a00)={0x1, &(0x7f0000005a40)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x4000000}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x2}]}, 0x24}}, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x201}, 0x1c) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 7.015177843s ago: executing program 9 (id=1604): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000018f328020000000000000000020000000c00088008001000ffffffff"], 0x20}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r2, 0x5) r3 = socket(0x1d, 0x2, 0x6) r4 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x33f81def, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000003c0)) setsockopt$ALG_SET_KEY(r3, 0x6a, 0x1, 0x0, 0xc) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000440)={0x1d, r6, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) syz_usb_connect(0x0, 0x36, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) listen(r0, 0x1ff) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000040), 0x12) close(r7) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r10, 0x0}) listen(r0, 0x1000) ioctl$DRM_IOCTL_MODE_DIRTYFB(r8, 0xc01864b1, &(0x7f0000000200)={r11, 0x1, 0x0, 0x4, &(0x7f0000000240)=[{0xede, 0x94, 0x7, 0xff7f}, {0x7, 0x9, 0x8, 0x4}, {0x3, 0xe315, 0x246f, 0xfffe}, {0x2, 0x8, 0x3c7c, 0xff}]}) accept4(r0, 0x0, 0x0, 0x0) 3.903724183s ago: executing program 7 (id=1622): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./sys/class/net/bonding_masters\x00', 0x2, 0x20) write(r1, &(0x7f0000000280)='+b', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ed) (async) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat(r0, &(0x7f0000000000)='./sys/class/net/bonding_masters\x00', 0x2, 0x20) (async) write(r1, &(0x7f0000000280)='+b', 0x2) (async) 3.602576141s ago: executing program 9 (id=1624): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='100', 0x3) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x6, 0x5}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r2, 0x5, 0x500, 0xe}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x10000, &(0x7f0000000000/0x10000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl(r5, 0x4048aecb, &(0x7f0000000400)="02") ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000480)={'veth1_vlan\x00', &(0x7f0000000440)=@ethtool_cmd={0x2, 0x3, 0x450477fc, 0x9, 0x2, 0x3, 0x59, 0x5, 0x5, 0x3, 0x80000001, 0x3, 0x8, 0x8, 0x4b, 0x6, [0x7, 0x1]}}) r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DM_TABLE_LOAD(r7, 0xc138fd09, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x2e010, 0x0, 0x0, @by_dev={r6}, [@thin={0x0, 0x48, 0x0, 0x58, 'thin\x00', {'./dm0', 0x20, 0xfffffffffffffffd, @dev={0x20, @rnull={'/dev/syzrnull', 0x0}}}}]}) 3.462001068s ago: executing program 7 (id=1626): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b9004d564bb800100000ba000000000f300f01c20f01df0f001366ba38f8ffef66bafc0ceeb9d80900000f32b8010000000f01d9ad34b6d0b6d00000c0d741e88fe88f0400000f300f01c866baf80cb8dcfd4f8aef66bafc0cb80f000000ef", 0x5f}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r4, &(0x7f0000000000)="64000000420001000200c10000000000030100000f0000002e00010000112233445566778899aabb08004500001c002000004011f77dc0a80101c0a8010204d2162e0008fdff0000040002801800038014000380100007000a000001c7a8010280004000", 0x64, 0x0, 0x0, 0x0) (async) sendto(r4, &(0x7f0000000000)="64000000420001000200c10000000000030100000f0000002e00010000112233445566778899aabb08004500001c002000004011f77dc0a80101c0a8010204d2162e0008fdff0000040002801800038014000380100007000a000001c7a8010280004000", 0x64, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) r5 = io_uring_setup(0x3454, &(0x7f0000000280)={0x0, 0x5971, 0x10, 0x2, 0x33b}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001240)=""/4095, 0x440000}], 0x100000000000011a) 3.099785439s ago: executing program 9 (id=1628): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0x6]}, 0x8, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x2, 0x410, [0x200000000600, 0x0, 0x0, 0x200000000630, 0x2000000009e0], 0x0, 0x0, &(0x7f0000000840)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x3, 0x8864, 'pimreg0\x00', 'ip6_vti0\x00', 'ip6tnl0\x00', 'bond_slave_0\x00', @multicast, [0xff, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x0, 0xb0, 0x160, 0x1b0, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x0, 0x9, 0x100, 0x7fff, {0x7fffffffffffffff}}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0xfff, 0x7, 0x0, 0x0, "0702cf1d25e7332638e8474afdf6a714769fd2e42cd7980854f85abc7f7db2e1f05d913e4cfd0603264d1be1e984cd7195144db808c059a2547be01f6fdd3a87"}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0xc, {0x1d33cf33}}}}}, {0x3, 0x40, 0x0, 'syz_tun\x00', 'bond0\x00', 'pimreg\x00', 'pim6reg0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0x198, 0x198, 0x1d0, [@comment={{'comment\x00', 0x0, 0x100}}], [], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x488) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x400000, 0x0) (async) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000600), 0x384d00, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000100000000000100000054000180060001000a000000060002000600000014000300fe8000000000000000000000000000aa060004000050000007000600727200000c000700010000000100000008000800000000000800090080"], 0x68}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20801) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0xc0bc5310, &(0x7f0000000340)) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000640)={0x81, 0x0, 0x1}) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000006c0)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200002, 0xbc9}]}) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000700)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000c80)={"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"}) (async) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000300000030000180060001000a000000060002000600000014000300fe8000000000000000000000000000aa060004000050"], 0x8c}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @mcast1, 0xb1}], 0x1c) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r7, 0x2) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b1a, &(0x7f0000000300)) (async, rerun: 32) r9 = socket$inet6(0xa, 0x1, 0x0) (rerun: 32) r10 = dup2(r9, r9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) 2.758793437s ago: executing program 6 (id=1630): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000200)="1a00000002000000", 0x8) (async) setsockopt(r0, 0x84, 0x81, &(0x7f0000000200)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @local}], 0x10) sendto$inet6(r0, &(0x7f0000000280)='l', 0x1, 0x8004, &(0x7f00000002c0)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300), &(0x7f0000000340)=0x8) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300), &(0x7f0000000340)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x404c4020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r2, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x64}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x6fc6}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x9}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x6}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x18}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x20, 0x3, 0x1, 0x0, {0x9, 0x7f, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x400, 0x6, 0x9}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44050}, 0x20004815) 2.547937571s ago: executing program 7 (id=1631): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x70bd28, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2400}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) 2.213153462s ago: executing program 3 (id=1632): syz_clone3(&(0x7f0000001880)={0x480002000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x25c}}, './file0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x19}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x48091}, 0x6) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0) ioctl$MEMERASE(r0, 0x40084d02, &(0x7f0000000040)={0x1, 0x7fffffff}) 1.909523729s ago: executing program 7 (id=1633): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x800000000000012, 0x808001) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x180000000) 1.66865126s ago: executing program 6 (id=1634): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000140)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4004) 1.599173832s ago: executing program 3 (id=1635): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xffffffffffffffff, 0x200) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0x2, 0x2015}) 1.327390818s ago: executing program 6 (id=1636): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='xfs\x00', 0x2300, 0x0) 1.326715816s ago: executing program 3 (id=1637): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000540)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0x7ff, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400002, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x3, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff989], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x7c2, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x1, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x9, 0x7, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000480), &(0x7f0000000500)=0x68) 1.242107603s ago: executing program 7 (id=1638): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800050000000000000000002d000000000000010000000005000100080000000c0005"], 0x1bb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040056) (async) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000100000900030063616e3000000000340012800800010063616e0028000280240005006e6fd70b46e0f965d23fcc07008ac162b914c202ccb29c00b320a10700000600", 0x60) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002800070100000000ffdbdf25077c"], 0x2c}}, 0xc010) (async) sendmmsg(r1, &(0x7f0000000040), 0x0, 0x0) 1.11494946s ago: executing program 3 (id=1639): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000640)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1a, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000004f0c000000000000fcbfffff00000000d0a2"], &(0x7f0000000800)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1.053596736s ago: executing program 6 (id=1640): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000400), 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000480)={0xa, {"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", 0x1000}}, 0x1006) r3 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(0x3) close_range(r0, 0xffffffffffffffff, 0x0) 808.714351ms ago: executing program 3 (id=1641): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000024c0), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000002500)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x80000000, 0x3, 0x0, 0x2a, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x10000, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x81, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x100000, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff419, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x2, 0x0, 0xe, 0xfffffffe, 0x0, 0x10000, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0xc8, 0x7f, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x3ca, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986, 0x0, 0x0, 0xa], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x7, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x9, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0xfffffffe, 0x4, 0x0, 0xfffefffe, 0x1, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x57, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5955, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe, 0xf]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000003c0)={0x1fe, 0x3, 0x4000, 0x2000, &(0x7f0000002000/0x2000)=nil}) (async) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='/dev/kvm\x00', 0xfffffffffffffffc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000400)="fe7d9ad23d3389b5d66337d18dbc0495eb16162f781772b20de75c9b04721ec2c8447e2ca17df85341d44a7b352a3f25365bb370f3f4526cae95a8f3faac784b24aec7ed7fb46b3fef6b46eb3ad8206a3fe5fd69576dcf61a59bfd56d5b2ace25608c8c76628b7645c0e93762d6df06eae51f673d6a68a02aac765b951822da11e1f3318a369ab41d7aebd5dbebf83eeb1eb707a9ef2385c73b5b0bb47af867ea3c4e94a9130565429007d2933c8bb75bb52f9ad3be341caf35b8791a1d849edb18168373f6b5d8dcfad88f0208add9f2ce666b2c0e34610ff5d8df9624ce2c3228c97cafa3a0d2e6230ef25b1b38726f287389f6ae3cf369521d67ab69084ac91b4840a2e1695c8cbdbf2a2e4d0ec146e3d7eafbdcc7aed0f1ec6cb435ca230e63836f92af1b984f6f8e33d7d8ea82b8c4c775ea9fa98d7c37079278e53696efaef151472081fe31eee067fbd46b0e0aeaf1d35b0d010e61ae6bc25615aa0a3145817cf2f05aee7af69fa8fcbc062cb2265f0e44ed854152cf0e58887c323a2d9847f0fc86d777bd9ccd2061258760fb2c737f7bd17f437a7614768f581255b79360fe37b510483eca4e876d6b26a7ebad42f32d9c820f34471d1f6c37dc60d50cc7bd55db5561eb95f56d75222db88f59adf4563607746eb317b3f581def60a7894784fd00168b1e1b0f367bac82bed4934e754daa41117efc3f1d467418307f7bf7064177ad59f7f9da4b653e3a1617b1b884998575bd4342f3e45b1b1af0d3645f449e764f65e18e82804d586203fb83ed8316827e21d95d9196e38016e76b0c5229d484417b9d35c355328997425f9426cba4f7ca131cabbe0da1f0dfaf5d48815a683a85e74a52b849e265f08cb92b8890e7a1b8bccf0c05ff02ea832b10a0919161472b95ea766c1bb3c6e85afe8cf573031bd9261081c0ccb38aa49bbe7ab4b6ac2957e3a3ed4d824115ec644076a067514ab2aa1feafbbd288395c087829b965b912c7d01d7e7ff63b4ec745e463f517ce8b700e51f19a75a7fc4faa829b283af0ea24ef5a98e39fedb0ca04c1803e576355d8940cfd656e6012a2683bedee0a6a4fe6a11fc2573e602ead483792933e98341a0b57e8a7b24af2beb987fe8f8eff613446bcb32136f38ba46d63a162028e5874ec26e87e5cc301c848f934ee7bd24b0e052c882424a6aa7086fa4abbd0ca4bad69d74af7ae6b73529f6e49e54e13abf96ee0f4da2de8d054eecdcf73f27e3279506101dfba68496d7c4f025b382a026aeb4b34a838daa150f7788ff3a8bf91eef05649efa6e1c34e34914a1677c23fef71517017e12646b524adcaf6587bd0f72c95f13aedce2b901bc5846cf6c003261141a79c67e8b4fb7257767e96eafa6586de75f6ec38756c5f9de5608bef36391cdb7252b00d08f76c1df21709aa34649af3c1284bb233686d75bfc7f367ab9492e2845ad095080e4fab3f0b7a8c69842dbe3f2e9f0ac0f3aa0fe4e86e840a1fb000b56dd9eff37218578c54c58663dfe75e60b8a315e9962d01dbe13213e71a66ad1a502924feff117de099c91ff352fdd91e6c9b7639b268467aaed34bafdb2d077c015b820ce4cdaaf6837da56f802d8e1f3a8bdf87dd8b24c2196b67648082388906b540888925ab1743b3500c2ff0b46492d03a392811ccab1d4becd74bc25c9b9d083065e947770df455e46361ba2d324a26ff213c99bcc37189f0ca459c481a9f614cc6e722d44e82d7124bc016e19197bb101b66058b709c8309a4590cfda021335abe25552ee515924971a73128e84d9b6a46b4df07595ce9af286e936fdbe5399a88877fc77c24dc9e825d83329e66e319e11076796494c48d5439a19c3e3569ddd206e81e04fca6ea040871a1ab3b05c62f9df4b38fb745bfab532a8041f09663effe57bd40334487fc8b17540288c04bd7672aff5beaf40906a472b0305cccba2371e9fad9a9470765bb2305bf2e4c4e40c66ccc3a7582eee9b63ce0bf563e1783f5412c86d497c3dc50b77ab6e5d9c708c1825a9983260e5e114c78e899498abac0225c787be7879a41230d543a087b82f557815c5c1801edd242bf0760230744100a6930c5efcc6a2aa6ae27d4f7aaaa3336352f86ace98d371b5b89da626c6102ee858f295c24f8a4bf46dd4702f6a8e2b6af356cd7d228f308a140d973d22f7b62a9fda1d8baa6450494aab9a3652a944cf43472f4dfb4a39f2adf064fa8055377fce7fb8fcef2eb1827931a6def4a3194cd7e80ebed2310e3f4046b481ecd8bbbf6da99618a144656eba89da2d9dc4d64177533aaf02c8f6dabbee31dc84a27025a0ad6676d9d2452b1eecf678dbdcd81dee3483d412715cbe873890e3fb0692de920f00be6bed1149d99626c17adb1071d0db8e88ede32fdc1cae00ad8b61a4f62e452a319514bea6ae5741f734d13169d0b5bb78762b7489f0eafcc055050904e14da0187820b5051e9834fbad4df34dc72ac2d544cfc533fa4dd158033cfee4d78e2d6b9097dfb8fee5a14ab9482cf89a2cb062370baf15ae3e58768efe069c4939b514b43e3203afb77c8a50eb938361b87a29300428d2f240bf67a4c5d689b871b9540afdb8530c28a165b0e0aeee8897b053417ffd8b848c6752c049f5089e310ca5d845449dc319fd58ec3ac830553b44889f8b7a622d0e2282b615c14d04c41d23d4dbfc1fc1291fcfee8b09076fecf63bba74ec080e7489d399495eb86cb9a324159a8c77723895f3dddb52cada076afb749d951668e3fd65c06056e57504240d509f597004a8b2bd23fe119ab4de86ba9bdd40c1ab7a22e32f5371de04642631d4295ccf7cd5aee1cdbcd1cdab397c8eb3dbeec1fb8279ad3b025fbbba11a6009a504671a258e942e51b61a77d09ee134ca45f6d41937e4cf7bb6df47f58a52a07493b85594ec511a6e3771b610bbad3f1d869227ab2e7f1cb5191268fbfb440cbdb6e0a4f42bb690bd7282982223f51287bb271f0b34f6876dec906e11d5900dd8d746a60f5bcd1e1ecb4e95e6caf2f3508d058aa5a561f50a364680b72c7eeedefd4c50dc744752cfae404953312186d0ecdaa0f2523a025250bd88627e8e5696bf6663ab4527d76b39535a17a77755624d9cdbd26b981cb989abf74701f0c3fd90c509f43119b2997a1ce39afb427d6467a145f3585365f9423b2481a545f8de1085eada1f3febf07705f13883939a330e8e3080db9aae75f9b64dcabf8e77bc424c8572243f4884b732f97489a94e4ca2c631fa30575a489118feca83b84280b4b0dc4828ab21d28253eaa3ad11b557cd22c6f550f1b16b0e85869012333f3a7de88baaead953ebe9e59505294f910910f6958219abea50abc00b7af8dd0e80734b15791fe08b0a3d663329180900b8da223a8b96c4acfe788fd231380636e670c801026e5a70ae326c520859cf7f315c2c705cd2fe93b03849c754e881c152662dad3b18bd481d4149370377a2a6467f77bf3a10613c76cbb3467ae2050ba9bc19ce7ba7fa6bb94c9effbb8f9be98ba3b395ec2c6c7b0eae4a59256d28902d3663b3d7e0573c2699b929e3e560ed37aea16d337748c471dbfdd18b6ac4fd330a75a1b9d0096863a2a756b47a76c8510db8dab54870454df30e934bc56ea333d3b310bd2602873b524c56e7263d66168ccf687e765ba058f072aa2d06ca545b14c4f021e36dcd8e87d9492e590d60ee268d90a345be8979d7a586bf7522f495703b1c142637fd907b1390aa5c2da7547747544d5def5c41d9856bbd8bc87da4712fb716eca122e4703ea09dee7723bd8898732f718b0f89c0ab585d5c667d262201209c1373bc0642c06bfb59fb097c897538d221902b34adaf5b1c93758b8d9d15870af72e7ff7b561aa016dd56598bf46bf73edad04920fdd462c3a7e6ae6d7f4901a338f2c294ef7ad9a46e4097d07d7661611f2b98cd4222ba8723c07acae025ca26b5eb3fdd536058902b0373acfd6581d51ecb2f21f99ee68a54e64692607ad0bcefb09bf6ad6999e8e32c31ae529a679009c0bd97676cdfc2d2f0b869c77a977ae525c176ee1bb2dc0a10d62d95545cbbc91e3c734d5a408acd0b9b33abc0fb4e29e4340bcd11a0058b37fa76ba2354c7b70709eb979ee2452aeae6c05538f8cf88fb1eea5c43918df31104ac748251818ae1c2169f6ceb2c11da191a614435df8c576f96f65a081aced6f9e1cb7833a37fdd457c64e3b64d8588b8cb79eee58b2bc9a689ad0d87315a43e55afc7a11dcfa42ce8779792d20794cbd650b0492dce5e5b36fe61e59feba9afc70348517318c73f5463164c862c18467faaa5127ed35a0ffad61b25934b288277245d3c6d1397c57fa12bb0e78e0e69e3549e420007bda60f811f557df49eca081cbbf3d97839f9b809c40c06c71e50098e990186c04cb2a582a06aa36d1a66ba2809bb20c072d43815307d15f2bdd407d88b1f15c51505866e9b8a2e7f7521c76c1561582527dc464f401cef7efbf7535a7c6f5b5f02bbd2db00511451c8b53b3b6dd205e898e8a2614ff14fd3239c350fc76a1885e62ca40ab32517b0320bd82f36b7991c824f5e9ee61515b4a172efd928dbb972359e4f7b66f897828fad02c41bec4c381f0e73ee069e543b9348af8566ee9dbef2889d17182581493b52447ec3dfbab8ddd82be256bf320668dfc1c833e464e6c4cd7224df01a6813584dff4d377340efe9ead9a2127b918c6a61f9cab58339b938f8ad14b2d1eccf397292a04023fad1c4fa5dcd73b8fec6f75a1fcbcd62758945348afa76e52fad09b67d0e4bf137979d996c7ae48ecef64c704bc74bc167f7460b97e2ab97fd629f893ee20986102881715205cf43f6cd3de47df192130533ee7472ce8eeab223216dc7cf0e56fe76adc2249a90c8e436d4f41a2d4e5805834b047941c6db1e0e096658a458316aa69ad6179aebbd1f879f546843efbaa276fc2fc2fb8f66dd92448de820e755739e2c447c9598b4b3630ebb2565398e4cbea0da438171f6d955bde1fe7ba8f073bdb23f293e5daf69efadcf868c221d8802fc7478182e86c1f75f6fc895b6e1c52cb1c93c06033e9ff1cb24c7ed32c29f09957297e72a44d6d472c55e74db927d7c87c0712742d34b398d9f7d96331d08df8534e17c27717399c2688ea4e3feefe87f8c65efc3d8a6b4140460cf353827d8974afa1fd41840561ebeb51f8e1cfbe44e411d52f12478e401d4d223020a02ea887983485caf8ce36dbfb03c2e2996a5ce6f10b28ffa5c9723b95757e87b5bcaa006ec2b45c69a8aa17675b5e05b5f33c7cc5781132607fb4e86ef0a96b483baff00bfd03cd2b471a31615bf59720d203a6124c4c986569c087a34ae159c459e5b5af481a7ded13fb7c17102859717da49c6ef42956f2912180edd741c304ed587f2ea5c90d9b28aad30c3f105b4e5acf7e563d96a89d0d9255d0256504e041e10a880ab907c669ac1f86685b1f5448ff0d45300cc6dfe0b5f6b1ccc5db782a6065931f47f5766005ed48cbb92deaae661435a4c6f47d70196dfebcceb316a3bc0a1da56092cecff0113519743762810c271ed0d9b66a5abb817886ba2c8d533dcfc56cf23ddf3b15694751346fddbc7e5e647f6015b75833e8d8b7d9fa4b2dcda59698698bea7664ea1c8a2492012f8630d81d1ba13bde6fbec3ec0774752a63e5eae03191189a7858d69f991a6dd042c52058f13339ff2562007a7d25ea6fb94ac30b2af7baa770acf4943051412f36080f4854a8b14a534d2efc05a8b1b63dec308b51eb47d327871b336a687d7e9ac9e8cd519af6051de1673b3aca82ae2dcb9e0f340471c15660e7de9abc3ec31638d3e196044e07455e65da013feb4e46a3456c4f6a5c2bcec5de6c4bdd07434e630988fa3e94713d0e461afd91be0a65bd95b88d3313e37705f74a1aeb05e1b05fda7dd94a91db724c801835ae27fbe8359581752713a1770178b64fd1f445df34e2399a26f178151d42ba8314edd60fcc6626e6874f538ebcc326e7b8e8d326940482d5f3e72bb6aae70fddb70f8aa425e2c55eafa6adba5b00cccdc722ba1e85bb09f2791f58a7b58b06c039391667eaf9a623f9f170db2065d36d16904746aa55fbfac0b13ce31622632be60deb3fa4dac394be416b51ca988cf1cbabee22f36441cdc25afcbb8677b49eb2942d7e96c6ec9a8cd200467f4d5cd25b9c86543007ea97a96e4248f9bbd9386f162488b580fe6f731839736c7e9e3382bd8fdaa5976ec331fb7dacacad203f40ba6fb26d18c28695673f44393d66763bec7d78cbeb3c512a40a649472b5c5efb3cf6fc485a9375afb43deaf8b4eb3799e727092d65a2484507c9a828ce4e81b7fc54bb72543a2f1086f7556dd90bd87db353ea35613d2b640768b17d7991da0e5ca4ed3439652594c3e74cfbc45b3740381ba1b2f6cc7bb8fa623f22e1cae95b2a6079d3e2bd47d1b434c1ef16bf66adf5a774cc5a69bbdb523559b3d84fddb8446deced42cf77e5472616ff9056f52d15942c07b1f664d09cb11a25a69ff166e60fc41de395d2d65cd345822610cf0c82e6e29effb82fc47c077256f9ba72bcbb45d1273b32d25240eeff3d9dec3a798e5c3c97fdd59720bd7b7692588446e538eb7c1b30f94a0b051304c7d00788accf4529ab3a7a5d7c9a7510ab746820f8ea0a4916cb2f30d2eb97073125b6189dce432fc029e097b3b6f99c50d2b62b12d82dda4e99b51ca470c69f76951a1b98fb4ac7b4fb5e68b381c3f59b78d69d867829018ffdfe703f477e6ea8c7848cefe01cf4b7b212bfb7603623dd1409f96f3c105147347be39f6a7173a7e921aceda0f9a56c1d8cd43949c9420499a9d454740563eaf340e10b2ed0f21ceacff8c68b6af1e16018b36f010dc0fe0f7e0e04a7b9ba0edd00961b8e470c2ae27467242104858f27e61ef22ef498d098f64a0822eac1ec3523a221355727e82a66d1130401f027233603838f33f511a0b9d24854cdf1175b9293e88c0f361f1f4a4fe2c36beed05cfebba4f7c0a98c8c7eba2cca3debe087c4f73f8ce0f45e0846c3bd8f4e4a50f162c8af253490c30a5e152ec256f8a0be9953bffd2a560aff0638e8a2b2d361bd5ce708121d734ca6c46ac5f8ada7d07771e3cff2d5fd32f1ef027a03f0e4fccc5f28b0d590c58a05268fb9e6dc655f4b37c263e55b3ed8b84b93e096454db6f98cb0eb6902aa41e67ad9a9425c6c09964c9d6b30af272b00721787b85e4ad5281ea4e863e05e6bbec4ce556b68af2b5695bd77465df9855946be3620596cb0cb58c9907dbd79ede5dbcf8184aae8783c6fc7c326f0e3af900f944faf97b72c45e10ef4568f0af028081f1570e0ff42e69b1b4aa9a6238568a5d6e7dc80c5a30dc06320999634dcaf10b135f29779d2763fc508784d52df9d5b7b3d03bccceba8b7996336ff37ee188b038f0350758583c3b5198e14622ebf34c7a37afeeee68655ba112b63ccbe8f35fb71c42ece046af757fc2b26e553443f612a1b2258e24ac4ee8e45038171ab22e7fc845d07b01bfd321447ecc1fb301dc45dfd069c8f3fe2fb796d71ac118ee36e6c0e6093d77c062121b1f8893f5bf203c4e40a0167580f002f2f263aa001ae088fb0b9ee38d3985dfc66c29925f04ba4be726010614e064d2dbd6a2b0d8f42b5fa5671a0a13caee83401f165530f82b9608b2a07060500a9119c78f58d49646408451382ba7d36fc3dd558abe5b020ce9a8062d25f5baa0a2c587a94330366ba8ea1968fa2b393dbf167a5c117510634e23a781691c88521f40d012debc5e753ae27d5a8f20f5ad8deca5ee76244e99e0791037798bb9757444d833612d8817d2c617c064a891a3e36205172ec08cf28ceddb30f1b0326ac5fccd4a361c20e5c3b580712d0b731f47b6f396189b86ee0673adeae0912d4ac5748d8bfcc49554c86a4f5b75b189392e893c38cab17c7cc112ee1d24124531e434f35353ff3b6c80c729bda88d94bcef2f52c693c9f04281c8095b6ba97fc59338d3c5c9e4c8ff58b8ad7bf6b99007a3278fc42e35923334c3f94389a2ded9a4146ac334bcde92bfbcce7339d42927be9b0c3a4060f50fc1c669ff8bad9122f601e23c46aba8e863a032f9e38f51911407a420fed89b1acdae80e575afb8d2459aed183a6e31087c98d22f04301905848e4f0b0bdfb6a270345df01fee31e5f3f6dc54f1f6a540f0ef880466e33c6e200ea71189eb8bf7959ad371f041afc3ad7dc553e220cc9f51b564795755ac83f24ad1fa440bd4d3b6ff824e2bb9850a52b7aa7178a04cbfdf3c7b05431dcd7ee2a7bbb076f0110f8b78593ec3da0d2a4ce5c60720bd11339903fece63d488c5f396a3488896f64d0e32ecb7e254dc7da13f686ae046f8700ac798845c2a7ca10a1105f279cbc10ddf2922766ff4e9479e7b4250dd1c6b79f31acc36ba4904f1f5c49cfeb8f4dd1be0005de5e8bac42c1ab0ffb73a5b417e0acd654c8cc43271e8632b759c4a65f3cf89a2380dc4f3236debaa55f8f303fac034c88bf8409d3b1364b04249329ac8102f39428f553baa1f4c1ea8dfa125f727c16c8997f25ef4c248819bb0f3038fe8f61daefa2083df33a8b8ea41c05633e1ae03cd9d2a7f6ed927d9d6c8f2841ac3f836ce96e0a7ccc3c35cb0b7a2800eb63459126f206612f6f8a52196c63a2c38ef74f490fc9342c2bada1cddff08e4d6a338bee6557df08c51fdf5c7adaf9d207533f07e953e4dc1c1e1d965a87cba038ea31ac35574233494d680066734fee4b8b1791689754115979d01b70e1f8a782f859728f92e18d1dab30c0259992c8be138f149007ae926e918f0fef4615de20abe05727d76b35c6c7792802b9dc2461328d0f50c89c5a9bc28f55a644abeac7d0598f29ecb964afcafd88b8b2638beb977522dd71a42507d28e5ff28c55984dfa27316b97cf9462c865f08d5b0e6bd91c0f736291454f5a585c74658db66301bf0003d4bb297e6d8c8b6c3dcdb23e26293797c55fdc408c6401345fafb00b396273bfeafe62c5b13ce678f6e45f14314247901a0055908d34c96183c072a1cc0f3dad7cd6ab35069cb640768f69d7fa91429ff95182a6e52a5e015934d015385ee8b452b18319793bc25e53a7c32b986ddcfd34860c7dade064e215226133b5fbdf597e40857e9d04813f2c81eab02d26d497235237afe98e1d4c9138c322f89b09bc5d1c66e7fc931a086f4426f8fcfc1a0594ffa18f3c4d757d8789ba889df9884fb72ad93d7aeafa1c01b722ae8cef3748ddce569128c4d8cf5f6041a538bf0329b32c81006ed7ce1dadc43a55ae1c48a2ddbe596aa45e3c1bb4a53bab323de4dbc689afdb7211a2112ac4cabefd253fec4306e1f82912ec1aac7d79b58aaed8cb91a911029b9098a46dfc20c2fecd8b790395a06787abcae09b4656db2b09dbc6b5f95c8a28a6ffd8a1bccef21396feefa5bac9e5c09540c255e9cd74c8376b2547e03f15247296dd399ad11f98a53856cedf8dcf4f44373c86649326713984df0395a57bf7fff9d155b7f5f02af534df22a26cb12c3ec2513fbadf44e3a91539ef026b0ccfb8da88279b1ada8637a2f31041e872f61a3974902af46fe33ea85f6ce722eadca45ddbf0d777f603b59af0e70b3c32b74b066afe0a5eb596d661c6dbcf4b743c5984fe58f238ffc8b7c3933161beff91edd7ad53b3a26af18e73708a48e420321d864ec580c9acedcf3d35a462e44bae01674865c6bf829f46b469c8fc7b91c326ab94cd1ff9655d0fd1a63d45ce28e529f09b20b3947ecd15fef700c32a032ffdac483b99b23fe73a7d3e580b48a6e2751b6566581fc0a1139ac39acf3937624c017e900827e3ae0fcf30751430cb8925b6e67ce9a61a721c55234521953f0c35bd3e10d578c478b8c99eef693632a0c1617d91c869b20f6892b1b5dde7734dd27f48d09992c9d636490e9b61b940272dca23cd07a043396efc05a4a35b61aeb8688d1c53568ccdc02bdcd56964d0cb318662fe520b2de1d31f09416c89c937388a32fce8ba7bec6b7d8519137f24f259a626372c15319ad27420af9859ab82abf636e18aac9f571b8418602bc8206da79b1dc870096796760ef4508da06f36981d690f98753c61d69f92282f9d94569be5fb050ec52224502984d2ce463cf0a3379e6f5b19329b15c8dca56a3dce515c0950ed7744f46dcc1643c807e6cab88496463a21171cf5e10fedda8cc7524a4e56adfc19cda29276cb50d99626dc6c21da24e2adbc94d80d9568c8e5891ceac716588477b0a3ce448f8f883be35ed9a09a033a50ca7d58fe58386c7fb3a8089ea4d532ae1e5af1415b80feca86ddc2bdfaf3ce9e1748e871c5bad53272aab5e5f4fee1af89c7c642af2f727ad55cd0c512dc2ae452362326b231abbe1da6080999b9eddc2dae24f1a56c8784204eedccd1cdc142069b794dc59462980b4fb5cc108661d5ea9fddff6ae0ff930694c4bb738be540761d2d2176e5ff9cb067aa3d031b636e5e0c12d39d7b516393d9fdeb9a4eed3dfe8dd9f7e35af681bdd82ac8509b4201b61ac10e865315998a6febe79aced1b72432b3ab01caa6bc4384cc2fdd0c1ce9a3a663aa5ac8da561e8a88e5d313cde57f1aa2642d08a6a7bf1bf65cbcfae8772c79bad6f4962bf2f8a91a971f51f236a7a7ee4b82d79ac0e2c5c3f516006b5a217b90f3b1e30795b715e40a1d44dd5a81bc6ab071d0a53f96100389a477dd64a899654d950aec6a717ed0631415d46a63f2809fd18e88a8bd862e3242a4a484a651aeb5e8680f93216b8887527a537095f3d47e0030de40d4576ca7f09ec57185300a65437a37ce09ba082e492cd9c862a85ff9dc305a5463d1d65b2e61edf07e67e03c3ab8528965f79034700ff42dda3a778058b68ed09886239411c16b027f99505e1892e3403d4084110f4215fea11d265516f67eedb9e80776f5634eeb2ecab8c2af6248571b7a1cd988ec948226157d034c72f877ea75266ee0d8228307936adbf8ffc6ecd4afcf3dfb1c55f1b9c78f83a399f069b15a0513e80cd9473b1574048f5aef718bab5a6a3b40217277175c90d19c7fcef7f1544ab8095e9b0d243326114b76dc1bf231ddae87258a098096faa66df065875c45e6cb989d850e2247002f69ca7c078726c8358d056f01ff5ff6fe44e7b33b3a0a2d5c851871db97353ffeff0b551e9715679bcf3cecba7da1c01018acba78bf900d1d3adc639038faff295ebb2fb134a6e92749563026919ea26dd666702f6df139fe6ddc11cc0f2c1cece03aaf1f76530551d30371ade8d725e28b3afe9ff30c94a77118008e7f0c9146168985828ea38af2eaa3c4f85bfc2fb89f0ef8bec5b72ff4fc4ae29e38e91a7eade68c41e860b0bdde162110e18b5e36ef7184b50f781fc93d1e0c0c7ad615d6c9338ac9ad31afe2c9c3fd79fec075cf361722f657cb37665839c528dac1a769bbe29e4980e7376e75fedda5bf88503eb7f335f8025efed8970e5203c4679b90c250f91e91f35548bddf352cfc7dd9e7ba3abd31cb7c4cc8a0d726eaa2f311ea05ea9ed92", 0x2000, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8}, 0x94) (async) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002480)=ANY=[@ANYBLOB="1c10000043000701fefffffffcdbdf25017c000004004580041001"], 0x101c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002400)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000000)={0x23, 0x0, 0x40}, 0x10) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0xf, 0x101301) ioctl$SNDCTL_TMR_METRONOME(r1, 0x40045407) (async) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000180)=@usbdevfs_driver={0xffffffff, 0x9, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f00000001c0)=0x1) (async) listen(r6, 0x3) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002440)=[@text16={0x10, 0x0}], 0x1, 0x55, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 474.661861ms ago: executing program 6 (id=1642): r0 = socket(0x10, 0x3, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) io_getevents(r1, 0x1, 0x42, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0x3938700}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000380)="240000001a005f1414f9f407000904000a00000000000008000f0001000000181fa198b0", 0x24) 205.33441ms ago: executing program 6 (id=1643): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc181000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000000280)='GPL\x00', 0x5, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000400), 0x10}, 0x94) 126.614507ms ago: executing program 7 (id=1644): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) setns(0xc9, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000380), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000600)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) write(r1, &(0x7f0000000000)='3', 0x4e) openat$md_new_array(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0x8008af26, 0x0) r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r5, 0x40480923, 0x0) ioctl$ADD_NEW_DISK(r5, 0x40140921, &(0x7f0000000140)={0x4, {0x1, 0x0}, 0xfffffffc, 0x63e}) ioctl$ADD_NEW_DISK(r5, 0x40140921, &(0x7f0000000180)={0x1, {0x1, 0x1}, 0x1, 0x6}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000b00736970000c00070000000000000000000800090064f70000090006006e6f6e65000000000800080000000000080005"], 0x58}}, 0x0) ioctl$RUN_ARRAY(r5, 0x400c0930, 0x0) memfd_secret(0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) 0s ago: executing program 3 (id=1645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = add_key(&(0x7f0000000600)='big_key\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)="03223820cd8ce36826b806a82a1d6ac81ae6470441f4d30ad7818629d1ece96059b16ebebb4392d2e7e59f0c382a9b78af397c79ee9370d085f2264d8b70920d21addb04523f8c297051b96db0082e922d165877ba164e89789a2af75f82b171e133d8ba7d001a6dafd2680fe10e371fe24884b3c6ad4ca3340f1f1f8d4a958c0add5b", 0x83, 0xfffffffffffffffe) add_key(&(0x7f0000000580)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, r3) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000540)=0x1223822, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x424, 0x3f3, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x7, [0x80000000, 0x7f, 0xb28, 0x1000, 0x9, 0x5, 0x3, 0xfffffffd, 0x6, 0x4, 0x4, 0x20000000, 0x3, 0x2, 0xfffffffd, 0x7, 0x80000000, 0x4, 0x7, 0x0, 0x8000, 0x4, 0x6, 0x5, 0x2bf, 0xe8e, 0x5, 0x7, 0xffffffff, 0x0, 0x9, 0x2, 0x3b6, 0x1, 0x2, 0x25, 0x5, 0x5, 0x7, 0xf, 0xe95, 0x1, 0x4, 0x9, 0x7fff, 0x8, 0x0, 0xfff, 0x3, 0x6, 0x7, 0x2, 0x20000, 0xfffffe00, 0x10000, 0x2, 0x0, 0x80, 0x4, 0xfffeffff, 0x6, 0x6, 0x0, 0x3], [0xd, 0x1, 0x200, 0x81, 0x9, 0x5, 0x80, 0x1000, 0xc49a, 0x2, 0x9, 0xd, 0x8001, 0x7, 0x7f, 0x1e7f, 0x6, 0x89, 0xc1f1, 0xfffffff9, 0x7, 0x68, 0x8, 0x2, 0x0, 0x85, 0x108a, 0x5, 0x3, 0x751a, 0xe48, 0x42, 0x401, 0x7ff, 0x1, 0x1, 0x7, 0x5, 0x7, 0x1, 0x5, 0x5, 0x8, 0x0, 0x8, 0x8001, 0xc5, 0x80, 0x100, 0x101, 0x7, 0xee7, 0x8, 0xb5, 0x78, 0x2, 0x4, 0x6, 0x5, 0x8, 0x4, 0xfffffffe, 0x401, 0x4], [0xfffffa21, 0x2, 0xb191, 0x401, 0x2, 0x4, 0x2, 0xd4e2, 0x2, 0x45c1, 0xc8c, 0x4, 0x554acef7, 0xffffff7f, 0x2, 0x8, 0x1ff, 0x341, 0x1d19, 0x7, 0xffffffff, 0xf8, 0x6, 0xd, 0x6, 0x10000, 0x207cc8de, 0x80000000, 0x1, 0x5, 0x9, 0x8000, 0x7ff, 0x1, 0x4, 0x8000, 0x2, 0x8, 0x3, 0x6, 0x610, 0x2, 0x7fff, 0x7fffffff, 0x2, 0x9e8, 0xc, 0x3, 0x1, 0x5, 0x7, 0x7, 0x8, 0x1, 0x2, 0x1, 0x8, 0x4, 0x7ab8, 0xd, 0x8, 0x6, 0x541, 0x1b], [0x7fff, 0x2, 0x9, 0x9, 0x4, 0x80, 0x9, 0x8, 0x4, 0x0, 0x40, 0x40, 0x1cf, 0x1, 0x9, 0x5, 0xb7, 0x401, 0x3, 0x7, 0x8, 0x5, 0x3, 0x6, 0xff, 0x1, 0x520000, 0x3833, 0x5, 0x1000000, 0x5, 0x0, 0x6, 0x81, 0x0, 0x9, 0x5, 0x9, 0x5, 0x0, 0xffff8001, 0xfff, 0x0, 0x21, 0x2, 0x5, 0x4, 0x6, 0x3e5b, 0xf174, 0x8, 0x400, 0x6, 0x0, 0x4, 0xeaec, 0x0, 0xa, 0x7, 0x1, 0xfffffff8, 0x7, 0x80000001, 0x587f], 0x3, ['\x00', '-\x00']}, [""]}, 0x424}, 0x1, 0x0, 0x0, 0x48041}, 0x20000044) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 12893][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.547847][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.548320][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.548846][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.549317][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.549733][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.550766][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.551288][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.552505][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.553042][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.553522][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.572128][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.584334][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.608831][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.616988][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.625874][T12170] loop5: detected capacity change from 0 to 7 [ 261.626651][T12170] loop5: [POWERTEC] [ 261.645645][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.650178][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.706570][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.724372][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.756113][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.779014][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.806920][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.854597][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.855262][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.855660][ T5799] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 261.857546][T12173] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1356'. [ 261.865701][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.868551][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.874903][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.885998][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.920754][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 261.921581][T12163] overlay: filesystem on ./file0 not supported as upperdir [ 262.007981][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 262.008002][ T43] audit: type=1400 audit(1794216575.899:1631): avc: denied { create } for pid=12181 comm="syz.7.1357" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 262.010798][ T43] audit: type=1400 audit(1794216575.899:1632): avc: denied { write } for pid=12181 comm="syz.7.1357" name="file0" dev="tmpfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 262.011231][ T43] audit: type=1400 audit(1794216575.899:1633): avc: denied { open } for pid=12181 comm="syz.7.1357" path="/205/file0" dev="tmpfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 262.029957][ T43] audit: type=1400 audit(1794216575.899:1634): avc: denied { ioctl } for pid=12181 comm="syz.7.1357" path="/205/file0" dev="tmpfs" ino=1163 ioctlcmd=0x1262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 262.754692][ T43] audit: type=1400 audit(1794216576.619:1635): avc: denied { create } for pid=12190 comm="syz.6.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 262.757414][ T43] audit: type=1400 audit(1794216576.619:1636): avc: denied { getopt } for pid=12190 comm="syz.6.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 262.757739][T12191] key id 00000000 not found [ 262.986214][T12197] netlink: 'syz.0.1363': attribute type 10 has an invalid length. [ 262.986238][T12197] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1363'. [ 262.994459][ T43] audit: type=1400 audit(1794216576.849:1637): avc: denied { unlink } for pid=8332 comm="syz-executor" name="file0" dev="tmpfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 263.264515][ T43] audit: type=1400 audit(1794216577.109:1638): avc: denied { mounton } for pid=12194 comm="syz.8.1364" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 263.265180][T12205] tmpfs: Bad value for 'mpol' [ 263.724046][ T43] audit: type=1400 audit(1794216577.569:1639): avc: denied { create } for pid=12210 comm="syz.6.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.740928][ T43] audit: type=1400 audit(1794216577.569:1640): avc: denied { connect } for pid=12210 comm="syz.6.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.743604][ T6695] smc: removing ib device syz2 [ 263.988422][ T8505] infiniband syz2: ib_query_port failed (-19) [ 264.167151][ T6695] smbdirect: ib_dev[syz2] removed [ 264.740594][ C2] net_ratelimit: 9 callbacks suppressed [ 264.740617][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.740806][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.740965][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.800744][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.331388][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.331565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.356721][T12225] XFS (mtdblock0): Invalid superblock magic number [ 265.570286][T12239] netlink: 'syz.6.1372': attribute type 27 has an invalid length. [ 265.570658][T12236] ip_tables: iptables: counters copy to user failed while replacing table [ 265.913907][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.338193][T12241] XFS (mtdblock0): Invalid superblock magic number [ 266.636410][ T6705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.636592][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.081497][T12239] geneve1: left allmulticast mode [ 267.195299][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 267.195317][ T43] audit: type=1400 audit(1794216581.069:1646): avc: denied { watch watch_reads } for pid=12258 comm="syz.7.1376" path="/211/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 267.236361][T12239] geneve2: left allmulticast mode [ 267.242502][T12239] geneve3: left allmulticast mode [ 268.000078][T12240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.005881][T12240] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.081798][T12240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.081827][T12240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.096352][T12240] veth1_vlan: left promiscuous mode [ 268.097419][T12240] veth0_vlan: left promiscuous mode [ 268.098817][T12240] veth0_vlan: entered promiscuous mode [ 268.101230][T12240] veth1_vlan: entered promiscuous mode [ 268.118729][T12240] veth1_macvtap: left promiscuous mode [ 268.119833][T12240] veth0_macvtap: left promiscuous mode [ 268.120807][T12240] veth0_macvtap: entered promiscuous mode [ 268.121831][T12240] veth1_macvtap: entered promiscuous mode [ 268.129088][T12240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 268.130162][T12240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 268.142436][T12240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 268.143298][T12240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 268.162669][T12240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.164832][T12240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.202248][T12240] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.274926][ T6707] bridge0: port 1(џџџџ) entered blocking state [ 268.275017][ T6707] bridge0: port 1(џџџџ) entered forwarding state [ 268.276922][ T6707] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.277008][ T6707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.599717][ T43] audit: type=1400 audit(1794216582.469:1647): avc: denied { block_suspend } for pid=12264 comm="syz.6.1378" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.933897][ T43] audit: type=1400 audit(1794216582.809:1648): avc: denied { listen } for pid=12275 comm="syz.7.1380" laddr=127.0.0.1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 269.078612][T12279] FAULT_INJECTION: forcing a failure. [ 269.078612][T12279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.078642][T12279] CPU: 0 UID: 0 PID: 12279 Comm: syz.0.1381 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.078666][T12279] Tainted: [L]=SOFTLOCKUP [ 269.078672][T12279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.078682][T12279] Call Trace: [ 269.078689][T12279] [ 269.078696][T12279] dump_stack_lvl+0x100/0x190 [ 269.078731][T12279] should_fail_ex.cold+0x5/0xa [ 269.078757][T12279] _copy_from_user+0x2e/0xd0 [ 269.078780][T12279] memdup_user+0x6b/0xe0 [ 269.078801][T12279] strndup_user+0x78/0xe0 [ 269.078822][T12279] __x64_sys_mount+0x136/0x310 [ 269.078854][T12279] ? __pfx___x64_sys_mount+0x10/0x10 [ 269.078885][T12279] do_syscall_64+0x123/0x7b0 [ 269.078909][T12279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.078926][T12279] RIP: 0033:0x7f43fd59fb19 [ 269.078942][T12279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.078957][T12279] RSP: 002b:00007f43fe461028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 269.078977][T12279] RAX: ffffffffffffffda RBX: 00007f43fd825fa0 RCX: 00007f43fd59fb19 [ 269.078988][T12279] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000200000000180 [ 269.079000][T12279] RBP: 00007f43fe461090 R08: 0000000000000000 R09: 0000000000000000 [ 269.079011][T12279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.079021][T12279] R13: 00007f43fd826038 R14: 00007f43fd825fa0 R15: 00007fffb98242b8 [ 269.079045][T12279] [ 269.481193][ T43] audit: type=1400 audit(1794216583.359:1649): avc: denied { unmount } for pid=5784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 269.530124][T12286] XFS (mtdblock0): Invalid superblock magic number [ 269.581454][ T43] audit: type=1400 audit(1794216583.459:1650): avc: denied { mount } for pid=12291 comm="syz.8.1385" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 269.858210][ T7050] batman_adv: batadv0: Removing interface: syz_tun [ 269.988125][T12302] FAULT_INJECTION: forcing a failure. [ 269.988125][T12302] name fail_futex, interval 1, probability 0, space 0, times 0 [ 269.988154][T12302] CPU: 0 UID: 0 PID: 12302 Comm: syz.7.1388 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.988174][T12302] Tainted: [L]=SOFTLOCKUP [ 269.988180][T12302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.988189][T12302] Call Trace: [ 269.988195][T12302] [ 269.988201][T12302] dump_stack_lvl+0x100/0x190 [ 269.988258][T12302] should_fail_ex.cold+0x5/0xa [ 269.988283][T12302] should_fail_futex+0x4c/0x60 [ 269.988300][T12302] futex_lock_pi_atomic+0xea/0xb80 [ 269.988326][T12302] futex_lock_pi+0x278/0x7e0 [ 269.988348][T12302] ? __pfx_futex_lock_pi+0x10/0x10 [ 269.988368][T12302] ? __pfx___futex_wait+0x10/0x10 [ 269.988386][T12302] ? __pfx_try_to_wake_up+0x10/0x10 [ 269.988423][T12302] ? __pfx_futex_wake_mark+0x10/0x10 [ 269.988448][T12302] ? rcu_read_lock_any_held+0x6a/0x90 [ 269.988465][T12302] ? find_held_lock+0x2b/0x80 [ 269.988480][T12302] ? ksys_write+0x190/0x250 [ 269.988500][T12302] do_futex+0x31d/0x440 [ 269.988519][T12302] ? __pfx_do_futex+0x10/0x10 [ 269.988536][T12302] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 269.988560][T12302] __x64_sys_futex+0x34f/0x4d0 [ 269.988579][T12302] ? __pfx___x64_sys_futex+0x10/0x10 [ 269.988603][T12302] do_syscall_64+0x123/0x7b0 [ 269.988624][T12302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.988641][T12302] RIP: 0033:0x7fc050b9fb19 [ 269.988656][T12302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.988672][T12302] RSP: 002b:00007fc051a07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 269.988691][T12302] RAX: ffffffffffffffda RBX: 00007fc050e25fa0 RCX: 00007fc050b9fb19 [ 269.988702][T12302] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 269.988713][T12302] RBP: 00007fc050c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 269.988723][T12302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.988733][T12302] R13: 00007fc050e26038 R14: 00007fc050e25fa0 R15: 00007fff340ced28 [ 269.988757][T12302] [ 270.136090][ T43] audit: type=1400 audit(1794216584.009:1651): avc: denied { getopt } for pid=12300 comm="syz.6.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 270.140186][T10544] net_ratelimit: 10 callbacks suppressed [ 270.140240][T10544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.994027][ T43] audit: type=1400 audit(1794216584.879:1652): avc: denied { execute } for pid=12309 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 270.995117][ T43] audit: type=1400 audit(1794216584.879:1653): avc: denied { execute_no_trans } for pid=12309 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 271.187806][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.198221][ T43] audit: type=1400 audit(1794216585.059:1654): avc: denied { ioctl } for pid=12316 comm="syz.6.1391" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 271.228181][T12319] overlayfs: missing 'workdir' [ 271.318910][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1392'. [ 271.373329][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.427626][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.449089][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.483351][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.484499][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.537547][ T43] audit: type=1400 audit(1794216585.419:1655): avc: denied { mounton } for pid=12320 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 271.743140][T12327] netlink: 3604 bytes leftover after parsing attributes in process `syz.7.1394'. [ 271.806253][T12328] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1393'. [ 272.220671][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.307583][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.307788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.308168][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.308281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.381571][T12320] rxe_eth0 speed is unknown, defaulting to 1000 [ 272.604119][T12320] dummy0 speed is unknown, defaulting to 1000 [ 272.642675][ T43] audit: type=1400 audit(1794216586.509:1656): avc: denied { unmount } for pid=10360 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 272.707068][ T5903] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 272.850550][T12358] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 272.877803][ T5903] usb 11-1: Using ep0 maxpacket: 8 [ 272.878718][ T5903] usb 11-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 272.883722][ T5903] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.883745][ T5903] usb 11-1: Product: syz [ 272.883755][ T5903] usb 11-1: Manufacturer: syz [ 272.883764][ T5903] usb 11-1: SerialNumber: syz [ 272.887270][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.887423][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.887551][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.987000][ T5903] usb 11-1: config 0 descriptor?? [ 273.070557][T12350] XFS (mtdblock0): Invalid superblock magic number [ 273.235440][T12368] FAULT_INJECTION: forcing a failure. [ 273.235440][T12368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.235491][T12368] CPU: 0 UID: 0 PID: 12368 Comm: syz.7.1402 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.235518][T12368] Tainted: [L]=SOFTLOCKUP [ 273.235525][T12368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.235536][T12368] Call Trace: [ 273.235549][T12368] [ 273.235559][T12368] dump_stack_lvl+0x100/0x190 [ 273.235657][T12368] should_fail_ex.cold+0x5/0xa [ 273.235706][T12368] _copy_from_user+0x2e/0xd0 [ 273.235737][T12368] memdup_user+0x6b/0xe0 [ 273.235760][T12368] strndup_user+0x78/0xe0 [ 273.235783][T12368] __x64_sys_mount+0x17f/0x310 [ 273.235812][T12368] ? __pfx___x64_sys_mount+0x10/0x10 [ 273.235848][T12368] do_syscall_64+0x123/0x7b0 [ 273.235892][T12368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.235913][T12368] RIP: 0033:0x7fc050b9fb19 [ 273.235940][T12368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.235958][T12368] RSP: 002b:00007fc051a07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 273.235989][T12368] RAX: ffffffffffffffda RBX: 00007fc050e25fa0 RCX: 00007fc050b9fb19 [ 273.236002][T12368] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000200000000180 [ 273.236015][T12368] RBP: 00007fc051a07090 R08: 0000000000000000 R09: 0000000000000000 [ 273.236027][T12368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.236038][T12368] R13: 00007fc050e26038 R14: 00007fc050e25fa0 R15: 00007fff340ced28 [ 273.236065][T12368] [ 273.442525][ T5903] dvb_usb_rtl28xxu 11-1:0.0: chip type detection failed -71 [ 273.442608][ T5903] dvb_usb_rtl28xxu 11-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 273.450716][ T5903] usb 11-1: USB disconnect, device number 18 [ 273.675041][ T5787] Bluetooth: hci1: command tx timeout [ 273.814093][T12373] vlan2: entered allmulticast mode [ 273.817797][T12373] bond0: entered allmulticast mode [ 273.817819][T12373] bond_slave_0: entered allmulticast mode [ 273.817836][T12373] bond_slave_1: entered allmulticast mode [ 273.822498][T12373] bridge0: port 3(vlan2) entered blocking state [ 273.825031][T12373] bridge0: port 3(vlan2) entered disabled state [ 273.847242][T12373] vlan2: entered promiscuous mode [ 273.847268][T12373] bond0: entered promiscuous mode [ 273.847280][T12373] bond_slave_0: entered promiscuous mode [ 273.882343][T12373] bond_slave_1: entered promiscuous mode [ 273.884048][T12373] bridge0: port 3(vlan2) entered blocking state [ 273.884188][T12373] bridge0: port 3(vlan2) entered forwarding state [ 273.953408][T12320] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.953469][T12320] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.953594][T12320] bridge_slave_0: entered allmulticast mode [ 273.981456][T12320] bridge_slave_0: entered promiscuous mode [ 273.993759][T12320] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.993903][T12320] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.994206][T12320] bridge_slave_1: entered allmulticast mode [ 274.008698][T12320] bridge_slave_1: entered promiscuous mode [ 274.037738][T12378] bridge_slave_0: left allmulticast mode [ 274.037768][T12378] bridge_slave_0: left promiscuous mode [ 274.037910][T12378] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.061925][T12378] bridge_slave_1: left allmulticast mode [ 274.061952][T12378] bridge_slave_1: left promiscuous mode [ 274.062100][T12378] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.080434][T12378] vlan2: left promiscuous mode [ 274.080459][T12378] bond0: left promiscuous mode [ 274.080473][T12378] bond_slave_0: left promiscuous mode [ 274.080672][T12378] bond_slave_1: left promiscuous mode [ 274.102305][T12378] bond0: (slave bond_slave_0): Releasing backup interface [ 274.166894][T12381] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 274.166921][T12381] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.168705][T12381] vhci_hcd vhci_hcd.0: Device attached [ 274.174276][T12378] bond_slave_0: left allmulticast mode [ 274.174549][T12382] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(7) [ 274.174570][T12382] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.192312][T12382] vhci_hcd vhci_hcd.0: Device attached [ 274.208331][T12378] bond0: (slave bond_slave_1): Releasing backup interface [ 274.222139][T12378] bond_slave_1: left allmulticast mode [ 274.230709][T12378] team0: Port device team_slave_0 removed [ 274.247288][T12378] team0: Port device team_slave_1 removed [ 274.248098][T12378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.248117][T12378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.271867][T12378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.271890][T12378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.405384][ T5858] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 274.425340][ T5890] usb 12-1: new low-speed USB device number 11 using dummy_hcd [ 274.471927][T12390] can: request_module (can-proto-3) failed. [ 274.501176][ T6707] bridge0: port 3(vlan2) entered disabled state [ 274.510634][T12320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.520711][T12320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.572377][T12320] team0: Port device team_slave_0 added [ 274.581107][T12320] team0: Port device team_slave_1 added [ 274.590173][ T5890] usb 12-1: device descriptor read/64, error -71 [ 274.698344][ T43] audit: type=1400 audit(1794216588.579:1657): avc: denied { read } for pid=12394 comm="syz.6.1409" name="file0" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 274.726406][ T43] audit: type=1400 audit(1794216588.589:1658): avc: denied { ioctl } for pid=12392 comm="syz.8.1408" path="socket:[62321]" dev="sockfs" ino=62321 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 274.727530][T12393] batman_adv: batadv0: Adding interface: dummy0 [ 274.727545][T12393] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.728019][T12393] batman_adv: batadv0: Interface activated: dummy0 [ 274.801016][T12320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.801034][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.801055][T12320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.802714][T12320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.802729][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.802751][T12320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.950334][ T5890] usb 12-1: new low-speed USB device number 12 using dummy_hcd [ 275.077978][ T5890] usb 12-1: device descriptor read/64, error -71 [ 275.185734][ T5890] usb usb12-port1: attempt power cycle [ 275.220691][T12403] FAULT_INJECTION: forcing a failure. [ 275.220691][T12403] name failslab, interval 1, probability 0, space 0, times 0 [ 275.220721][T12403] CPU: 2 UID: 0 PID: 12403 Comm: syz.6.1411 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.220747][T12403] Tainted: [L]=SOFTLOCKUP [ 275.220754][T12403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.220765][T12403] Call Trace: [ 275.220771][T12403] [ 275.220780][T12403] dump_stack_lvl+0x100/0x190 [ 275.220816][T12403] should_fail_ex.cold+0x5/0xa [ 275.220850][T12403] should_failslab+0xc2/0x120 [ 275.220872][T12403] kmem_cache_alloc_noprof+0x92/0x6a0 [ 275.220901][T12403] ? do_getname+0x35/0x390 [ 275.220930][T12403] do_getname+0x35/0x390 [ 275.220959][T12403] user_path_at+0x26/0x60 [ 275.220980][T12403] __x64_sys_mount+0x1fb/0x310 [ 275.221007][T12403] ? __pfx___x64_sys_mount+0x10/0x10 [ 275.221041][T12403] do_syscall_64+0x123/0x7b0 [ 275.221065][T12403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.221085][T12403] RIP: 0033:0x7fc9f679fb19 [ 275.221101][T12403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.221117][T12403] RSP: 002b:00007fc9f75ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 275.221136][T12403] RAX: ffffffffffffffda RBX: 00007fc9f6a25fa0 RCX: 00007fc9f679fb19 [ 275.221148][T12403] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000200000000180 [ 275.221159][T12403] RBP: 00007fc9f75ab090 R08: 0000000000000000 R09: 0000000000000000 [ 275.221171][T12403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.221182][T12403] R13: 00007fc9f6a26038 R14: 00007fc9f6a25fa0 R15: 00007ffd2ae2eab8 [ 275.221207][T12403] [ 275.252479][T12320] hsr_slave_0: entered promiscuous mode [ 275.253454][T12320] hsr_slave_1: entered promiscuous mode [ 275.255097][T12320] debugfs: 'hsr0' already exists in 'hsr' [ 275.255113][T12320] Cannot create hsr debugfs directory [ 275.297795][ T8505] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 275.337439][ T855] net_ratelimit: 23 callbacks suppressed [ 275.337460][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.339319][T10544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.339493][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.350058][T12404] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 275.391959][ T43] audit: type=1326 audit(1794216589.269:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f679fb19 code=0x7ffc0000 [ 275.393138][ T43] audit: type=1326 audit(1794216589.269:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f679fb19 code=0x7ffc0000 [ 275.393182][ T43] audit: type=1326 audit(1794216589.269:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f679fb19 code=0x7ffc0000 [ 275.394477][ T43] audit: type=1326 audit(1794216589.269:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f679fb19 code=0x7ffc0000 [ 275.396438][ T43] audit: type=1326 audit(1794216589.279:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fc9f679fb19 code=0x7ffc0000 [ 275.396701][ T43] audit: type=1326 audit(1794216589.279:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f679fb19 code=0x7ffc0000 [ 275.397107][ T43] audit: type=1326 audit(1794216589.279:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f679fb19 code=0x7ffc0000 [ 275.456341][ T8505] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 275.546533][ T5890] usb 12-1: new low-speed USB device number 13 using dummy_hcd [ 275.569841][ T5890] usb 12-1: device descriptor read/8, error -71 [ 275.719600][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1415'. [ 275.734698][T12410] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 275.734735][T12410] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 275.745619][ T5787] Bluetooth: hci1: command tx timeout [ 275.825322][ T5890] usb 12-1: new low-speed USB device number 14 using dummy_hcd [ 275.850951][ T5890] usb 12-1: device descriptor read/8, error -71 [ 275.955702][ T5890] usb usb12-port1: unable to enumerate USB device [ 276.323086][T12320] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 276.341150][T12320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 276.342179][T12320] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 276.395159][T10544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.397138][T12320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 276.401905][T12320] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 276.440499][T12320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 276.441603][T12320] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 276.450120][T12320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 276.465441][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.465638][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.465832][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.779628][T12320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.792144][T12320] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.823616][ T6716] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.823707][ T6716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.825494][ T6716] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.825581][ T6716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.887839][T12320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.887864][T12320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.956744][T12441] FAULT_INJECTION: forcing a failure. [ 276.956744][T12441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.956777][T12441] CPU: 0 UID: 0 PID: 12441 Comm: syz.8.1420 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.956803][T12441] Tainted: [L]=SOFTLOCKUP [ 276.956811][T12441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 276.956823][T12441] Call Trace: [ 276.956830][T12441] [ 276.956840][T12441] dump_stack_lvl+0x100/0x190 [ 276.956877][T12441] should_fail_ex.cold+0x5/0xa [ 276.956904][T12441] strncpy_from_user+0x3b/0x2d0 [ 276.956935][T12441] do_getname+0x78/0x390 [ 276.956965][T12441] user_path_at+0x26/0x60 [ 276.956987][T12441] __x64_sys_mount+0x1fb/0x310 [ 276.957016][T12441] ? __pfx___x64_sys_mount+0x10/0x10 [ 276.957051][T12441] do_syscall_64+0x123/0x7b0 [ 276.957076][T12441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.957096][T12441] RIP: 0033:0x7f1b1139fb19 [ 276.957114][T12441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.957132][T12441] RSP: 002b:00007f1b1233e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 276.957153][T12441] RAX: ffffffffffffffda RBX: 00007f1b11625fa0 RCX: 00007f1b1139fb19 [ 276.957166][T12441] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000200000000180 [ 276.957179][T12441] RBP: 00007f1b1233e090 R08: 0000000000000000 R09: 0000000000000000 [ 276.957191][T12441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.957203][T12441] R13: 00007f1b11626038 R14: 00007f1b11625fa0 R15: 00007ffcb79f8a88 [ 276.957228][T12441] [ 277.011742][ T5787] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 277.168059][T12383] vhci_hcd: connection reset by peer [ 277.168370][T12384] vhci_hcd: connection closed [ 277.185353][ T5861] vhci_hcd vhci_hcd.7: stop threads [ 277.185386][ T5861] vhci_hcd vhci_hcd.7: release socket [ 277.187325][ T5861] vhci_hcd vhci_hcd.7: disconnect device [ 277.189443][ T5861] vhci_hcd vhci_hcd.7: stop threads [ 277.189461][ T5861] vhci_hcd vhci_hcd.7: release socket [ 277.189503][ T5861] vhci_hcd vhci_hcd.7: disconnect device [ 277.381593][T12448] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 277.441575][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.640767][T12451] XFS (mtdblock0): Invalid superblock magic number [ 277.852838][ T5787] Bluetooth: hci1: command tx timeout [ 278.076936][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.077163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.391533][T12320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.863794][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1428'. [ 278.908191][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1428'. [ 278.950846][T12496] nbd: must specify an index to disconnect [ 279.000151][T12502] FAULT_INJECTION: forcing a failure. [ 279.000151][T12502] name failslab, interval 1, probability 0, space 0, times 0 [ 279.000181][T12502] CPU: 0 UID: 0 PID: 12502 Comm: syz.8.1430 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.000202][T12502] Tainted: [L]=SOFTLOCKUP [ 279.000208][T12502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 279.000218][T12502] Call Trace: [ 279.000224][T12502] [ 279.000232][T12502] dump_stack_lvl+0x100/0x190 [ 279.000426][T12502] should_fail_ex.cold+0x5/0xa [ 279.000454][T12502] should_failslab+0xc2/0x120 [ 279.000475][T12502] __kmalloc_noprof+0xfc/0x840 [ 279.000503][T12502] ? tomoyo_encode2+0xfb/0x3c0 [ 279.000527][T12502] tomoyo_encode2+0xfb/0x3c0 [ 279.000548][T12502] tomoyo_encode+0x29/0x50 [ 279.000564][T12502] tomoyo_mount_acl+0x14c/0x8b0 [ 279.000580][T12502] ? is_bpf_text_address+0x8a/0x1a0 [ 279.000620][T12502] ? is_bpf_text_address+0x8a/0x1a0 [ 279.000644][T12502] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 279.000671][T12502] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 279.000688][T12502] ? kernel_text_address+0x8d/0x100 [ 279.000726][T12502] ? unwind_get_return_address+0x59/0xa0 [ 279.000758][T12502] ? arch_stack_walk+0xa6/0xf0 [ 279.000801][T12502] ? __lock_acquire+0x5c0/0x1f40 [ 279.000838][T12502] ? tomoyo_mount_permission+0x1f6/0x460 [ 279.000860][T12502] ? tomoyo_domain+0xb2/0x150 [ 279.000880][T12502] ? tomoyo_profile+0x47/0x60 [ 279.000905][T12502] tomoyo_mount_permission+0x214/0x460 [ 279.000922][T12502] ? tomoyo_mount_permission+0x1f6/0x460 [ 279.000942][T12502] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 279.000976][T12502] security_sb_mount+0xdd/0x270 [ 279.001005][T12502] path_mount+0x158/0x2850 [ 279.001036][T12502] ? __pfx_path_mount+0x10/0x10 [ 279.001060][T12502] ? lockdep_hardirqs_on+0x7d/0x110 [ 279.001085][T12502] ? putname+0xb1/0x110 [ 279.001107][T12502] ? kmem_cache_free+0x127/0x6c0 [ 279.001140][T12502] ? __x64_sys_mount+0x293/0x310 [ 279.001165][T12502] __x64_sys_mount+0x293/0x310 [ 279.001208][T12502] ? __pfx___x64_sys_mount+0x10/0x10 [ 279.001244][T12502] do_syscall_64+0x123/0x7b0 [ 279.001269][T12502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.001287][T12502] RIP: 0033:0x7f1b1139fb19 [ 279.001304][T12502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.001321][T12502] RSP: 002b:00007f1b1233e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 279.001338][T12502] RAX: ffffffffffffffda RBX: 00007f1b11625fa0 RCX: 00007f1b1139fb19 [ 279.001350][T12502] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000200000000180 [ 279.001361][T12502] RBP: 00007f1b1233e090 R08: 0000000000000000 R09: 0000000000000000 [ 279.001373][T12502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.001384][T12502] R13: 00007f1b11626038 R14: 00007f1b11625fa0 R15: 00007ffcb79f8a88 [ 279.001571][T12502] [ 279.268772][T12320] veth0_vlan: entered promiscuous mode [ 279.274926][T12320] veth1_vlan: entered promiscuous mode [ 279.494810][ T5858] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 279.507936][T12320] veth0_macvtap: entered promiscuous mode [ 279.511700][T12320] veth1_macvtap: entered promiscuous mode [ 279.592248][T12320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.617212][T12320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.670471][ T5861] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.670650][ T5861] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.670779][ T5861] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.670884][ T5861] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.680820][T12518] kernel profiling enabled (shift: 7) [ 279.691421][T12506] XFS (mtdblock0): Invalid superblock magic number [ 279.908349][ T5787] Bluetooth: hci1: command tx timeout [ 280.101337][T12525] netlink: 'syz.8.1434': attribute type 39 has an invalid length. [ 280.196148][ T6705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.196173][ T6705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.323155][ T43] kauditd_printk_skb: 57 callbacks suppressed [ 280.323174][ T43] audit: type=1400 audit(1794216594.199:1723): avc: denied { append } for pid=12527 comm="syz.6.1435" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 280.354546][ T43] audit: type=1400 audit(1794216594.229:1724): avc: denied { write } for pid=12529 comm="syz.7.1436" name="trace_clock" dev="tracefs" ino=416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 280.536247][T10546] net_ratelimit: 10 callbacks suppressed [ 280.536271][T10546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.599506][ T6714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.599529][ T6714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.612006][ T43] audit: type=1400 audit(1794216594.489:1725): avc: denied { mounton } for pid=12320 comm="syz-executor" path="/syzkaller.ZS8PIV/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 280.619618][ T43] audit: type=1400 audit(1794216594.509:1726): avc: denied { mounton } for pid=12320 comm="syz-executor" path="/syzkaller.ZS8PIV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 280.620786][ T43] audit: type=1400 audit(1794216594.509:1727): avc: denied { mounton } for pid=12320 comm="syz-executor" path="/syzkaller.ZS8PIV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=63992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 280.667206][T12533] FAULT_INJECTION: forcing a failure. [ 280.667206][T12533] name failslab, interval 1, probability 0, space 0, times 0 [ 280.667236][T12533] CPU: 0 UID: 0 PID: 12533 Comm: syz.6.1438 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.667259][T12533] Tainted: [L]=SOFTLOCKUP [ 280.667265][T12533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.667276][T12533] Call Trace: [ 280.667283][T12533] [ 280.667290][T12533] dump_stack_lvl+0x100/0x190 [ 280.667359][T12533] should_fail_ex.cold+0x5/0xa [ 280.667385][T12533] should_failslab+0xc2/0x120 [ 280.667407][T12533] __kmalloc_noprof+0xfc/0x840 [ 280.667430][T12533] ? rcu_is_watching+0x13/0xc0 [ 280.667450][T12533] ? tomoyo_realpath_from_path+0xb6/0x690 [ 280.667474][T12533] tomoyo_realpath_from_path+0xb6/0x690 [ 280.667497][T12533] tomoyo_mount_acl+0x1b6/0x8b0 [ 280.667513][T12533] ? is_bpf_text_address+0x8a/0x1a0 [ 280.667533][T12533] ? is_bpf_text_address+0x8a/0x1a0 [ 280.667555][T12533] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 280.667581][T12533] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 280.667597][T12533] ? kernel_text_address+0x8d/0x100 [ 280.667617][T12533] ? unwind_get_return_address+0x59/0xa0 [ 280.667636][T12533] ? arch_stack_walk+0xa6/0xf0 [ 280.667665][T12533] ? __lock_acquire+0x5c0/0x1f40 [ 280.667701][T12533] ? tomoyo_mount_permission+0x1f6/0x460 [ 280.667722][T12533] ? tomoyo_domain+0xb2/0x150 [ 280.667742][T12533] ? tomoyo_profile+0x47/0x60 [ 280.667765][T12533] tomoyo_mount_permission+0x214/0x460 [ 280.667781][T12533] ? tomoyo_mount_permission+0x1f6/0x460 [ 280.667800][T12533] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 280.667830][T12533] security_sb_mount+0xdd/0x270 [ 280.667856][T12533] path_mount+0x158/0x2850 [ 280.667885][T12533] ? __pfx_path_mount+0x10/0x10 [ 280.667910][T12533] ? lockdep_hardirqs_on+0x7d/0x110 [ 280.667933][T12533] ? putname+0xb1/0x110 [ 280.667952][T12533] ? kmem_cache_free+0x127/0x6c0 [ 280.667985][T12533] ? __x64_sys_mount+0x293/0x310 [ 280.668009][T12533] __x64_sys_mount+0x293/0x310 [ 280.668035][T12533] ? __pfx___x64_sys_mount+0x10/0x10 [ 280.668066][T12533] do_syscall_64+0x123/0x7b0 [ 280.668089][T12533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.668106][T12533] RIP: 0033:0x7fc9f679fb19 [ 280.668121][T12533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.668137][T12533] RSP: 002b:00007fc9f75ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 280.668155][T12533] RAX: ffffffffffffffda RBX: 00007fc9f6a25fa0 RCX: 00007fc9f679fb19 [ 280.668166][T12533] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000200000000180 [ 280.668176][T12533] RBP: 00007fc9f75ab090 R08: 0000000000000000 R09: 0000000000000000 [ 280.668188][T12533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.668198][T12533] R13: 00007fc9f6a26038 R14: 00007fc9f6a25fa0 R15: 00007ffd2ae2eab8 [ 280.668223][T12533] [ 280.668280][T12533] ERROR: Out of memory at tomoyo_realpath_from_path. [ 280.791705][ T43] audit: type=1400 audit(1794216594.669:1728): avc: denied { mounton } for pid=12320 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 280.792602][ T43] audit: type=1400 audit(1794216594.669:1729): avc: denied { mount } for pid=12320 comm="syz-executor" name="/" dev="gadgetfs" ino=10512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 280.985398][ T43] audit: type=1400 audit(1794216594.859:1730): avc: denied { name_connect } for pid=12537 comm="syz.6.1439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 281.119303][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.119460][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.366077][ T43] audit: type=1400 audit(1794216595.229:1731): avc: denied { mounton } for pid=12320 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 281.551249][ T43] audit: type=1400 audit(1794216595.439:1732): avc: denied { kexec_image_load } for pid=12546 comm="syz.7.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 281.581010][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.586900][T12549] overlayfs: failed to resolve './file1': -2 [ 281.688627][T12549] overlayfs: failed to resolve './file1': -2 [ 281.720339][T12549] overlayfs: failed to resolve './file1': -2 [ 281.772886][T12549] overlayfs: failed to resolve './file1': -2 [ 281.792670][T12549] overlayfs: failed to resolve './file1': -2 [ 281.800747][T12549] overlayfs: failed to resolve './file1': -2 [ 281.837348][T12549] overlayfs: failed to resolve './file1': -2 [ 281.994141][T12549] overlayfs: failed to resolve './file1': -2 [ 281.997004][T12549] overlayfs: failed to resolve './file1': -2 [ 282.033396][T12549] overlayfs: failed to resolve './file1': -2 [ 282.034159][T12549] overlayfs: failed to resolve './file1': -2 [ 282.034979][T12549] overlayfs: failed to resolve './file1': -2 [ 282.035692][T12549] overlayfs: failed to resolve './file1': -2 [ 282.038688][T12549] overlayfs: failed to resolve './file1': -2 [ 282.041232][T12549] overlayfs: failed to resolve './file1': -2 [ 282.044462][T12549] overlayfs: failed to resolve './file1': -2 [ 282.047778][T12559] XFS (mtdblock0): Invalid superblock magic number [ 282.053741][T12549] overlayfs: failed to resolve './file1': -2 [ 282.066583][T12549] overlayfs: failed to resolve './file1': -2 [ 282.067674][T12549] overlayfs: failed to resolve './file1': -2 [ 282.068536][T12549] overlayfs: failed to resolve './file1': -2 [ 282.072529][T12549] overlayfs: failed to resolve './file1': -2 [ 282.141080][T12549] overlayfs: failed to resolve './file1': -2 [ 282.168311][T12549] overlayfs: failed to resolve './file1': -2 [ 282.169261][T12549] overlayfs: failed to resolve './file1': -2 [ 282.180932][T12549] overlayfs: failed to resolve './file1': -2 [ 282.182480][T12549] overlayfs: failed to resolve './file1': -2 [ 282.216704][T12549] overlayfs: failed to resolve './file1': -2 [ 282.262700][T12549] overlayfs: failed to resolve './file1': -2 [ 282.316015][T12549] overlayfs: failed to resolve './file1': -2 [ 282.378624][T12549] overlayfs: failed to resolve './file1': -2 [ 282.406611][T12549] overlayfs: failed to resolve './file1': -2 [ 282.583042][T12569] XFS (mtdblock0): Invalid superblock magic number [ 282.649253][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.658112][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.658313][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.658481][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.661001][T10544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.831159][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.257310][T12619] XFS (mtdblock0): Invalid superblock magic number [ 284.314130][T12626] FAULT_INJECTION: forcing a failure. [ 284.314130][T12626] name failslab, interval 1, probability 0, space 0, times 0 [ 284.314159][T12626] CPU: 3 UID: 0 PID: 12626 Comm: syz.7.1448 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.314179][T12626] Tainted: [L]=SOFTLOCKUP [ 284.314185][T12626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.314198][T12626] Call Trace: [ 284.314203][T12626] [ 284.314210][T12626] dump_stack_lvl+0x100/0x190 [ 284.314240][T12626] should_fail_ex.cold+0x5/0xa [ 284.314263][T12626] should_failslab+0xc2/0x120 [ 284.314280][T12626] __kmalloc_noprof+0xfc/0x840 [ 284.314302][T12626] ? tomoyo_encode2+0xfb/0x3c0 [ 284.314321][T12626] tomoyo_encode2+0xfb/0x3c0 [ 284.314339][T12626] tomoyo_encode+0x29/0x50 [ 284.314353][T12626] tomoyo_realpath_from_path+0x18c/0x690 [ 284.314373][T12626] tomoyo_mount_acl+0x1b6/0x8b0 [ 284.314386][T12626] ? is_bpf_text_address+0x8a/0x1a0 [ 284.314403][T12626] ? is_bpf_text_address+0x8a/0x1a0 [ 284.314423][T12626] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 284.314450][T12626] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 284.314463][T12626] ? kernel_text_address+0x8d/0x100 [ 284.314481][T12626] ? unwind_get_return_address+0x59/0xa0 [ 284.314497][T12626] ? arch_stack_walk+0xa6/0xf0 [ 284.314521][T12626] ? __lock_acquire+0x5c0/0x1f40 [ 284.314550][T12626] ? tomoyo_mount_permission+0x1f6/0x460 [ 284.314568][T12626] ? tomoyo_domain+0xb2/0x150 [ 284.314589][T12626] ? tomoyo_profile+0x47/0x60 [ 284.314614][T12626] tomoyo_mount_permission+0x214/0x460 [ 284.314632][T12626] ? tomoyo_mount_permission+0x1f6/0x460 [ 284.314653][T12626] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 284.314687][T12626] security_sb_mount+0xdd/0x270 [ 284.314714][T12626] path_mount+0x158/0x2850 [ 284.314743][T12626] ? __pfx_path_mount+0x10/0x10 [ 284.314767][T12626] ? lockdep_hardirqs_on+0x7d/0x110 [ 284.314793][T12626] ? putname+0xb1/0x110 [ 284.314816][T12626] ? kmem_cache_free+0x127/0x6c0 [ 284.314849][T12626] ? __x64_sys_mount+0x293/0x310 [ 284.314872][T12626] __x64_sys_mount+0x293/0x310 [ 284.314900][T12626] ? __pfx___x64_sys_mount+0x10/0x10 [ 284.314933][T12626] do_syscall_64+0x123/0x7b0 [ 284.314960][T12626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.314980][T12626] RIP: 0033:0x7fc050b9fb19 [ 284.314997][T12626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.315015][T12626] RSP: 002b:00007fc051a07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 284.315035][T12626] RAX: ffffffffffffffda RBX: 00007fc050e25fa0 RCX: 00007fc050b9fb19 [ 284.315067][T12626] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000200000000180 [ 284.315079][T12626] RBP: 00007fc051a07090 R08: 0000000000000000 R09: 0000000000000000 [ 284.315091][T12626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.315102][T12626] R13: 00007fc050e26038 R14: 00007fc050e25fa0 R15: 00007fff340ced28 [ 284.315130][T12626] [ 284.447326][T12626] ERROR: Out of memory at tomoyo_realpath_from_path. [ 284.631367][T12628] netlink: 'syz.9.1455': attribute type 1 has an invalid length. [ 284.631998][T12628] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1455'. [ 284.806551][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1457'. [ 284.806871][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1457'. [ 284.945167][T12635] netlink: 'syz.7.1459': attribute type 11 has an invalid length. [ 285.019561][T12635] XFS (mtdblock0): Invalid superblock magic number [ 285.266980][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1460'. [ 285.441564][T12652] nbd: couldn't find device at index 2097152 [ 285.835629][T10544] net_ratelimit: 6 callbacks suppressed [ 285.835649][T10544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.376990][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.466562][ T5889] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 286.485009][ T14] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.602064][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 286.602086][ T43] audit: type=1400 audit(1794216600.469:1735): avc: denied { create } for pid=12662 comm="syz.6.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 286.605401][ T5889] usb 12-1: Using ep0 maxpacket: 32 [ 286.607393][ T5889] usb 12-1: New USB device found: idVendor=0499, idProduct=1051, bcdDevice=0.40 [ 286.612738][ T5889] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 68, changing to 7 [ 286.616361][ T5889] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.616387][ T5889] usb 12-1: Product: р  [ 286.616401][ T5889] usb 12-1: Manufacturer: чКьЇЋяБІшВэ„Їю‚•рЁЇъˆБуН уЁЇфГžшДЅщЇЖз…х‡™щ˜Ию€‚щІЄЧЉюžЄыŒЃшšЇХŠяЗ’цƒКу‘ГщЌ‹рБ†ьЖ‰ы—‡я„ЛтИЄхЎДуЎБюІЊю„šчЋПц‘†ьКюЎŸш†Аъ”ГщА‘сЁДыЙ’э•Іъˆ—ч‚–хП”фŸшЁтЛŠч›‘ъ›Ѓя€ЖщŠЊуПЂъЁКшБ ю†ЕшЗ яЅЙуБИц€ˆыЇ—ы ІщК–ф“šьЕЃс­ŽрВŽсО…цЇ‡фЕ†э‘Ит­•я‚€юŸœыŠшЌфЂ™шŸЇьЖч™ГьŽ [ 286.616426][ T5889] usb 12-1: SerialNumber: шГуЊЏцБю€ЎшГœтН‡ш’Дф‰“с’Бц…БыЎЖхМ’фЇ–чЎŸю›ŠтœПюЁ—зЉ#щ ЖщЗ а—уБыƒф—‚ц”™хБˆъКПшЖЎшЙАт–Ѕэ“‰ъМЅьЂяЇКчЌ“ъʘс’ŒрГ ьЖКс•я ­яЉКцŒДф…Бы†™шЙЙуЙ‹эˆ€шІ˜щ€„уПыМЏчŽЌххЄ”я‹ƒя” рЕˆыДЊхО‹щƒ‘фЊИь šф‹ЏцЁІч’Гф—Њх‡†ф‹МуГЏчœВхЉЖс“œьБšюГЖч–“ьБ­рЋƒэ˜ДыЇЎюА­ъˆОуІЈшˆ‡с”Ес…ЄчЂƒрГ‹щ“рЛ“яАВ [ 286.694357][ T43] audit: type=1400 audit(1794216600.569:1736): avc: denied { read } for pid=12662 comm="syz.6.1468" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 286.694882][ T43] audit: type=1400 audit(1794216600.569:1737): avc: denied { open } for pid=12662 comm="syz.6.1468" path="/dev/cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 286.817904][ T6714] IPVS: starting estimator thread 0... [ 286.856044][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.856207][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.876742][ T14] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.892161][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.991317][ T5889] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.992316][ T5889] snd-usb-audio 12-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 287.036602][T12669] IPVS: using max 28 ests per chain, 67200 per kthread [ 287.043192][ T5889] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.060758][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.070525][ T5889] snd-usb-audio 12-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 287.077085][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.107900][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.134068][ T5889] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.185481][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.185740][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.185930][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.235143][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.245616][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.566749][ T5889] snd-usb-audio 12-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 287.568596][ T5889] usb 12-1: USB disconnect, device number 15 [ 287.714808][T12679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x5147 instead [ 287.714832][T12679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x4ce3 instead [ 287.714846][T12679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xcdeb instead [ 287.714860][T12679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x392f instead [ 287.714874][T12679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xdb9e instead [ 287.714887][T12679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xae02 instead [ 287.714901][T12679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xbbef instead [ 287.714914][T12679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x9b4b instead [ 287.714928][T12679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x7484 instead [ 287.714941][T12679] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xbe95 instead [ 287.714954][T12679] jffs2: Further such events for this erase block will not be printed [ 287.715068][T12679] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 287.715076][T12679] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 287.715440][ T8619] udevd[8619]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.783888][T12681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12681 comm=syz.9.1469 [ 287.789588][ T14] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.796511][T12681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=12681 comm=syz.9.1469 [ 287.917845][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.154760][ T14] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.256558][T12690] XFS (mtdblock0): Invalid superblock magic number [ 288.595718][T12703] CUSE: info not properly terminated [ 288.625706][T12703] hsr0: entered allmulticast mode [ 288.625728][T12703] hsr_slave_0: entered allmulticast mode [ 288.625744][T12703] hsr_slave_1: entered allmulticast mode [ 288.725141][ T43] audit: type=1400 audit(1794216602.609:1738): avc: denied { connect } for pid=12698 comm="syz.9.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 288.726435][ T43] audit: type=1400 audit(1794216602.609:1739): avc: denied { ioctl } for pid=12698 comm="syz.9.1473" path="socket:[64372]" dev="sockfs" ino=64372 ioctlcmd=0x801c581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 288.739210][T12670] rxe_eth0 speed is unknown, defaulting to 1000 [ 288.882265][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.116116][ T43] audit: type=1400 audit(1794216602.939:1740): avc: denied { read append } for pid=12708 comm="syz.7.1476" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 289.116173][ T43] audit: type=1400 audit(1794216602.939:1741): avc: denied { open } for pid=12708 comm="syz.7.1476" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 289.440630][ T5787] Bluetooth: hci2: command tx timeout [ 289.536166][T12710] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.536291][T12710] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.536388][T12710] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 289.655132][ T43] audit: type=1400 audit(1794216603.519:1742): avc: denied { write } for pid=12718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.781631][T12710] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 289.838379][ T14] bridge0: port 3(vlan2) entered disabled state [ 289.902240][T12710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.902324][T12710] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 289.908841][ T43] audit: type=1400 audit(1794216603.759:1743): avc: denied { write } for pid=12721 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.921489][T12710] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 289.995288][T12723] syz.6.1478 (12723): /proc/12722/oom_adj is deprecated, please use /proc/12722/oom_score_adj instead. [ 290.082715][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 290.083014][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 290.348694][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 290.348880][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 290.427953][ T14] team0: Port device gretap1 removed [ 290.445289][ T5889] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 290.534197][ T14] bond0 (unregistering): Released all slaves [ 290.539575][ T14] bond1 (unregistering): Released all slaves [ 290.551544][ T14] bond2 (unregistering): Released all slaves [ 290.604493][T12670] dummy0 speed is unknown, defaulting to 1000 [ 290.610940][ T5498] 8021q: adding VLAN 0 to HW filter on device eth22 [ 290.631471][ T5889] usb 14-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 290.636355][ T5889] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.636398][ T5889] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.641057][ T5889] keyspan 14-1:1.0: Keyspan 2 port adapter converter detected [ 290.641267][ T5889] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 81 [ 290.641334][ T5889] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 1 [ 290.738414][T12723] ceph: No mds server is up or the cluster is laggy [ 290.763376][ T5889] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 84 [ 290.763457][ T5889] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 2 [ 290.854212][ T5889] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 290.915087][ T43] audit: type=1400 audit(1794216604.739:1744): avc: denied { append } for pid=12726 comm="syz.9.1479" name="frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 290.931728][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 290.931906][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 290.970042][ C0] net_ratelimit: 7 callbacks suppressed [ 290.970067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.970255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.970422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.972182][ T5889] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 88 [ 290.972253][ T5889] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 6 [ 290.977822][ T5889] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 291.019488][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.060699][T12730] bonding: b is being created... [ 291.259516][T12734] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 291.602520][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.975408][ T5787] Bluetooth: hci2: command 0x040f tx timeout [ 291.975732][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 292.082596][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.220855][ T5787] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 292.372392][ T5858] usb 14-1: USB disconnect, device number 2 [ 292.416639][ T5498] 8021q: adding VLAN 0 to HW filter on device eth23 [ 292.431276][ T5858] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 292.459979][ T5858] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 292.461451][ T5858] keyspan 14-1:1.0: device disconnected [ 292.754233][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 292.754255][ T43] audit: type=1400 audit(1794216606.629:1747): avc: denied { write } for pid=12760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.774380][T12752] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 292.998258][T12752] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 293.010496][ T43] audit: type=1400 audit(1794216606.889:1748): avc: denied { write } for pid=12766 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.104850][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.165111][T12752] pci_bus 0000:01: busn_res: [bus 01] is released [ 293.529517][ T5498] 8021q: adding VLAN 0 to HW filter on device eth24 [ 293.594273][T12772] ip_tables: iptables: counters copy to user failed while replacing table [ 293.965612][T12780] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 293.965664][T12780] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 293.967276][T12780] vhci_hcd vhci_hcd.0: Device attached [ 294.056569][ T5799] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.056610][ T5799] Bluetooth: hci2: command 0x040f tx timeout [ 294.080951][T12670] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.081071][T12670] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.081169][T12670] bridge_slave_0: entered allmulticast mode [ 294.082673][T12670] bridge_slave_0: entered promiscuous mode [ 294.149208][T10546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.150518][T12670] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.150585][T12670] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.150706][T12670] bridge_slave_1: entered allmulticast mode [ 294.151822][T12670] bridge_slave_1: entered promiscuous mode [ 294.227498][ T7367] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 294.227685][ T5880] usb 11-1: new low-speed USB device number 19 using dummy_hcd [ 294.462775][T12670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.474626][T12670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.482557][ T5880] usb 11-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 294.483650][ T5880] usb 11-1: config 0 has no interfaces? [ 294.483735][ T5880] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.504076][ T5880] usb 11-1: config 0 descriptor?? [ 294.625522][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.705938][T12670] team0: Port device team_slave_0 added [ 294.731040][ T43] audit: type=1400 audit(1794216608.609:1749): avc: denied { write } for pid=12784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.761348][T12670] team0: Port device team_slave_1 added [ 294.881541][ T7367] usb 49-1: device descriptor read/64, error -851034406 [ 294.919876][ T5880] usb 11-1: USB disconnect, device number 19 [ 294.933370][T12781] vhci_hcd: connection closed [ 294.972015][ T13] vhci_hcd vhci_hcd.6: stop threads [ 294.972043][ T13] vhci_hcd vhci_hcd.6: release socket [ 294.972394][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 295.089321][ T7367] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 295.156493][ T43] audit: type=1400 audit(1794216609.039:1750): avc: denied { write } for pid=12794 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.186880][ T14] hsr_slave_0: left promiscuous mode [ 295.187829][ T14] hsr_slave_1: left promiscuous mode [ 295.188557][ T14] batman_adv: batadv0: Interface deactivated: dummy0 [ 295.188575][ T14] batman_adv: batadv0: Removing interface: dummy0 [ 295.236158][ T14] veth1_macvtap: left promiscuous mode [ 295.236201][ T14] veth0_macvtap: left promiscuous mode [ 295.236311][ T14] veth1_vlan: left promiscuous mode [ 295.236369][ T14] veth0_vlan: left promiscuous mode [ 295.827349][T12809] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 295.827373][T12809] block device autoloading is deprecated and will be removed. [ 296.138008][ T67] Bluetooth: hci2: command 0x040f tx timeout [ 296.138048][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 296.175068][T12670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.175086][T12670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.175107][T12670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.188225][T12670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.188241][T12670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.188262][T12670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.260046][T12797] team0: left allmulticast mode [ 296.260197][T12797] team_slave_0: left allmulticast mode [ 296.260215][T12797] team_slave_1: left allmulticast mode [ 296.260414][T12797] team0: left promiscuous mode [ 296.260426][T12797] team_slave_0: left promiscuous mode [ 296.260562][T12797] team_slave_1: left promiscuous mode [ 296.260840][T12797] bridge0: port 3(team0) entered disabled state [ 296.262151][ T7367] net_ratelimit: 8 callbacks suppressed [ 296.262165][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.438828][T12797] bridge_slave_0: left allmulticast mode [ 296.438857][T12797] bridge_slave_0: left promiscuous mode [ 296.439017][T12797] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.511542][T12797] bridge_slave_1: left allmulticast mode [ 296.511571][T12797] bridge_slave_1: left promiscuous mode [ 296.512011][T12797] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.594862][T12797] bond0: (slave bond_slave_0): Releasing backup interface [ 296.778188][T12797] bond0: (slave bond_slave_1): Releasing backup interface [ 296.933228][T12797] team0: Port device team_slave_0 removed [ 296.962574][T12797] team0: Port device team_slave_1 removed [ 296.995860][T12797] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 297.021335][T12799] team0: Mode changed to "loadbalance" [ 297.021810][T12800] vlan0: entered promiscuous mode [ 297.023376][T12802] tipc: Started in network mode [ 297.023398][T12802] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 297.023511][T12802] tipc: Enabled bearer , priority 0 [ 297.159219][ T5498] 8021q: adding VLAN 0 to HW filter on device eth25 [ 297.189483][T12806] veth2: entered promiscuous mode [ 297.189502][T12806] veth2: entered allmulticast mode [ 297.266380][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.312355][ T6716] tipc: Resetting bearer [ 297.412442][T12820] syzkaller0: entered promiscuous mode [ 297.412467][T12820] syzkaller0: entered allmulticast mode [ 297.578922][ T43] audit: type=1400 audit(1794216611.459:1751): avc: denied { relabelfrom } for pid=12817 comm="syz.7.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 297.578970][ T43] audit: type=1400 audit(1794216611.459:1752): avc: denied { relabelto } for pid=12817 comm="syz.7.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 297.731699][T12670] hsr_slave_0: entered promiscuous mode [ 297.733385][T12670] hsr_slave_1: entered promiscuous mode [ 297.736177][T12670] debugfs: 'hsr0' already exists in 'hsr' [ 297.736196][T12670] Cannot create hsr debugfs directory [ 298.097563][ T43] audit: type=1400 audit(1794216611.959:1753): avc: denied { bind } for pid=12837 comm="syz.6.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 298.103097][ T43] audit: type=1400 audit(1794216611.959:1754): avc: denied { listen } for pid=12837 comm="syz.6.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 298.234782][ T67] Bluetooth: hci2: command 0x040f tx timeout [ 298.332095][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.332304][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.332485][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.352521][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.471891][ T43] audit: type=1400 audit(1794216612.359:1755): avc: denied { write } for pid=12843 comm="syz.6.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 299.442038][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.815722][ T6705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.815942][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.507002][ T7367] net_ratelimit: 3 callbacks suppressed [ 301.507025][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.901469][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.901749][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.901956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.558077][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.605538][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.672801][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.585812][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.585992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.590483][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.695392][ T6386] tipc: Node number set to 11578026 [ 306.798765][ T7367] net_ratelimit: 7 callbacks suppressed [ 306.798788][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.302879][T12872] fuse: Unknown parameter 'gЯƒqлЕ0I00000000000000000000' [ 307.366276][T12872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.371256][T12872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.864614][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.110052][ T43] audit: type=1400 audit(1794216621.989:1756): avc: denied { write } for pid=12877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.438766][T12882] SELinux: security_context_str_to_sid (Eс…) failed with errno=-22 [ 308.441349][ T43] audit: type=1400 audit(1794216622.329:1757): avc: denied { write } for pid=12880 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.606697][T12882] SELinux: security_context_str_to_sid (Eс…) failed with errno=-22 [ 308.686777][T12889] xt_hl: Unknown Hop Limit match mode: 206 [ 308.741700][T12889] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12889 comm=syz.6.1503 [ 308.839437][ T43] audit: type=1400 audit(1794216622.719:1758): avc: denied { write } for pid=12891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.860225][T12899] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1506'. [ 308.958606][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.976861][ T43] audit: type=1400 audit(1794216622.859:1759): avc: denied { bind } for pid=12897 comm="syz.6.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 309.110065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.110318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.110536][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.141815][ T43] audit: type=1400 audit(1794216623.009:1760): avc: denied { write } for pid=12906 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.618884][ T43] audit: type=1400 audit(1794216623.509:1761): avc: denied { bind } for pid=12914 comm="syz.6.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 309.696983][T12916] FAULT_INJECTION: forcing a failure. [ 309.696983][T12916] name failslab, interval 1, probability 0, space 0, times 0 [ 309.697019][T12916] CPU: 0 UID: 0 PID: 12916 Comm: syz.6.1511 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.697048][T12916] Tainted: [L]=SOFTLOCKUP [ 309.697055][T12916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 309.697065][T12916] Call Trace: [ 309.697073][T12916] [ 309.697082][T12916] dump_stack_lvl+0x100/0x190 [ 309.697120][T12916] should_fail_ex.cold+0x5/0xa [ 309.697151][T12916] should_failslab+0xc2/0x120 [ 309.697175][T12916] kmem_cache_alloc_noprof+0x92/0x6a0 [ 309.697205][T12916] ? lock_acquire+0x1d1/0x380 [ 309.697238][T12916] ? sk_prot_alloc+0x60/0x2a0 [ 309.697294][T12916] sk_prot_alloc+0x60/0x2a0 [ 309.697326][T12916] sk_alloc+0x36/0xe80 [ 309.697352][T12916] unix_create1+0xa6/0x700 [ 309.697387][T12916] unix_stream_connect+0x524/0x1b60 [ 309.697419][T12916] ? do_raw_spin_lock+0x128/0x260 [ 309.697446][T12916] ? __pfx_unix_stream_connect+0x10/0x10 [ 309.697470][T12916] ? __local_bh_enable_ip+0xa5/0x120 [ 309.697494][T12916] ? selinux_netlbl_socket_connect+0x30/0x40 [ 309.697515][T12916] ? selinux_socket_connect+0x6b/0x80 [ 309.697540][T12916] __sys_connect_file+0x146/0x1a0 [ 309.697595][T12916] __sys_connect+0x141/0x170 [ 309.697617][T12916] ? __pfx___sys_connect+0x10/0x10 [ 309.697659][T12916] __x64_sys_connect+0x72/0xb0 [ 309.697677][T12916] ? lockdep_hardirqs_on+0x7d/0x110 [ 309.697699][T12916] do_syscall_64+0x123/0x7b0 [ 309.697724][T12916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.697743][T12916] RIP: 0033:0x7fc9f679fb19 [ 309.697761][T12916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.697779][T12916] RSP: 002b:00007fc9f75ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 309.697799][T12916] RAX: ffffffffffffffda RBX: 00007fc9f6a25fa0 RCX: 00007fc9f679fb19 [ 309.697812][T12916] RDX: 000000000000006e RSI: 0000200000000140 RDI: 0000000000000005 [ 309.697823][T12916] RBP: 00007fc9f6837b70 R08: 0000000000000000 R09: 0000000000000000 [ 309.697834][T12916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.697846][T12916] R13: 00007fc9f6a26038 R14: 00007fc9f6a25fa0 R15: 00007ffd2ae2eab8 [ 309.697874][T12916] [ 309.752637][ T43] audit: type=1400 audit(1794216623.629:1762): avc: denied { write } for pid=12913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.969321][ T43] audit: type=1400 audit(1794216623.849:1763): avc: denied { write } for pid=12923 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.975784][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.023639][T12670] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 310.032731][T12670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 310.053845][ T5903] usb 14-1: new low-speed USB device number 3 using dummy_hcd [ 310.057359][T12670] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 310.161111][T12670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 310.173450][T12670] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 310.205792][ T5903] usb 14-1: device descriptor read/64, error -71 [ 310.307525][T12670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 310.308521][T12670] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 310.360708][T12670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 310.400229][ T43] audit: type=1400 audit(1794216624.279:1764): avc: denied { write } for pid=12927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.469895][ T5903] usb 14-1: new low-speed USB device number 4 using dummy_hcd [ 310.618855][ T5903] usb 14-1: device descriptor read/64, error -71 [ 310.728067][ T5903] usb usb14-port1: attempt power cycle [ 310.729617][T12942] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 310.737050][T12945] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1515'. [ 310.791370][ T43] audit: type=1400 audit(1794216624.669:1765): avc: denied { write } for pid=12938 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.840836][T12670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.919118][T12670] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.949053][ T6716] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.949183][ T6716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.018122][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.019717][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.019802][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.118201][ T5903] usb 14-1: new low-speed USB device number 5 using dummy_hcd [ 311.138873][ T5903] usb 14-1: device descriptor read/8, error -71 [ 311.143579][T12953] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1517'. [ 311.252286][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1517'. [ 311.342142][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.408876][ T5903] usb 14-1: new low-speed USB device number 6 using dummy_hcd [ 311.443672][ T5903] usb 14-1: device descriptor read/8, error -71 [ 311.546278][ T5903] usb usb14-port1: unable to enumerate USB device [ 311.875339][ T11] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 312.026209][ T11] usb 12-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 312.027253][ T11] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 312.027287][ T11] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.068481][T10546] net_ratelimit: 3 callbacks suppressed [ 312.068500][T10546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.695432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.695606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.695820][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.707037][T12967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.707911][T12967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.789309][T12967] XFS (mtdblock0): Invalid superblock magic number [ 312.946816][T12670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.067673][ T11] qmi_wwan 12-1:1.0: probe with driver qmi_wwan failed with error -71 [ 313.072893][ T11] usb 12-1: USB disconnect, device number 16 [ 313.118241][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.150836][T12670] veth0_vlan: entered promiscuous mode [ 313.166136][T12670] veth1_vlan: entered promiscuous mode [ 313.277244][T12670] veth0_macvtap: entered promiscuous mode [ 313.281416][T12670] veth1_macvtap: entered promiscuous mode [ 313.394946][T12670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.422456][T12670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.479125][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 313.479145][ T43] audit: type=1400 audit(1794216627.359:1777): avc: denied { write } for pid=13012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.598876][ T5861] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.598962][ T5861] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.598993][ T5861] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.599023][ T5861] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.798722][ T43] audit: type=1400 audit(1794216627.679:1778): avc: denied { write } for pid=13017 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.846897][ T6695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.846921][ T6695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.020643][ T6707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.020667][ T6707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.093833][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1526'. [ 314.148084][T10544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.356059][T13031] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 314.356356][T13031] ip6t_rt: unknown flags 1F [ 314.524834][ T43] audit: type=1400 audit(1794216628.399:1779): avc: denied { write } for pid=13032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.781460][ T43] audit: type=1400 audit(1794216628.659:1780): avc: denied { module_load } for pid=13042 comm="syz.6.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 314.781504][T13043] Invalid ELF header type: 3 != 1 [ 314.785385][ T5787] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 314.798485][T13037] XFS (mtdblock0): Invalid superblock magic number [ 315.006932][T13052] loop6: detected capacity change from 0 to 1 [ 315.011127][T12875] udevd[12875]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 315.052922][ T43] audit: type=1400 audit(1794216628.909:1781): avc: denied { write } for pid=13051 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.053427][T13052] Dev loop6: unable to read RDB block 1 [ 315.053459][T13052] loop6: unable to read partition table [ 315.053645][T13052] loop6: partition table beyond EOD, truncated [ 315.053659][T13052] loop_reread_partitions: partition scan of loop6 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 315.072360][ C3] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20800800 phys_seg 0 prio class 2 [ 315.168047][T13055] overlayfs: missing 'lowerdir' [ 315.187376][T10544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.255909][T13063] netlink: 'syz.3.1530': attribute type 10 has an invalid length. [ 315.278713][T13063] team0: Port device dummy0 added [ 315.279297][T13058] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(15) [ 315.279319][T13058] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 315.279377][T13058] vhci_hcd vhci_hcd.0: Device attached [ 315.283672][T13063] netlink: 'syz.3.1530': attribute type 10 has an invalid length. [ 315.300119][T13064] netlink: 'syz.3.1530': attribute type 10 has an invalid length. [ 315.440325][T13053] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 315.440353][T13053] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 315.440420][T13053] vhci_hcd vhci_hcd.0: Device attached [ 315.442105][T13060] vhci_hcd: connection closed [ 315.449083][ T13] vhci_hcd vhci_hcd.7: stop threads [ 315.449118][ T13] vhci_hcd vhci_hcd.7: release socket [ 315.449158][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 315.455107][T13065] vhci_hcd: connection closed [ 315.464021][ T13] vhci_hcd vhci_hcd.7: stop threads [ 315.464040][ T13] vhci_hcd vhci_hcd.7: release socket [ 315.464084][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 315.478949][T13063] team0: Port device dummy0 removed [ 315.578997][T12875] udevd[12875]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 315.585986][T12875] udevd[12875]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 315.594031][T13072] xt_check_table_hooks: 23 callbacks suppressed [ 315.594053][T13072] x_tables: duplicate underflow at hook 1 [ 315.653891][ T43] audit: type=1400 audit(1794216629.519:1782): avc: denied { write } for pid=13070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.063147][ T43] audit: type=1400 audit(1794216629.929:1783): avc: denied { write } for pid=13077 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.069889][T13084] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 316.150077][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1534'. [ 316.230372][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.297917][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.445074][T13091] FAULT_INJECTION: forcing a failure. [ 316.445074][T13091] name failslab, interval 1, probability 0, space 0, times 0 [ 316.445106][T13091] CPU: 2 UID: 0 PID: 13091 Comm: syz.7.1535 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.445127][T13091] Tainted: [L]=SOFTLOCKUP [ 316.445134][T13091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 316.445144][T13091] Call Trace: [ 316.445151][T13091] [ 316.445159][T13091] dump_stack_lvl+0x100/0x190 [ 316.445220][T13091] should_fail_ex.cold+0x5/0xa [ 316.445247][T13091] should_failslab+0xc2/0x120 [ 316.445268][T13091] kmem_cache_alloc_noprof+0x92/0x6a0 [ 316.445294][T13091] ? __asan_memcpy+0x3c/0x60 [ 316.445319][T13091] ? __kernfs_new_node+0xd2/0xa10 [ 316.445341][T13091] __kernfs_new_node+0xd2/0xa10 [ 316.445362][T13091] ? __pfx___kernfs_new_node+0x10/0x10 [ 316.445382][T13091] ? lock_acquire+0x1d1/0x380 [ 316.445403][T13091] ? kernfs_root+0x23/0x2a0 [ 316.445425][T13091] ? find_held_lock+0x2b/0x80 [ 316.445442][T13091] ? kernfs_root+0xee/0x2a0 [ 316.445463][T13091] ? kernfs_root+0xee/0x2a0 [ 316.445492][T13091] kernfs_new_node+0x194/0x200 [ 316.445510][T13091] ? __pfx_kernfs_new_node+0x10/0x10 [ 316.445552][T13091] ? kernfs_create_link+0xe4/0x280 [ 316.445572][T13091] ? kernfs_create_link+0xe4/0x280 [ 316.445597][T13091] kernfs_create_link+0x100/0x280 [ 316.445622][T13091] sysfs_do_create_link_sd+0x90/0x140 [ 316.445647][T13091] sysfs_create_link+0x61/0xc0 [ 316.445670][T13091] device_add+0x675/0x1970 [ 316.445716][T13091] ? __pfx_device_add+0x10/0x10 [ 316.445738][T13091] ? lockdep_init_map_type+0x5c/0x250 [ 316.445763][T13091] ? __init_waitqueue_head+0xca/0x150 [ 316.445795][T13091] add_partition+0x59e/0xa60 [ 316.445818][T13091] bdev_add_partition+0xe1/0x150 [ 316.445838][T13091] blkpg_do_ioctl+0x3a4/0x430 [ 316.445859][T13091] ? __pfx_blkpg_do_ioctl+0x10/0x10 [ 316.445878][T13091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 316.445915][T13091] ? __might_fault+0xc5/0x140 [ 316.445935][T13091] ? __might_fault+0xc5/0x140 [ 316.445960][T13091] blkdev_ioctl+0x3e5/0x6f0 [ 316.445979][T13091] ? __pfx_blkdev_ioctl+0x10/0x10 [ 316.445997][T13091] ? selinux_file_ioctl+0x1e0/0x290 [ 316.446013][T13091] ? selinux_file_ioctl+0x1e7/0x290 [ 316.446031][T13091] ? __pfx_blkdev_ioctl+0x10/0x10 [ 316.446056][T13091] __x64_sys_ioctl+0x18e/0x210 [ 316.446075][T13091] do_syscall_64+0x123/0x7b0 [ 316.446097][T13091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.446114][T13091] RIP: 0033:0x7fc050b9fb19 [ 316.446129][T13091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.446160][T13091] RSP: 002b:00007fc051a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.446178][T13091] RAX: ffffffffffffffda RBX: 00007fc050e25fa0 RCX: 00007fc050b9fb19 [ 316.446191][T13091] RDX: 00002000000004c0 RSI: 0000000000001269 RDI: 0000000000000006 [ 316.446199][T13091] RBP: 00007fc050c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 316.446209][T13091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.446219][T13091] R13: 00007fc050e26038 R14: 00007fc050e25fa0 R15: 00007fff340ced28 [ 316.446244][T13091] [ 316.462533][ T43] audit: type=1400 audit(1794216630.289:1784): avc: denied { append } for pid=13089 comm="syz.7.1535" name="pmem0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.462587][ T43] audit: type=1400 audit(1794216630.289:1785): avc: denied { write } for pid=13087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.554264][T13091] FAULT_INJECTION: forcing a failure. [ 316.554264][T13091] name failslab, interval 1, probability 0, space 0, times 0 [ 316.554300][T13091] CPU: 0 UID: 0 PID: 13091 Comm: syz.7.1535 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.554326][T13091] Tainted: [L]=SOFTLOCKUP [ 316.554333][T13091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 316.554344][T13091] Call Trace: [ 316.554352][T13091] [ 316.554360][T13091] dump_stack_lvl+0x100/0x190 [ 316.554397][T13091] should_fail_ex.cold+0x5/0xa [ 316.554425][T13091] should_failslab+0xc2/0x120 [ 316.554448][T13091] kmem_cache_alloc_noprof+0x92/0x6a0 [ 316.554477][T13091] ? __kernfs_new_node+0xd2/0xa10 [ 316.554502][T13091] __kernfs_new_node+0xd2/0xa10 [ 316.554525][T13091] ? __pfx___kernfs_new_node+0x10/0x10 [ 316.554545][T13091] ? lock_acquire+0x1d1/0x380 [ 316.554569][T13091] ? kernfs_root+0x23/0x2a0 [ 316.554596][T13091] ? find_held_lock+0x2b/0x80 [ 316.554615][T13091] ? kernfs_root+0xee/0x2a0 [ 316.554638][T13091] ? kernfs_root+0xee/0x2a0 [ 316.554670][T13091] kernfs_new_node+0x194/0x200 [ 316.554693][T13091] ? __pfx_kernfs_new_node+0x10/0x10 [ 316.554713][T13091] ? kernfs_add_one+0x213/0xb40 [ 316.554738][T13091] __kernfs_create_file+0x53/0x350 [ 316.554766][T13091] sysfs_add_file_mode_ns+0x207/0x3c0 [ 316.554799][T13091] internal_create_group+0x593/0xfb0 [ 316.554834][T13091] ? __pfx_internal_create_group+0x10/0x10 [ 316.554864][T13091] ? kernfs_create_link+0x1f1/0x280 [ 316.554890][T13091] internal_create_groups+0x9d/0x150 [ 316.554919][T13091] device_add+0x77a/0x1970 [ 316.554948][T13091] ? __pfx_device_add+0x10/0x10 [ 316.554973][T13091] ? lockdep_init_map_type+0x5c/0x250 [ 316.554999][T13091] ? __init_waitqueue_head+0xca/0x150 [ 316.555029][T13091] add_partition+0x59e/0xa60 [ 316.555053][T13091] bdev_add_partition+0xe1/0x150 [ 316.555076][T13091] blkpg_do_ioctl+0x3a4/0x430 [ 316.555098][T13091] ? __pfx_blkpg_do_ioctl+0x10/0x10 [ 316.555117][T13091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 316.555159][T13091] ? __might_fault+0xc5/0x140 [ 316.555221][T13091] ? __might_fault+0xc5/0x140 [ 316.555254][T13091] blkdev_ioctl+0x3e5/0x6f0 [ 316.555277][T13091] ? __pfx_blkdev_ioctl+0x10/0x10 [ 316.555297][T13091] ? selinux_file_ioctl+0x1e0/0x290 [ 316.555317][T13091] ? selinux_file_ioctl+0x1e7/0x290 [ 316.555338][T13091] ? __pfx_blkdev_ioctl+0x10/0x10 [ 316.555362][T13091] __x64_sys_ioctl+0x18e/0x210 [ 316.555385][T13091] do_syscall_64+0x123/0x7b0 [ 316.555410][T13091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.555432][T13091] RIP: 0033:0x7fc050b9fb19 [ 316.555456][T13091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.555477][T13091] RSP: 002b:00007fc051a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.555501][T13091] RAX: ffffffffffffffda RBX: 00007fc050e25fa0 RCX: 00007fc050b9fb19 [ 316.555516][T13091] RDX: 00002000000004c0 RSI: 0000000000001269 RDI: 0000000000000006 [ 316.555531][T13091] RBP: 00007fc050c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 316.555542][T13091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.555557][T13091] R13: 00007fc050e26038 R14: 00007fc050e25fa0 R15: 00007fff340ced28 [ 316.555594][T13091] [ 316.564653][ T43] audit: type=1400 audit(1794216630.409:1786): avc: denied { mounton } for pid=13089 comm="syz.7.1535" path="/258/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 317.099051][ T6705] net_ratelimit: 4 callbacks suppressed [ 317.099076][ T6705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.099272][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.116381][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.116434][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.147549][T12875] udevd[12875]: inotify_add_watch(7, /dev/pmem0, 10) failed: No such file or directory [ 317.204247][T13110] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1537'. [ 317.283538][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.287060][T13112] FAULT_INJECTION: forcing a failure. [ 317.287060][T13112] name failslab, interval 1, probability 0, space 0, times 0 [ 317.287090][T13112] CPU: 0 UID: 0 PID: 13112 Comm: syz.6.1536 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.287112][T13112] Tainted: [L]=SOFTLOCKUP [ 317.287118][T13112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.287129][T13112] Call Trace: [ 317.287135][T13112] [ 317.287143][T13112] dump_stack_lvl+0x100/0x190 [ 317.287174][T13112] should_fail_ex.cold+0x5/0xa [ 317.287200][T13112] should_failslab+0xc2/0x120 [ 317.287219][T13112] __kmalloc_cache_noprof+0x91/0x6d0 [ 317.287241][T13112] ? nci_allocate_device+0x105/0x410 [ 317.287288][T13112] nci_allocate_device+0x105/0x410 [ 317.287326][T13112] ? __pfx_nci_allocate_device+0x10/0x10 [ 317.287353][T13112] virtual_ncidev_open+0x6f/0x220 [ 317.287386][T13112] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 317.287410][T13112] misc_open+0x26d/0x450 [ 317.287435][T13112] ? __pfx_misc_open+0x10/0x10 [ 317.287459][T13112] chrdev_open+0x234/0x6a0 [ 317.287480][T13112] ? __pfx_chrdev_open+0x10/0x10 [ 317.287500][T13112] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 317.287528][T13112] do_dentry_open+0x674/0x1470 [ 317.287549][T13112] ? __pfx_chrdev_open+0x10/0x10 [ 317.287571][T13112] vfs_open_consume+0xcc/0x460 [ 317.287594][T13112] path_openat+0x1547/0x23f0 [ 317.287617][T13112] ? __pfx_path_openat+0x10/0x10 [ 317.287644][T13112] do_file_open+0x20e/0x430 [ 317.287667][T13112] ? __pfx_do_file_open+0x10/0x10 [ 317.287704][T13112] ? _raw_spin_unlock+0x28/0x50 [ 317.287721][T13112] ? alloc_fd+0x471/0x7a0 [ 317.287748][T13112] do_sys_openat2+0x163/0x1d0 [ 317.287768][T13112] ? __pfx_do_sys_openat2+0x10/0x10 [ 317.287789][T13112] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 317.287814][T13112] __x64_sys_openat+0x12d/0x210 [ 317.287834][T13112] ? __pfx___x64_sys_openat+0x10/0x10 [ 317.287864][T13112] do_syscall_64+0x123/0x7b0 [ 317.287884][T13112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.287900][T13112] RIP: 0033:0x7fc9f679fb19 [ 317.287914][T13112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.287929][T13112] RSP: 002b:00007fc9f45d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 317.287945][T13112] RAX: ffffffffffffffda RBX: 00007fc9f6a26270 RCX: 00007fc9f679fb19 [ 317.287955][T13112] RDX: 0000000000000002 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 317.287964][T13112] RBP: 00007fc9f6837b70 R08: 0000000000000000 R09: 0000000000000000 [ 317.287974][T13112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.287983][T13112] R13: 00007fc9f6a26308 R14: 00007fc9f6a26270 R15: 00007ffd2ae2eab8 [ 317.288005][T13112] [ 317.350952][T13108] bridge_slave_1: left allmulticast mode [ 317.351008][T13108] bridge_slave_1: left promiscuous mode [ 317.351255][T13108] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.389897][T13108] џџџџ: left allmulticast mode [ 317.389928][T13108] џџџџ: left promiscuous mode [ 317.390121][T13108] bridge0: port 1(џџџџ) entered disabled state [ 317.902512][T13125] lo: Caught tx_queue_len zero misconfig [ 317.933166][T13131] dns_resolver: Unsupported content type (128) [ 318.018220][T13135] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1541'. [ 318.059627][T13137] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1541'. [ 318.326119][T13131] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1544'. [ 318.338163][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.516702][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 318.516721][ T43] audit: type=1400 audit(1794216632.399:1790): avc: denied { write } for pid=13153 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.802538][ T43] audit: type=1400 audit(1794216632.659:1791): avc: denied { connect } for pid=13160 comm="syz.9.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.834919][ T43] audit: type=1400 audit(1794216632.699:1792): avc: denied { write } for pid=13160 comm="syz.9.1548" path="socket:[67151]" dev="sockfs" ino=67151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.987428][ T43] audit: type=1400 audit(1794216632.869:1793): avc: denied { read } for pid=13160 comm="syz.9.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.298664][ T43] audit: type=1400 audit(1794216633.159:1794): avc: denied { accept } for pid=13177 comm="syz.7.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 319.323564][T13182] ata1.00: invalid cdb length 6 [ 319.335920][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.663157][T13198] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1553'. [ 319.835859][ T5903] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 319.877662][T13206] 9p: Bad value for 'version' [ 319.878173][T13208] udevd[13208]: open /dev/null failed: No such file or directory [ 319.895580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.895822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.896019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.912690][T13204] FAULT_INJECTION: forcing a failure. [ 319.912690][T13204] name failslab, interval 1, probability 0, space 0, times 0 [ 319.912724][T13204] CPU: 2 UID: 0 PID: 13204 Comm: syz.7.1556 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.912754][T13204] Tainted: [L]=SOFTLOCKUP [ 319.912763][T13204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.912777][T13204] Call Trace: [ 319.912785][T13204] [ 319.912796][T13204] dump_stack_lvl+0x100/0x190 [ 319.912833][T13204] should_fail_ex.cold+0x5/0xa [ 319.912869][T13204] should_failslab+0xc2/0x120 [ 319.912894][T13204] __kmalloc_noprof+0xfc/0x840 [ 319.912923][T13204] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 319.912953][T13204] ? __alloc_workqueue+0x8a/0x1900 [ 319.912984][T13204] __alloc_workqueue+0x8a/0x1900 [ 319.913010][T13204] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 319.913032][T13204] ? __kmalloc_node_noprof+0x360/0x870 [ 319.913058][T13204] alloc_workqueue_noprof+0xc7/0x130 [ 319.913082][T13204] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 319.913110][T13204] ? __pfx_mempool_alloc_pages+0x10/0x10 [ 319.913126][T13204] ? __pfx_mempool_free_pages+0x10/0x10 [ 319.913148][T13204] dm_integrity_ctr+0x1503/0x64b0 [ 319.913214][T13204] ? __pfx_dm_integrity_ctr+0x10/0x10 [ 319.913237][T13204] ? dm_split_args+0xc1/0x570 [ 319.913266][T13204] ? rcu_is_watching+0x13/0xc0 [ 319.913286][T13204] ? dm_split_args+0xc1/0x570 [ 319.913306][T13204] ? skip_spaces+0xee/0x130 [ 319.913334][T13204] dm_table_add_target+0x58b/0xee0 [ 319.913358][T13204] ? __pfx_dm_table_add_target+0x10/0x10 [ 319.913384][T13204] ? dm_table_create+0x2d3/0x3d0 [ 319.913411][T13204] table_load+0x3b9/0x7b0 [ 319.913436][T13204] ? __pfx_table_load+0x10/0x10 [ 319.913454][T13204] ? __might_fault+0xc5/0x140 [ 319.913477][T13204] ? __might_fault+0xc5/0x140 [ 319.913542][T13204] ctl_ioctl+0x4d2/0xcc0 [ 319.913579][T13204] ? __pfx_table_load+0x10/0x10 [ 319.913601][T13204] ? __pfx_ctl_ioctl+0x10/0x10 [ 319.913660][T13204] ? selinux_file_ioctl+0x1e0/0x290 [ 319.913686][T13204] dm_ctl_ioctl+0x22/0x30 [ 319.913712][T13204] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 319.913739][T13204] __x64_sys_ioctl+0x18e/0x210 [ 319.913779][T13204] do_syscall_64+0x123/0x7b0 [ 319.913806][T13204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.913828][T13204] RIP: 0033:0x7fc050b9fb19 [ 319.913847][T13204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.913865][T13204] RSP: 002b:00007fc051a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.913883][T13204] RAX: ffffffffffffffda RBX: 00007fc050e25fa0 RCX: 00007fc050b9fb19 [ 319.913893][T13204] RDX: 0000200000000880 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 319.913904][T13204] RBP: 00007fc050c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 319.913914][T13204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.913922][T13204] R13: 00007fc050e26038 R14: 00007fc050e25fa0 R15: 00007fff340ced28 [ 319.913942][T13204] [ 319.923665][T13204] device-mapper: table: 248:18: integrity: Cannot allocate workqueue (-ENOMEM) [ 319.923696][T13204] device-mapper: ioctl: error adding target to table [ 320.009431][ T5903] usb 14-1: Using ep0 maxpacket: 8 [ 320.010373][ T5903] usb 14-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 320.028575][ T5903] usb 14-1: config 179 has an invalid interface number: 65 but max is 0 [ 320.028603][ T5903] usb 14-1: config 179 has no interface number 0 [ 320.028636][ T5903] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 320.028658][ T5903] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 320.028681][ T5903] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 320.028700][ T5903] usb 14-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 320.028734][ T5903] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.069791][T13193] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 320.183874][T13216] udevd[13216]: open /dev/null failed: No such file or directory [ 320.259726][T13204] XFS (mtdblock0): Invalid superblock magic number [ 320.382649][T10546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.391270][ T5787] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 320.391299][ T5787] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 320.517263][ T11] usb 14-1: USB disconnect, device number 7 [ 320.592597][T12875] udevd[12875]: inotify_add_watch(7, /dev/sda, 10) failed: No such file or directory [ 320.733714][T12875] udevd[12875]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory [ 321.003379][ T43] audit: type=1400 audit(1794216634.889:1795): avc: denied { bind } for pid=13237 comm="syz.3.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 321.220048][T13248] netlink: 'syz.9.1564': attribute type 1 has an invalid length. [ 321.260460][T13241] IPVS: set_ctl: invalid protocol: 12078 108.101.48.0:0 [ 321.351847][ T43] audit: type=1400 audit(1794216635.229:1796): avc: denied { write } for pid=13244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.425918][T13249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 321.427311][T10544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.542152][T13249] bond1: (slave bond2): making interface the new active one [ 321.584613][T13249] bond1: (slave bond2): Enslaving as an active interface with an up link [ 321.638037][ T43] audit: type=1326 audit(1794216635.499:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13263 comm="syz.6.1565" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9f679fb19 code=0x0 [ 321.822494][ T43] audit: type=1400 audit(1794216635.689:1798): avc: denied { write } for pid=13267 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.139152][ T6714] net_ratelimit: 2 callbacks suppressed [ 322.139175][ T6714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.139356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.459224][T10544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.619949][ T43] audit: type=1400 audit(1794216636.499:1799): avc: denied { write } for pid=13283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.803516][T13289] No source specified [ 323.335521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.335729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.335896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.497239][T10544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.556334][T13308] netlink: 3364 bytes leftover after parsing attributes in process `syz.6.1574'. [ 323.557964][T13314] netlink: 3364 bytes leftover after parsing attributes in process `syz.6.1574'. [ 323.559575][T13313] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1575'. [ 323.751234][T13309] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.751956][T13309] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.752959][T13309] bridge0: entered allmulticast mode [ 323.764010][T13315] bridge_slave_1: left allmulticast mode [ 323.764113][T13315] bridge_slave_1: left promiscuous mode [ 323.764414][T13315] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.789829][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 323.789852][ T43] audit: type=1400 audit(1794216637.659:1801): avc: denied { write } for pid=13282 comm="syz.7.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 324.015348][T13315] bridge_slave_0: left allmulticast mode [ 324.015385][T13315] bridge_slave_0: left promiscuous mode [ 324.015614][T13315] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.567845][T10546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.625074][ T43] audit: type=1400 audit(1794216638.499:1802): avc: denied { read } for pid=13320 comm="syz.6.1576" name="mouse0" dev="devtmpfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 324.625818][ T43] audit: type=1400 audit(1794216638.509:1803): avc: denied { open } for pid=13320 comm="syz.6.1576" path="/dev/input/mouse0" dev="devtmpfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 324.634542][T12875] udevd[12875]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 324.644140][T12875] udevd[12875]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 324.724660][ T43] audit: type=1400 audit(1794216638.609:1804): avc: denied { write } for pid=13323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.190536][T13321] can: request_module (can-proto-0) failed. [ 325.385541][ T43] audit: type=1400 audit(1794216639.269:1805): avc: denied { write } for pid=13337 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.435453][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.435648][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.448322][ T5858] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 325.627012][ T5858] usb 14-1: Using ep0 maxpacket: 8 [ 325.628473][ T5858] usb 14-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 325.630006][ T5858] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 325.630043][ T5858] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.630057][ T5858] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.630074][ T5858] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 325.630092][ T5858] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.630120][ T5858] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.821673][ T43] audit: type=1400 audit(1794216639.699:1806): avc: denied { write } for pid=13342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.870858][ T5858] usb 14-1: GET_CAPABILITIES returned 0 [ 325.870900][ T5858] usbtmc 14-1:16.0: can't read capabilities [ 326.202510][ T43] audit: type=1400 audit(1794216640.079:1807): avc: denied { write } for pid=13354 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.251562][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1584'. [ 326.729848][ T43] audit: type=1400 audit(1794216640.599:1808): avc: denied { ioctl } for pid=13367 comm="syz.3.1587" path="/15/nfsd/portlist" dev="nfsd" ino=13 ioctlcmd=0xc0207506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 326.820511][T13368] svc: failed to register nfsdv3 RPC service (errno 97). [ 326.820536][T13368] svc: failed to register nfsaclv3 RPC service (errno 97). [ 326.928710][T13372] netlink: 778 bytes leftover after parsing attributes in process `syz.6.1588'. [ 327.196761][T13376] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1590'. [ 327.214515][T13376] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1590'. [ 327.228535][T13380] netlink: 'syz.7.1590': attribute type 4 has an invalid length. [ 327.229774][T13376] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1590'. [ 327.232660][T13376] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1590'. [ 327.235447][T13383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13383 comm=syz.3.1589 [ 327.236842][T13376] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1590'. [ 327.291509][T13376] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1590'. [ 327.292182][T13376] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1590'. [ 327.292852][T13376] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1590'. [ 327.337534][ T1165] net_ratelimit: 5 callbacks suppressed [ 327.337556][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.337823][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.678006][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.979108][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.979286][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.145422][ T5903] usb 14-1: USB disconnect, device number 8 [ 328.703397][ T43] audit: type=1400 audit(1794216642.589:1809): avc: denied { setopt } for pid=13392 comm="syz.9.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 328.723457][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.818138][ T43] audit: type=1400 audit(1794216642.679:1810): avc: denied { setopt } for pid=13392 comm="syz.9.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 329.027535][T13401] XFS (mtdblock0): Invalid superblock magic number [ 329.672328][ T43] audit: type=1326 audit(1794216643.549:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.7.1592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc050b9fb19 code=0x7fc00000 [ 329.672413][ T43] audit: type=1326 audit(1794216643.549:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.7.1592" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc050b9fb19 code=0x7fc00000 [ 329.673136][ T43] audit: type=1326 audit(1794216643.549:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.7.1592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc050b9fb19 code=0x7fc00000 [ 329.673163][ T43] audit: type=1326 audit(1794216643.549:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.7.1592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc050b9fb19 code=0x7fc00000 [ 329.673187][ T43] audit: type=1326 audit(1794216643.549:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.7.1592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc050b9fb19 code=0x7fc00000 [ 329.673217][ T43] audit: type=1326 audit(1794216643.549:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.7.1592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc050b9fb19 code=0x7fc00000 [ 329.673249][ T43] audit: type=1326 audit(1794216643.549:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.7.1592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc050b9fb19 code=0x7fc00000 [ 329.673280][ T43] audit: type=1326 audit(1794216643.549:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.7.1592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc050b9fb19 code=0x7fc00000 [ 329.673314][ T43] audit: type=1326 audit(1794216643.549:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.7.1592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc050b9fb19 code=0x7fc00000 [ 329.788804][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.954643][T13428] XFS (mtdblock0): Invalid superblock magic number [ 330.407597][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.407807][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.407988][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.768164][T13460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62232 sclass=netlink_route_socket pid=13460 comm=syz.9.1604 [ 330.791938][T13459] XFS (mtdblock0): Invalid superblock magic number [ 331.347061][T13482] __nla_validate_parse: 22 callbacks suppressed [ 331.347081][T13482] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1607'. [ 331.660460][T13494] XFS (md7): SB validate failed with error -5. [ 332.057278][T13512] input: syz1 as /devices/virtual/input/input22 [ 332.912736][ T855] net_ratelimit: 2 callbacks suppressed [ 332.912760][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.115796][ T6695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.115958][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.295803][T13528] No control pipe specified [ 333.358063][T13529] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1617'. [ 333.786396][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.786585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.987887][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.145703][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.145921][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.146305][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.224642][T13544] device-mapper: table: 248:19: thin: Error opening origin device (-ENOENT) [ 334.224667][T13544] device-mapper: ioctl: error adding target to table [ 334.314058][T13550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1625'. [ 334.314081][T13550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1625'. [ 334.314093][T13550] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 334.548710][T13553] netlink: 'syz.7.1626': attribute type 1 has an invalid length. [ 334.550016][T13551] netlink: 'syz.7.1626': attribute type 1 has an invalid length. [ 334.804465][T13562] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1628'. [ 335.029860][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.209846][T13569] ip6erspan0: entered allmulticast mode [ 335.338118][T13573] XFS (mtdblock0): Invalid superblock magic number [ 336.173845][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 336.173868][ T43] audit: type=1400 audit(1794216650.049:1834): avc: denied { ioctl } for pid=13594 comm="syz.7.1633" path="socket:[71710]" dev="sockfs" ino=71710 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 336.844033][ T43] audit: type=1400 audit(1794216650.719:1835): avc: denied { mount } for pid=13616 comm="syz.6.1640" name="/" dev="ramfs" ino=70760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 337.074529][ T43] audit: type=1400 audit(1794216650.949:1836): avc: denied { connect } for pid=13620 comm="syz.3.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 337.187747][T13621] hub 5-0:1.0: USB hub found [ 337.192391][T13621] hub 5-0:1.0: 1 port detected [ 337.422935][T13611] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1638'. [ 337.603348][ T5903] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 337.781371][ T43] audit: type=1400 audit(1794216651.659:1837): avc: denied { bind } for pid=13637 comm="syz.3.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 337.799219][ T5903] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04 [ 337.799844][ T5903] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.799868][ T5903] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 337.799894][ T5903] usb 5-1: Dual-Role OTG device on HNP port [ 337.800164][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.833362][ C3] ------------[ cut here ]------------ [ 337.833377][ C3] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 337.833391][ C3] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#3: udevd/5195 [ 337.867025][ C3] Modules linked in: [ 337.871023][ C3] CPU: 3 UID: 0 PID: 5195 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 337.876009][ C3] Tainted: [L]=SOFTLOCKUP [ 337.877793][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.918107][ C3] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 337.920511][ C3] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d ea 19 84 0a 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 e0 b7 fb 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 80 aa fb 8c [ 337.929180][ C3] RSP: 0018:ffffc90000708a10 EFLAGS: 00010046 [ 337.947810][ C3] RAX: dffffc0000000000 RBX: ffff888027d740e0 RCX: ffffffff8cfbeee0 [ 337.951864][ C3] RDX: 0000000000000081 RSI: ffffffff8cfbb7e0 RDI: ffffffff927831d0 [ 337.955825][ C3] RBP: 0000000000000081 R08: ffffffff8cfbaac0 R09: 0000000000000000 [ 337.959323][ C3] R10: ffffffff926ad35f R11: 0000000000000003 R12: ffffffff8cfbaac0 [ 337.962997][ C3] R13: 0000000000000000 R14: ffff888027d740e0 R15: ffff8880288d8aa0 [ 337.967454][ C3] FS: 00007f2c43dce880(0000) GS:ffff8880d4771000(0000) knlGS:0000000000000000 [ 337.975268][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.979711][ C3] CR2: 000000110c355a13 CR3: 000000003921c000 CR4: 0000000000352ef0 [ 337.984535][ C3] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 337.989384][ C3] DR3: 0000000000000034 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 337.994287][ C3] Call Trace: [ 337.996304][ C3] [ 337.998074][ C3] hidg_set_alt+0x190/0xa10 [ 338.000942][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 338.004850][ C3] ? rcu_is_watching+0x13/0xc0 [ 338.008201][ C3] composite_setup+0x2ccf/0x9290 [ 338.010757][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 338.013829][ C3] ? __pfx_composite_setup+0x10/0x10 [ 338.017108][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.020463][ C3] ? do_raw_spin_lock+0x128/0x260 [ 338.023667][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.027420][ C3] ? configfs_composite_setup+0xfb/0x130 [ 338.030945][ C3] configfs_composite_setup+0xfb/0x130 [ 338.034344][ C3] dummy_timer+0x20a0/0x3840 [ 338.038353][ C3] ? do_raw_spin_lock+0x128/0x260 [ 338.041440][ C3] ? find_held_lock+0x2b/0x80 [ 338.045496][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 338.048633][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 338.052169][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.055679][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 338.059016][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 338.064267][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 338.066839][ C3] ? rcu_is_watching+0x13/0xc0 [ 338.068651][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 338.070866][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 338.072736][ C3] __hrtimer_run_queues+0x448/0x9a0 [ 338.074814][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 338.076895][ C3] handle_softirqs+0x216/0xa20 [ 338.078940][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 338.080937][ C3] ? _raw_spin_unlock+0x28/0x50 [ 338.083771][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 338.087350][ C3] __irq_exit_rcu+0x178/0x220 [ 338.089849][ C3] irq_exit_rcu+0x9/0x30 [ 338.092180][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 338.095906][ C3] [ 338.097514][ C3] [ 338.098752][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.100835][ C3] RIP: 0010:lock_acquire+0x5e/0x380 [ 338.102519][ C3] Code: 05 cf 89 d1 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 de 6c 81 10 0f 82 c9 02 00 00 8b 35 be 9c 81 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 6d 89 d1 13 0f 85 09 03 00 00 48 83 c4 [ 338.110727][ C3] RSP: 0018:ffffc90005e1f460 EFLAGS: 00000206 [ 338.114104][ C3] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 338.135489][ T25] net_ratelimit: 120 callbacks suppressed [ 338.135547][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.142158][ C3] RDX: 0000000000000000 RSI: ffffffff8e6029e8 RDI: ffffffff8c835a80 [ 338.146516][ C3] RBP: ffffffff8ffed020 R08: 00000000ef9d33e4 R09: 0000000000000007 [ 338.150214][ C3] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 338.153178][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.158039][ C3] ? unwind_next_frame+0x3c8/0x2090 [ 338.160894][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 338.164768][ C3] unwind_next_frame+0xd1/0x2090 [ 338.167161][ C3] ? unwind_next_frame+0xbd/0x2090 [ 338.169407][ C3] ? stack_trace_save+0x8e/0xc0 [ 338.171941][ C3] ? __unwind_start+0x3cd/0x7e0 [ 338.174767][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 338.178679][ C3] arch_stack_walk+0x94/0xf0 [ 338.181333][ C3] ? stack_trace_save+0x8e/0xc0 [ 338.184613][ C3] ? skb_free_head+0xb9/0x160 [ 338.187324][ C3] stack_trace_save+0x8e/0xc0 [ 338.189887][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 338.191993][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 338.194021][ C3] kasan_save_stack+0x30/0x50 [ 338.195834][ C3] kasan_save_track+0x14/0x30 [ 338.197623][ C3] kasan_save_free_info+0x3b/0x70 [ 338.199611][ C3] __kasan_slab_free+0x5f/0x80 [ 338.201633][ C3] ? skb_free_head+0x30/0x160 [ 338.203924][ C3] kfree+0x22b/0x6d0 [ 338.205990][ C3] ? simple_copy_to_iter+0x4e/0x90 [ 338.209178][ C3] skb_free_head+0xb9/0x160 [ 338.211973][ C3] skb_release_data+0x698/0x860 [ 338.214667][ C3] consume_skb+0xc4/0x110 [ 338.217500][ C3] netlink_recvmsg+0x636/0xb60 [ 338.220740][ C3] ? __pfx_netlink_recvmsg+0x10/0x10 [ 338.223955][ C3] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 338.229029][ C3] ? __pfx_netlink_recvmsg+0x10/0x10 [ 338.233642][ C3] sock_recvmsg+0x1d5/0x220 [ 338.235684][ C3] ____sys_recvmsg+0x21e/0x6a0 [ 338.238770][ C3] ? __pfx_____sys_recvmsg+0x10/0x10 [ 338.241960][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 338.245223][ C3] ___sys_recvmsg+0x16a/0x1a0 [ 338.247819][ C3] ? __pfx____sys_recvmsg+0x10/0x10 [ 338.250658][ C3] ? __pfx_ep_autoremove_wake_function+0x10/0x10 [ 338.254444][ C3] ? ktime_get_ts64+0x306/0x420 [ 338.257766][ C3] __x64_sys_recvmsg+0x19a/0x260 [ 338.261181][ C3] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 338.264532][ C3] do_syscall_64+0x123/0x7b0 [ 338.267367][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.271012][ C3] RIP: 0033:0x7f2c436a7407 [ 338.273734][ C3] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 338.305938][ C3] RSP: 002b:00007ffdd5cf6720 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 338.309972][ C3] RAX: ffffffffffffffda RBX: 00007f2c43dce880 RCX: 00007f2c436a7407 [ 338.313693][ C3] RDX: 0000000000000000 RSI: 00007ffdd5cf67b0 RDI: 0000000000000004 [ 338.317081][ C3] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 338.328566][ C3] R10: 0000000000000000 R11: 0000000000000202 R12: 0000564ca5fedd80 [ 338.332003][ C3] R13: 00007ffdd5cf6870 R14: 00007ffdd5cf67bc R15: 0000000000000000 [ 338.339918][ C3] [ 338.341286][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 338.344444][ C3] CPU: 3 UID: 0 PID: 5195 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 338.382656][ C3] Tainted: [L]=SOFTLOCKUP [ 338.384538][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.389117][ C3] Call Trace: [ 338.391504][ C3] [ 338.394585][ C3] dump_stack_lvl+0x100/0x190 [ 338.396819][ C3] vpanic+0x2dc/0x6f8 [ 338.398886][ C3] panic+0xd1/0xe0 [ 338.400787][ C3] ? __pfx_panic+0x10/0x10 [ 338.402739][ C3] check_panic_on_warn.cold+0x19/0x34 [ 338.405057][ C3] ? usb_ep_enable+0x3e6/0x490 [ 338.408352][ C3] __warn.cold+0x191/0x321 [ 338.410340][ C3] __report_bug+0x30f/0x440 [ 338.412897][ C3] ? usb_ep_enable+0x3e6/0x490 [ 338.415305][ C3] ? __pfx___report_bug+0x10/0x10 [ 338.417647][ C3] ? try_to_wake_up+0x158/0x1980 [ 338.419772][ C3] report_bug_entry+0xe2/0x290 [ 338.421800][ C3] ? usb_ep_enable+0x3f8/0x490 [ 338.423936][ C3] handle_bug+0x1cd/0x2a0 [ 338.425855][ C3] exc_invalid_op+0x17/0x50 [ 338.427811][ C3] asm_exc_invalid_op+0x1a/0x20 [ 338.429909][ C3] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 338.432555][ C3] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d ea 19 84 0a 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 e0 b7 fb 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 80 aa fb 8c [ 338.444614][ C3] RSP: 0018:ffffc90000708a10 EFLAGS: 00010046 [ 338.448646][ C3] RAX: dffffc0000000000 RBX: ffff888027d740e0 RCX: ffffffff8cfbeee0 [ 338.454634][ C3] RDX: 0000000000000081 RSI: ffffffff8cfbb7e0 RDI: ffffffff927831d0 [ 338.459768][ C3] RBP: 0000000000000081 R08: ffffffff8cfbaac0 R09: 0000000000000000 [ 338.464552][ C3] R10: ffffffff926ad35f R11: 0000000000000003 R12: ffffffff8cfbaac0 [ 338.469880][ C3] R13: 0000000000000000 R14: ffff888027d740e0 R15: ffff8880288d8aa0 [ 338.475067][ C3] hidg_set_alt+0x190/0xa10 [ 338.479415][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 338.483265][ C3] ? rcu_is_watching+0x13/0xc0 [ 338.486714][ C3] composite_setup+0x2ccf/0x9290 [ 338.490187][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 338.493454][ C3] ? __pfx_composite_setup+0x10/0x10 [ 338.496704][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.499920][ C3] ? do_raw_spin_lock+0x128/0x260 [ 338.503322][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.507903][ C3] ? configfs_composite_setup+0xfb/0x130 [ 338.512708][ C3] configfs_composite_setup+0xfb/0x130 [ 338.517316][ C3] dummy_timer+0x20a0/0x3840 [ 338.520432][ C3] ? do_raw_spin_lock+0x128/0x260 [ 338.527869][ C3] ? find_held_lock+0x2b/0x80 [ 338.531035][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 338.534560][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 338.538452][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.543442][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 338.549428][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 338.555415][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 338.558835][ C3] ? rcu_is_watching+0x13/0xc0 [ 338.561888][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 338.565559][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 338.569253][ C3] __hrtimer_run_queues+0x448/0x9a0 [ 338.573242][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 338.577830][ C3] handle_softirqs+0x216/0xa20 [ 338.582395][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 338.585905][ C3] ? _raw_spin_unlock+0x28/0x50 [ 338.589302][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 338.592849][ C3] __irq_exit_rcu+0x178/0x220 [ 338.595770][ C3] irq_exit_rcu+0x9/0x30 [ 338.598840][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 338.603047][ C3] [ 338.605025][ C3] [ 338.607060][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.611176][ C3] RIP: 0010:lock_acquire+0x5e/0x380 [ 338.614311][ C3] Code: 05 cf 89 d1 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 de 6c 81 10 0f 82 c9 02 00 00 8b 35 be 9c 81 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 6d 89 d1 13 0f 85 09 03 00 00 48 83 c4 [ 338.635660][ C3] RSP: 0018:ffffc90005e1f460 EFLAGS: 00000206 [ 338.639717][ C3] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 338.644463][ C3] RDX: 0000000000000000 RSI: ffffffff8e6029e8 RDI: ffffffff8c835a80 [ 338.649437][ C3] RBP: ffffffff8ffed020 R08: 00000000ef9d33e4 R09: 0000000000000007 [ 338.654537][ C3] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 338.662158][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.671717][ C3] ? unwind_next_frame+0x3c8/0x2090 [ 338.677929][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 338.681020][ C3] unwind_next_frame+0xd1/0x2090 [ 338.686143][ C3] ? unwind_next_frame+0xbd/0x2090 [ 338.692417][ C3] ? stack_trace_save+0x8e/0xc0 [ 338.697475][ C3] ? __unwind_start+0x3cd/0x7e0 [ 338.700343][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 338.704074][ C3] arch_stack_walk+0x94/0xf0 [ 338.706917][ C3] ? stack_trace_save+0x8e/0xc0 [ 338.710147][ C3] ? skb_free_head+0xb9/0x160 [ 338.713333][ C3] stack_trace_save+0x8e/0xc0 [ 338.716563][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 338.720041][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 338.723112][ C3] kasan_save_stack+0x30/0x50 [ 338.726097][ C3] kasan_save_track+0x14/0x30 [ 338.729096][ C3] kasan_save_free_info+0x3b/0x70 [ 338.734432][ C3] __kasan_slab_free+0x5f/0x80 [ 338.738404][ C3] ? skb_free_head+0x30/0x160 [ 338.741436][ C3] kfree+0x22b/0x6d0 [ 338.743938][ C3] ? simple_copy_to_iter+0x4e/0x90 [ 338.747088][ C3] skb_free_head+0xb9/0x160 [ 338.750379][ C3] skb_release_data+0x698/0x860 [ 338.754281][ C3] consume_skb+0xc4/0x110 [ 338.757751][ C3] netlink_recvmsg+0x636/0xb60 [ 338.760874][ C3] ? __pfx_netlink_recvmsg+0x10/0x10 [ 338.764129][ C3] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 338.767355][ C3] ? __pfx_netlink_recvmsg+0x10/0x10 [ 338.770720][ C3] sock_recvmsg+0x1d5/0x220 [ 338.773534][ C3] ____sys_recvmsg+0x21e/0x6a0 [ 338.776754][ C3] ? __pfx_____sys_recvmsg+0x10/0x10 [ 338.780557][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 338.783735][ C3] ___sys_recvmsg+0x16a/0x1a0 [ 338.786689][ C3] ? __pfx____sys_recvmsg+0x10/0x10 [ 338.790169][ C3] ? __pfx_ep_autoremove_wake_function+0x10/0x10 [ 338.794253][ C3] ? ktime_get_ts64+0x306/0x420 [ 338.797300][ C3] __x64_sys_recvmsg+0x19a/0x260 [ 338.800153][ C3] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 338.803148][ C3] do_syscall_64+0x123/0x7b0 [ 338.806076][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.810095][ C3] RIP: 0033:0x7f2c436a7407 [ 338.813158][ C3] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 338.828049][ C3] RSP: 002b:00007ffdd5cf6720 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 338.833259][ C3] RAX: ffffffffffffffda RBX: 00007f2c43dce880 RCX: 00007f2c436a7407 [ 338.839063][ C3] RDX: 0000000000000000 RSI: 00007ffdd5cf67b0 RDI: 0000000000000004 [ 338.846697][ C3] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 338.851925][ C3] R10: 0000000000000000 R11: 0000000000000202 R12: 0000564ca5fedd80 [ 338.858656][ C3] R13: 00007ffdd5cf6870 R14: 00007ffdd5cf67bc R15: 0000000000000000 [ 338.863120][ C3] [ 338.865756][ C3] Kernel Offset: disabled [ 338.868408][ C3] Rebooting in 86400 seconds..