last executing test programs: 13m34.031611549s ago: executing program 32 (id=7): mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x104000, 0x0) (async) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x104000, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x100, 0x1) (async) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x100, 0x1) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x8040, 0xc8, 0x6bb8, 0x9, {{0x29, 0x4, 0x0, 0x32, 0xa4, 0x65, 0x0, 0xfa, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@ssrr={0x89, 0x23, 0xfc, [@remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @empty, @multicast2, @rand_addr=0x64010102]}, @timestamp={0x44, 0x10, 0xdf, 0x0, 0x1, [0x9, 0x1, 0x1]}, @timestamp={0x44, 0x28, 0x41, 0x0, 0x6, [0x7, 0x1ff, 0x4, 0xfffeffff, 0xa, 0x80, 0x9, 0x2, 0x7]}, @generic={0x94, 0x10, "fb36a70dd518f8d0e119df823c4d"}, @lsrr={0x83, 0xb, 0xd4, [@local, @private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x2c, 0x0, 0x2, [0x3, 0x100, 0x6, 0x5]}]}}}}}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)) (async) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@private1, 0x4e21, 0x2, 0x4e20, 0x1, 0x2, 0xa0, 0x0, 0x33, r2, r3}, {0xa, 0x800, 0x5, 0x4d9bc73e, 0x100000001, 0x64, 0x0, 0x5}, {0x0, 0x5cc124de, 0x180000000000, 0x7}, 0xffff3eb2, 0x6e6bbc, 0x2, 0x1, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4d6, 0x3c}, 0xa, @in=@multicast2, 0x3506, 0x0, 0x0, 0x4, 0x6, 0x9, 0x19ce}}, 0xe8) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) write$UHID_INPUT(r4, &(0x7f00000004c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000001500)={0x1, 'vlan0\x00', {}, 0x3ff}) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000001500)={0x1, 'vlan0\x00', {}, 0x3ff}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000001540)={0x10002, 0x6, 0x7000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000001600)={0x0, 0x4c, &(0x7f0000001580)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0xd4, @private2, 0x6}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000001640)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb5, 0xb5, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x5}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x4}, @struct={0x2, 0x8, 0x0, 0x4, 0x0, 0x0, [{0x7, 0x0, 0x7}, {0x7, 0x2, 0x5a}, {0x2, 0x0, 0x80000001}, {0xa, 0x1, 0xdb05}, {0x1, 0x0, 0x8001}, {0x5, 0x2, 0x9}, {0x8, 0x3, 0x81}, {0x9, 0x1, 0x6}]}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0xc8, 0x7}], '-'}, @typedef={0xe}]}, {0x0, [0x2e]}}, &(0x7f0000001780)=""/39, 0xd3, 0x27, 0x1, 0x4}, 0x28) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb5, 0xb5, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x5}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x4}, @struct={0x2, 0x8, 0x0, 0x4, 0x0, 0x0, [{0x7, 0x0, 0x7}, {0x7, 0x2, 0x5a}, {0x2, 0x0, 0x80000001}, {0xa, 0x1, 0xdb05}, {0x1, 0x0, 0x8001}, {0x5, 0x2, 0x9}, {0x8, 0x3, 0x81}, {0x9, 0x1, 0x6}]}, @datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0xc8, 0x7}], '-'}, @typedef={0xe}]}, {0x0, [0x2e]}}, &(0x7f0000001780)=""/39, 0xd3, 0x27, 0x1, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0x13, 0x1, 0x1ff, 0x95ab, 0x8, r5, 0x7, '\x00', r2, r7, 0x1, 0x4, 0x2}, 0x50) close_range(r1, r0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001880)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80800) (async) r8 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001880)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80800) connect$vsock_stream(r8, &(0x7f00000018c0)={0x28, 0x0, 0xffffffff}, 0x10) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001900), 0x22400, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r9, 0xc0045401, &(0x7f0000001940)=0x1f6) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001980), 0x60041, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000019c0)={0x0, 0x0, r10}) fcntl$setstatus(r10, 0x4, 0x40000) (async) fcntl$setstatus(r10, 0x4, 0x40000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000001a00)={0x1, 0x1, 0x4}) syz_open_dev$usbfs(&(0x7f0000001a40), 0x2, 0x80000) (async) r11 = syz_open_dev$usbfs(&(0x7f0000001a40), 0x2, 0x80000) ioctl$USBDEVFS_REAPURBNDELAY(r11, 0x4008550d, &(0x7f0000001a80)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001ac0), 0x1) syz_io_uring_complete(0x0, 0x0) (async) r12 = syz_io_uring_complete(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r12, 0xc0189378, &(0x7f0000001b00)={{0x1, 0x1, 0x18, r6, {r10}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r12, 0xc0189378, &(0x7f0000001b00)={{0x1, 0x1, 0x18, r6, {r10}}, './file0\x00'}) 13m19.761435804s ago: executing program 33 (id=199): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x24b34cc9286c8cdf, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRES16=r3], 0x80}, 0x1, 0x0, 0x0, 0x8054}, 0x40880) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="010000000b0e00000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x11) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r6 = syz_open_dev$ublk_chdev(&(0x7f0000000200), 0x0, 0x202800) fstat(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2010000, &(0x7f0000000080)={[{@uid={'uid', 0x3d, r7}}]}) fchown(r0, r7, r8) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000007fc0)={0x2020}, 0x2020) ioctl$FE_SET_FRONTEND_TUNE_MODE(r4, 0x6f51, &(0x7f00000000c0)=0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x3, 0x0, 0x0, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) 13m3.513100006s ago: executing program 34 (id=400): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) setresuid(0xee01, 0xee01, 0x0) r2 = semget$private(0x0, 0x4, 0x411) semctl$SETVAL(r2, 0x2, 0x10, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xc8200, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f00000001c0)=0x40) 6m17.317386011s ago: executing program 35 (id=2715): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000001900)="00214717a707000000d9deabd4bafe7bb7a221b59cd90003", 0x18}], 0x1, 0x1, 0x7fff) 4m35.522935159s ago: executing program 36 (id=2945): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000900090073"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x1000000000000000, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x182, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0xa) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x2, 0x8, 0x201, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) fchdir(r7) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0x9361, 0x0) read$FUSE(r4, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000940)=ANY=[@ANYBLOB="1000000000000000b37884c2098785bf"], 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)=ANY=[@ANYBLOB="880000001e0021002bbd7000000000002a00000005000000000000006900010085951a710b54d4c53ad87f3a5fa9e26d623a8e5faa9bc780c391e7fef353a6ff67be1dc121718abba1c6b372235798e73af29221c8fd69d27df28887114d1e08f2a614cf9dbe589a263f98e46eecb21f412e43588f2d88cf0514a16e9ec346f19f740ce45d000000"], 0x88}}, 0x0) 4m20.83353055s ago: executing program 37 (id=3046): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) (async) setuid(0xee00) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='xfs\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20040800) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x4050) writev(r2, &(0x7f0000000040), 0x2) (async) writev(r2, &(0x7f0000000040), 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28010000070a0103"], 0x128}, 0x1, 0x0, 0x0, 0x200440d5}, 0x4000) fsconfig$FSCONFIG_SET_STRING(r1, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000014f8000000200002000a00000000000000ff020000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r6, @ANYBLOB="200027bd7000fcdbdf2504000000340001800e0001006574683a76657468300000000800030010000000180001006574683a76657468315f746f5f62720d00000000280004802400078008000100160000000800040000000000000000000200000008000400ffffffff34000980080002006f000000080001000104000008000100010000000800020005000000080400000000000000000100020000006f8a1f2a3ea330247a061c8fc1ccbe5f46891c61e4d3bccceb00d9129cce2d106f6585e62e89ab1d7a6b253f390a4209e847df"], 0xa4}, 0x1, 0x0, 0x0, 0x2800}, 0x4008000) (async) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r6, @ANYBLOB="200027bd7000fcdbdf2504000000340001800e0001006574683a76657468300000000800030010000000180001006574683a76657468315f746f5f62720d00000000280004802400078008000100160000000800040000000000000000000200000008000400ffffffff34000980080002006f000000080001000104000008000100010000000800020005000000080400000000000000000100020000006f8a1f2a3ea330247a061c8fc1ccbe5f46891c61e4d3bccceb00d9129cce2d106f6585e62e89ab1d7a6b253f390a4209e847df"], 0xa4}, 0x1, 0x0, 0x0, 0x2800}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xb2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xb2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$P9_RREADDIR(r9, 0x0, 0x0) 4m16.677044452s ago: executing program 38 (id=3085): socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1", 0xa2}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b", 0x2f}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff93", 0x55}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) (async) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) (async) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000000c0)=""/68, 0x4f553821}, {&(0x7f0000000200)=""/83, 0x20000253}, {&(0x7f0000000600)=""/154}, {&(0x7f0000002840)=""/4096, 0x31}], 0x2}, 0x20012000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m13.220722669s ago: executing program 39 (id=3093): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee3", 0xe1}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1", 0xa2}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b", 0x2f}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r5, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x28, r9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x815}, 0x20000000) socket$netlink(0x10, 0x3, 0x9) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@verity_on}, {@nfs_export_on}]}) 4m9.710727936s ago: executing program 40 (id=3112): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b1, &(0x7f0000000900)={'macvlan1\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000080)={0x101, 0x6, 0x3, 0x7f, 0x2, 0x0, [{0x200000000000, 0x81, 0x1000, '\x00', 0x2800}, {0x5c, 0xae, 0x0, '\x00', 0x103}]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023bd7000fbdbdf250300000008000100010000"], 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x10000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 4m9.389874467s ago: executing program 41 (id=3137): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x48, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x6}, 0x94) 3m30.346549869s ago: executing program 42 (id=3345): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fanotify_init(0x200, 0x2) fanotify_mark(r2, 0x1, 0x8000002, r0, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000080)=0x1, 0x4) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) renameat2(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) 2m22.552781472s ago: executing program 4 (id=4186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000400)={'veth1\x00', &(0x7f0000000480)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0x61, 0xffb, 0x7, 0x2, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1080, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0xb, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x4, 0x6, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x2000008, 0x79b, 0x2, 0x1, 0x7d, 0x8, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0x3, 0x4009, 0x0, 0x40000004, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x2, 0x84, 0x800100, 0x7, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x1, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000039000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000380), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa0f7f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m22.304228566s ago: executing program 4 (id=4191): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1000, 0x201) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x1, 0x1903, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0xd35b, '\x00', @string=0x0}}) r1 = io_uring_setup(0x4a86, &(0x7f0000000040)={0x0, 0x78dc, 0x40, 0x8001002, 0x2b8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x8, &(0x7f0000000200), 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m22.062449054s ago: executing program 4 (id=4197): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r1 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 2m21.691014714s ago: executing program 4 (id=4206): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x2f) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x30, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000740)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20048000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000100)={0x15}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x10000005}, 0x400800d) 2m21.352903189s ago: executing program 4 (id=4210): r0 = socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) 2m21.141020237s ago: executing program 4 (id=4215): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r1, &(0x7f00000003c0), 0x100000000000022d) setns(r1, 0x2000080) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) r2 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f00000000c0)={0x100000, 0x0, {[0x4, 0x9, 0x9, 0xffffffffffffffff, 0x7, 0xc3, 0xffffffff80000000, 0x80]}}) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x40, 0x0, "1cdc0dca1d9f6884"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, 0x40000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4620, @private=0xa010102}}]}, 0x60}, 0x1, 0x7}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {r4, r5+10000000}}, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 2m5.987869875s ago: executing program 43 (id=4215): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r1, &(0x7f00000003c0), 0x100000000000022d) setns(r1, 0x2000080) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) r2 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f00000000c0)={0x100000, 0x0, {[0x4, 0x9, 0x9, 0xffffffffffffffff, 0x7, 0xc3, 0xffffffff80000000, 0x80]}}) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x40, 0x0, "1cdc0dca1d9f6884"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, 0x40000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4620, @private=0xa010102}}]}, 0x60}, 0x1, 0x7}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {r4, r5+10000000}}, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 2m5.381747064s ago: executing program 9 (id=4307): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x37]}}]}) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) mount$nfs4(&(0x7f0000000180)='T\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB="5e26732c746d706673009add6b010000002c2c2c272f5b2c29402d26282c6105697365756469742c00000000936290d39575c265ff303a331c76718b8639e3b9a74e79f8b89b23c1e4bfb868fc7df2fe3f9f546a8c46eb6d0cf9f67494812738abd9a2c2f5e202664abcfd6be34f1f611829f5ce397f12f73d78a1b1f1558c8987cf20b33d55fc371ce9296edea7b6fa2be77b213aaf258ea6deb385615ce0cb6d107bb18cf99edba5789687"]) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x403, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x10500}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000804}, 0x4008080) 2m5.258682735s ago: executing program 9 (id=4309): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x1d, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x4, 0xb, 0x1, 0x100, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc}, 0x94) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) 2m5.178090525s ago: executing program 9 (id=4310): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x2000fb) 2m5.177703074s ago: executing program 9 (id=4311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xc}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) r2 = socket(0x8, 0x1, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r4, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r3) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f0000000000000000020000000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$COMEDI_SUBDINFO(r1, 0x80486402, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TIOCSSOFTCAR(r5, 0x5412, &(0x7f0000000540)=0x13) open(&(0x7f0000000080)='./file0\x00', 0x109943, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r7, &(0x7f0000000100)="306663353a313232373a620afa6b7139135bbc11cce51e5b7072", 0x1a) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001dc0)={0x0, &(0x7f0000000180)=""/64, &(0x7f0000000240)="b5a31be78a095a9af02d4ada5ac535f126e1430c3e65037e8054425f2d", 0x0, 0x6, r6, 0x4}, 0x38) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r9, 0xc010640c, &(0x7f00000001c0)={0x8}) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_GET_PIT2(r8, 0xae64, 0x0) 2m5.080102377s ago: executing program 9 (id=4313): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) 2m4.438731084s ago: executing program 9 (id=4319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) r4 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = dup(r4) listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) write$binfmt_elf32(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001"], 0x3b) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$unix(0x1, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x1d}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="27030200590f14000600602fb96dbcf706e10500000086ddff071144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 2m4.290667304s ago: executing program 44 (id=4319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) r4 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = dup(r4) listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) write$binfmt_elf32(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001"], 0x3b) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$unix(0x1, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x1d}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="27030200590f14000600602fb96dbcf706e10500000086ddff071144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 2m1.98935265s ago: executing program 2 (id=4337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@can_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "8b893b21c1f3344a"}, 0x5}}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0xffffffffffffffff}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@can_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "8b893b21c1f3344a"}, 0x5}}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0xffffffffffffffff}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000140)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a28000/0x4000)=nil, &(0x7f0000e39000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000d07000/0x2000)=nil, &(0x7f0000eeb000/0x2000)=nil, &(0x7f0000adb000/0x1000)=nil, &(0x7f0000a64000/0x1000)=nil, &(0x7f0000000000)="86fe07b71312befaa3bc87951ae8b5cee501e6a1f36372c9be6a6e1ca0740df688cc1e04c6c68dbadabb6d26a3022658132db6c6697de4af811e", 0x3a, r1}, 0x68) socket(0x10, 0x3, 0x20008) (async) r3 = socket(0x10, 0x3, 0x20008) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x8932, &(0x7f0000008a80)={'ip6gre0\x00', 0x0}) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\x04\x00\xd9z\x81\x91_O\x98\xc9\xad\xcd+\xb7\x91\xd7\x8aP}I\xc6\x0e\xd9\r\x11\r\x93\xd4.\xd9\x99#\xa7\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc770x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400000000000000e) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, 0x0, &(0x7f0000001800)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, &(0x7f00000000c0)={0x2}) 2m0.929941133s ago: executing program 2 (id=4342): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) fsetxattr$security_capability(r1, &(0x7f0000000080), &(0x7f0000000100)=@v2={0x2000000, [{0x7, 0x8001}, {0x7, 0x6}]}, 0x14, 0x2) (async) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r7 = epoll_create(0x81) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000000440)={{r4}, "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"}) (async) sendmsg$can_raw(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r6}, 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=@can={{0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "67a71ebc03e75ca1"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0xc000) (async) fgetxattr(r3, &(0x7f0000000200)=@random={'trusted.', '[[/),+^\x00'}, &(0x7f0000000240)=""/137, 0x89) (async) close(r4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2m0.842517494s ago: executing program 2 (id=4343): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf250600000014000800"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) splice(r6, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x80000001) writev(r8, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x0, 0x2, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x3, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xc, 0x4, 0xffffffff, 0xa80, 0x0, 0x7, 0x2, 0x0, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x6, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x7, 0x5597, 0x3, 0x7, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x400000, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) pipe(&(0x7f0000000340)) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf250600000014000800"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000000) (async) pipe(&(0x7f00000000c0)) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) (async) splice(r6, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x80000001) (async) writev(r8, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x0, 0x2, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x3, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xc, 0x4, 0xffffffff, 0xa80, 0x0, 0x7, 0x2, 0x0, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x6, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x7, 0x5597, 0x3, 0x7, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x400000, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) (async) 1m35.270956241s ago: executing program 45 (id=4343): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf250600000014000800"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) splice(r6, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x80000001) writev(r8, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x0, 0x2, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x3, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xc, 0x4, 0xffffffff, 0xa80, 0x0, 0x7, 0x2, 0x0, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x6, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x7, 0x5597, 0x3, 0x7, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x400000, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) pipe(&(0x7f0000000340)) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf250600000014000800"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000000) (async) pipe(&(0x7f00000000c0)) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) (async) splice(r6, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x80000001) (async) writev(r8, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x0, 0x2, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x3, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xc, 0x4, 0xffffffff, 0xa80, 0x0, 0x7, 0x2, 0x0, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x6, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x7, 0x5597, 0x3, 0x7, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x400000, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) (async) 52.783071603s ago: executing program 7 (id=5094): prctl$PR_SET_TIMERSLACK(0x1d, 0x3ff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) (fail_nth: 30) 52.661747965s ago: executing program 7 (id=5095): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x48, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x405}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x28}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000001) 52.661257811s ago: executing program 7 (id=5097): r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x10b343) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r3], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000003080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xfd, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x9, 0x9d}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0xd, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xfc, 0xb, 0x8}}}}}]}}]}}, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x10b343) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r3], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) (async) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000003080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xfd, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x9, 0x9d}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0xd, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xfc, 0xb, 0x8}}}}}]}}]}}, 0x0) (async) 51.582470065s ago: executing program 7 (id=5107): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') (async) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x1002, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004801}, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000080)={0x281, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x40000) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x40000) 51.482888964s ago: executing program 7 (id=5108): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0xd, 0x0, @ofdm={0x6, 0x13, 0x16, 0x9, 0x2, 0xb, 0x4}}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000000)={0x768000, 0x0, @ofdm={0x4, 0x6, 0x1, 0x14, 0x5, 0x7, 0x3}}) 50.789258373s ago: executing program 7 (id=5118): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (fail_nth: 1) 50.695294616s ago: executing program 46 (id=5118): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (fail_nth: 1) 28.318013759s ago: executing program 6 (id=5412): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$kcm(0x29, 0x2, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000200)={'system_u:object_r:pam_var_run_t:s0', 0x20, 'unconfined_u\x00'}, 0x30) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @string=&(0x7f0000000040)=0x4}}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) pselect6(0x62, &(0x7f0000000100)={0x4, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100005, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x475500000000000, 0x4, 0x80000000000000, 0x6a9}, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) 28.192641681s ago: executing program 6 (id=5413): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) (fail_nth: 45) write(r0, &(0x7f0000000180), 0x0) 28.109269229s ago: executing program 6 (id=5414): syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000c00)='1', 0x1) 28.032269371s ago: executing program 6 (id=5415): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x30]}}}}]}) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x3, 0x8001, 0x0, 'queue1\x00', 0x7}) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x8242, 0x0, 0x0, 0xffffffffffffffff, 0x4}) r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x30]}}}}]}) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x3, 0x8001, 0x0, 'queue1\x00', 0x7}) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x8242, 0x0, 0x0, 0xffffffffffffffff, 0x4}) (async) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async) 28.031936711s ago: executing program 6 (id=5416): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0xa, 0x2}, 0x10) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KVM_GET_TSC_KHZ_cpu(r3, 0xaea3) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f00000001c0)=@arm64_sys={0x603000000013df6b, &(0x7f0000000180)=0x2b}) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000200)) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r3, 0x8010aebb, &(0x7f0000001200)={0x80a0000, 0xa000}) r4 = syz_io_uring_setup(0x6614, &(0x7f0000001240)={0x0, 0xc914, 0x40, 0x2, 0x212, 0x0, r3}, &(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000001380)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x14}, @ioring_restriction_sqe_flags_required={0x3, 0x5}, @ioring_restriction_register_op={0x0, 0x24}, @ioring_restriction_register_op={0x0, 0x14}, @ioring_restriction_register_op={0x0, 0x11}, @ioring_restriction_sqe_flags_allowed={0x2, 0x8e48ba4080755c7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1a}, @ioring_restriction_sqe_flags_allowed={0x2, 0x9}], 0x8) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000001400)={0x9, 0x200, {0x0}, {0xffffffffffffffff}, 0x5, 0x4}) read$FUSE(r3, &(0x7f0000001440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000003480), 0x40000, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r1, &(0x7f00000034c0)={r4, r7, 0x8}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000003500), 0x200000, 0x0) ioctl$EVIOCSREP(r8, 0x40084503, &(0x7f0000003540)=[0x67, 0x4]) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_OPENQRY(r9, 0x5600, &(0x7f0000003580)) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f00000035c0)={0x1c, 0xffffffffffffffff, 0x1}) r10 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) read$FUSE(r10, &(0x7f0000003600)={0x2020}, 0x2020) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000005640)={0x3, 0xb60000000, 0x0, 0xb, 0x6, 0x8}) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000005680)=0x1) close_range(r8, r9, 0x0) sendmsg$tipc(r8, &(0x7f0000005980)={&(0x7f00000056c0)=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}, 0x4}}, 0x10, &(0x7f0000005900)=[{&(0x7f0000005700)="5d594caaa3274eb8635f94f68316a66342cd3a603a721774b519f7eaf9ac4e2a53acb4c00b64dfd9d83a2c7f406bc54acf52c3329242284bc800c0a9856406efd8e2d766b62a1736ed26fed82716d0527115fed03219128c8732042f332209799c250d7bbbb163944e0651385358211b38c194ae7ef76f36bd0a29a84a4bce9786dc614168185f8e4be57af9192554eedfd882dc480616aa5330a08a64d56344d4db1ef8a4f554933ae323ba19b2316ae13e2f2bede5e0058faa896428f0c96e33dc3e159d82c5a2d462c7a7755fd541c1578cff0dfee9", 0xd7}, {&(0x7f0000005800)="f95567795c0c3a9c2a7b6e907e565441f47979b3e39db1ed4509fb148bd700dce04638a5d28afb37ca48bae83e5f932c2e26590cd12039aedc20ca28c0bd591bb3b4fb9538c03d1769f7cc00a4e01cb2c3ac4b547b98f4aec18cb07f968e51015fb91698ed9bcca4626a05dfabb920076dcce82a9d354226e12da5d2ade9b49cb438dfdd8ab7702317abaea1c872afe8bf795dc246a18423148f1884d794204ae671de4b4264881be95a96be663d4f37c2c267cbc7a763ba001d0fe2c1b9c5d1a599f7ba146f0eef14a90d9f868a05c8ff9c9e7c0ffecf40da12270adc437b78139043fa0ce54f5d5a1a806e6b15b7", 0xef}], 0x2, &(0x7f0000005940)="66efd49921755731dffffac7896879477d28d1e440c1", 0x16, 0x4000000}, 0x44080) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f00000059c0)=@arm64={0xc0, 0x4, 0x3, '\x00', 0x7}) 27.689040883s ago: executing program 6 (id=5417): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000200000001031dbd700affdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101802, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0xa0044d03, &(0x7f0000000000)) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x0, 0xff}}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), 0x10180c0, &(0x7f00000004c0)={'trans=unix,', {[{@ignoreqv}], [{@smackfsroot={'smackfsroot', 0x3d, 'autofs\x00'}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@smackfsroot={'smackfsroot', 0x3d, 'wlan0\x00'}}, {@pcr={'pcr', 0x3d, 0x1a}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x65, 0x4f0f77762f20a45e, 0x33, 0x34, 0x54, 0x39, 0x33], 0x2d, [0x36, 0x66, 0x39, 0x31], 0x2d, [0x31, 0x66, 0x30, 0x32], 0x2d, [0x64, 0x65, 0x36, 0x61], 0x2d, [0x62, 0x36, 0x30, 0x3e, 0x65, 0x38, 0x39, 0x35]}}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r10, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r9, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004014}, 0x81) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000041c0)={0x2020}, 0x2040) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x2}}, './file1\x00'}) 27.541571861s ago: executing program 47 (id=5417): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000200000001031dbd700affdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101802, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0xa0044d03, &(0x7f0000000000)) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x0, 0xff}}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), 0x10180c0, &(0x7f00000004c0)={'trans=unix,', {[{@ignoreqv}], [{@smackfsroot={'smackfsroot', 0x3d, 'autofs\x00'}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@smackfsroot={'smackfsroot', 0x3d, 'wlan0\x00'}}, {@pcr={'pcr', 0x3d, 0x1a}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x65, 0x4f0f77762f20a45e, 0x33, 0x34, 0x54, 0x39, 0x33], 0x2d, [0x36, 0x66, 0x39, 0x31], 0x2d, [0x31, 0x66, 0x30, 0x32], 0x2d, [0x64, 0x65, 0x36, 0x61], 0x2d, [0x62, 0x36, 0x30, 0x3e, 0x65, 0x38, 0x39, 0x35]}}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r10, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r9, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004014}, 0x81) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000041c0)={0x2020}, 0x2040) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x2}}, './file1\x00'}) 21.796746053s ago: executing program 5 (id=5451): socketpair(0x1e, 0x5, 0xd73, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xc, 0x8580) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='0') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000040)={r1, 0x0, 0x48db20e6, 0x8, 0x8, 0x4}) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 21.622060719s ago: executing program 5 (id=5452): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6400, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 20.571967573s ago: executing program 5 (id=5454): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x22, 0x2, @thr={&(0x7f0000000780)="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", &(0x7f0000001780)="50e37d4a461fc62e85ddc35b3f91112e19de5f4cb09b3775ae795901a08cc02e33d5cde4954d04d9a744183b6dd83a13f3ace0c2dfbeea5141baa3f7121d278ab4d5"}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x50002010}) r3 = epoll_create(0x9b27) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0xe0000003}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000080000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8eb00227}, 0x0) 15.672593404s ago: executing program 5 (id=5455): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100033060000000000000000ffffffff000000000000000000000000e00000020000e0ff00000000000000000000000000000000000000a02c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x154}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000540)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000640)={r1, 0xffff, 0x0, 0x0, r2}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/stat\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x1) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3, {0x9}}, './tracing/uprobe_events\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r6, @ANYBLOB="080026040a000100000000000000000008000f0005"], 0x30}, 0x1, 0x0, 0x0, 0x240400c0}, 0x80c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$tmpfs(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x2004001, &(0x7f0000000240)=ANY=[@ANYBLOB="6d706f6c3d040063616c3d72656c61746976653a392c382c00"]) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000080)={r8, 0x3, 0x3}, 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) read(r9, &(0x7f0000000200)=""/5, 0x5) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r10, &(0x7f0000000600)="723a732f70202e2f66696c65303a300c5c949de957570839be9fbb298bcf293d", 0x20) 15.542350268s ago: executing program 5 (id=5459): syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000c00)='1', 0x1) 15.173656973s ago: executing program 5 (id=5469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc, 0x4, "0100000000000000"}]}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@gettaction={0xac, 0x32, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x280000}}]}]}, 0xac}}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='adfs\x00', 0x208000, 0x0) 15.032748866s ago: executing program 48 (id=5469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc, 0x4, "0100000000000000"}]}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@gettaction={0xac, 0x32, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x280000}}]}]}, 0xac}}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='adfs\x00', 0x208000, 0x0) 7.939860132s ago: executing program 0 (id=5549): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c00168008"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x140c, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x400c804) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}) r4 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0xfffffffe, 0x4, 0x9}], 0x10, 0xd5}, 0x94) close(0x3) (async) r5 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) (async) recvmsg$unix(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r5, &(0x7f0000000580)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="df", 0x1}], 0x1}, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) (async) close(0x3) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000c80)=""/4086, 0xff6}], 0x1}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) (async) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="04230d07c8000c050000007942951ef1"], 0x10) syz_io_uring_setup(0x1871, &(0x7f0000000200)={0x0, 0x82b1, 0x4200, 0x1, 0x2cb, 0x0, r3}, &(0x7f0000000280), &(0x7f0000000540), &(0x7f0000000340)) (async) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) ioctl$UFFDIO_COPY(r10, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r12 = syz_open_dev$evdev(&(0x7f0000001bc0), 0x0, 0x8801) ioctl$EVIOCGEFFECTS(r12, 0x80044584, &(0x7f0000001c00)=""/15) (async) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRESHEX=r12, @ANYRES16=r2, @ANYRES16=r3, @ANYRES32=r11, @ANYBLOB="ef7f52eca3608570d2cb5f9200fa08b2bd9d1091f61e23c4d23d5ac552ee37dab107a86fec1574634daa40862d40ee97d1deb779abba1faa49f5b24e16dcb756322e5a76b23e122132ad"], 0x1c}, 0x1, 0x0, 0x0, 0x20004045}, 0x0) 7.831930877s ago: executing program 0 (id=5552): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x4009, 0x3, 0x3, 0x2, 0x5]}, &(0x7f0000000000)=0x78) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0xffffffffffffffda) listen(r0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x4009, 0x3, 0x3, 0x2, 0x5]}, &(0x7f0000000000)=0x78) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0xffffffffffffffda) (async) listen(r0, 0xa) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') (async) 7.722706179s ago: executing program 0 (id=5553): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x8, 0xbb, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) 7.719470293s ago: executing program 0 (id=5554): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x316575}}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x7, 0x825, 0x1, 'queue0\x00', 0x81}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) ioctl(r0, 0x3b8f, &(0x7f00000000c0)="2800000006000000010000000400000000000000000000000010") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0}}, 0x10) 7.610237181s ago: executing program 0 (id=5556): open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0xffffffffffffffb6) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000140)) (async, rerun: 32) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) (rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) (async, rerun: 32) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x10000, 0x0) 7.52184938s ago: executing program 0 (id=5557): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) modify_ldt$write(0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001300050000000000fcffffff07000017", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c000980", @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x10040004}, 0x80) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x800}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x1}}, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x20008000) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x72) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r0, 0x1) syz_clone(0x82002880, &(0x7f0000000080)="4fd6551982a9c4d1d9b5eafb89af1a8e318a72ed388f63851afb07b42a149e011ed98fbee92d4df8d75984", 0x2b, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)="63a72fd48e96db4448d1ce362770807e7eb25efe6fce6d52") accept(r5, &(0x7f0000000300)=@nfc_llcp, &(0x7f00000003c0)=0x80) 3.709560503s ago: executing program 1 (id=5607): memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) (fail_nth: 5) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) 3.492819863s ago: executing program 1 (id=5608): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) unshare(0x6060f00) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000002600), r1) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='iso9660\x00', 0x405, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) unshare(0x6060f00) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') (async) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000002600), r1) (async) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='iso9660\x00', 0x405, 0x0) (async) 3.441273182s ago: executing program 1 (id=5609): memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0xf000) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) 3.408655123s ago: executing program 1 (id=5611): syz_open_dev$sndmidi(0x0, 0xd, 0x88000) 3.406135087s ago: executing program 1 (id=5613): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x3, 0x1ff8}, 0x100, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000440)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], r1, 0x0, '\x00', 0x3, 0x9}) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000480)) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000004c0)={0x0, 0xca8b, 0x8001, 0x2, 0x2f9, 0x0, r0}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbe17, 0x40000, 0x3, 0x1d6, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9c6c, 0x1, 0x3, 0x207}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a62, 0x40, 0x2, 0x4c, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x938a, 0x4001, 0x3, 0x3af, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f00000017c0)={0x2e, 0x80, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x472}, 0x0, 0x0, '\x00', {0x0, 0x6f, 0x0, &(0x7f00000007c0)=@buf_1k="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"}}, &(0x7f0000001840)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000001880), 0x0, 0x400100) syz_ublk_process_io(r9, 0x4, 0x4, &(0x7f00000028c0)=@ublk_io_need_get_data_sqe={0x2e, 0x48, 0x0, r10, 0xc0107522, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, 0x0, '\x00', {0x0, 0x2de, 0x1, &(0x7f00000018c0)=@buf_1k="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"}}, 0x1) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000002940)=0x1, 0x4) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000002980)={0x5, "5caafc5a2274228ea16f04dd429e5d625a74492561b7b5f9832316b461451aff"}) (async) r12 = syz_io_uring_setup(0xef0, &(0x7f00000029c0)={0x0, 0xddcd, 0x10000, 0x3, 0x2e, 0x0, r3}, &(0x7f0000002a40)=0x0, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_io_uring_submit(r13, r2, r6, &(0x7f0000002b00)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, r0, r5, 0x0, 0x2, 0x0, 0x1}) (async) r14 = mmap$IORING_OFF_CQ_RING(0x0, 0x10001, 0x7, 0x2010, r12, 0x8000000) syz_io_uring_submit(r13, r14, r7, &(0x7f0000002c40)=@IORING_OP_MSG_RING={0x28, 0xa, 0x0, r12, &(0x7f0000002b80)="4116b035b644efc0fb27cc49b5f756593820278c96107b963607d1adfde29563586a9b2657e52a368c5aebea1689830b38c038ac07a8110408992c3b94dda3ff0c96accf28cec5450105eef96151f97a17b119beb680256bb8dc59a4b4822b05f7df8ce316f3c48caa65b10455968d2c4ead4f2a2f2763d1df359ecb940c33c35a3418495baf7519a119b974294ad18e3ee4585d67c180116cbb66889ce36825541f8f24e6653e7c7772710b550e416a65f85bb20bf5aacf8ce31553490a", 0x1, 0x8, 0x0, 0x1, {0x0, 0x0, r4, 0x3800000000}}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x31c18eefc9603be) (async) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) (async) r15 = socket(0x1, 0xa, 0x1) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000002cc0)={0x0, 0x8}, &(0x7f0000002d00)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r15, 0x84, 0x1f, &(0x7f0000002d40)={r16, @in6={{0xa, 0x4e21, 0x7, @private0, 0x9}}, 0x8, 0xfd55}, 0x90) (async) syz_usb_connect(0x6, 0x54b, &(0x7f0000002e00)={{0x12, 0x1, 0x110, 0xa3, 0x34, 0x26, 0x8, 0xd8e, 0x7812, 0xe799, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x539, 0x1, 0x1, 0x78, 0xe0, 0x55, "", [{{0x9, 0x4, 0x84, 0x1, 0xf, 0x6, 0x1f, 0xcf, 0xc3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "dfb1"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xf, 0xfffe, 0x4b7, 0xa}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x1d}, @mdlm_detail={0x1b, 0x24, 0x13, 0x8, "e04f1c12f9c91a6f623ab0fcb1b8cd4b004c8018cbfe85"}, @country_functional={0x12, 0x24, 0x7, 0xf8, 0x0, [0x3, 0x7fff, 0x400, 0x7, 0x2, 0x7ff]}]}], [{{0x9, 0x5, 0xc, 0x0, 0x0, 0x1, 0x8, 0xed, [@generic={0x10, 0x8, "ac56cd4995c4e8458efc67c86560"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x6}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x0, 0xa7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}, @generic={0x86, 0x1, "ac2f7d4a33c8d02a57e1f349c9affec53b037ef4e230522697a28ac34a69eb1affef75a635c0f051a53010059692ba38ee2b033275f2cf7f3e519c72aa15dbf0030613d6a51df7adbe123d9bed1d97a8e3447ebbd60e7139ad83d47ada862ac9c34cdf19de226a9070677e0a7afd45bdc629cda97882c3d28cbc413a5c42d8c4535c4be9"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x9, 0x81, 0x80, [@generic={0xfa, 0x2b, "9b6a15647d5f83676ca6ca31e339474bc0715db545ec5a5c83ac31277c9949ef341aa85ffe2ffb16d4d00df22e3859aaa97519269f8bf70e57e84b50aaa13fb3d618a5e2d68b455e0f105bb797ae935e7102e96decb2fac5818874c5050cf5cf966ee30edcea33d1061c3183d29254a569ae31faa5659acba3304b6dd7c0f7c7bbac3380d2cf35d1920f3e9273e6e86dfb0360324e415b4f0c36b224867690aa3acf1123a5afd24296eb95c55f39d4deac975ce3e75d434b63858a9be165bc3e7da82ba2e484acb171656002e61b2b6b7270cba796e4479b9577e1ae7a4acbf63e0eace8db55b190cc7745e08dc082dfd28da1f5cef0a941"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x81, 0x4, 0xa, [@generic={0x1c, 0xf, "f57b1f298c7335537effa388777d35bdbdf4bb734bb40a66c6d6"}, @generic={0x77, 0x22, "4234a86213fb64c2174b07cc8c172fb2b469910a762a16379c2c59a61fa0dd3d8fc639674a1fc5f568b627bc2c2218892260bca2919a25bb803aec4041093fdbdb6528158d3aa60f1e7b3a0dda61f293b624ea3b2a650b05ff272b9ad2783e272170d63a4e2856bbe072cdd88bcb32a50df46e98e1"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x2, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x5}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x8, 0x7c, 0x7f, [@generic={0x22, 0x1, "122f7b747dbc83a73a33e7f20a794bb60709e89fc987fde8ee50e9e549026839"}]}}, {{0x9, 0x5, 0x6cae915e80e0d0e8, 0x4, 0x20, 0x9b, 0x8, 0x7, [@generic={0x52, 0xf, "77d7b2a1389ff694add31a46ade827ee916fb54a08124d1e7ff688d6ad7ea442f68a8959e729fd0024efac3779217915e84f39c56c08be3d081ba0c1963c8f5048df6f7a63e985507e4eb51932b46607"}, @generic={0x6d, 0x30, "cacc11b5ab69151083e232800b9d98245a442701221b3c69e792dd98c1023c7cd87d74cc82ce97e2bde36d26df40a50104896e14a549a2fe5a1bc636aea910dd18333ceb295b48cbf69a6b0123424232fe1bb1dc82234219c06514332f278bafdd07d15368dcfddac17ff5"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x6, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xb43}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x0, 0x80, 0x9}}, {{0x9, 0x5, 0xe, 0x5, 0x40, 0x5, 0x4, 0xbf}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x7f, 0x7, 0x7, [@generic={0xde, 0xe, "695aa9a51d2db3924a19db49ff6ed453a2e62d550ffbda41f627ed47956eb6a3820fbd9b64d28ba463ecf68bd2642613b5f622e362f81e6918998802098422ffedac02bba5ce1691c31423c4c4dd0b357db8ca65cdfa19429847f029837366c813a92844b3186d4d430797639610f24c3146d83c1cf947bf56cee42e685e75550a9152b0213f61a598016f40d586f1bcd56bf4200a221dc0e1244172511927023aa350aaf2401d6836a4128973c1f2eca05c0ee748730159fb69cff87afc088ee294ea062bc3da84ad13eec7acd1a62114e24ad7125840393033f25c"}, @generic={0x48, 0x7, "646a3e4b6afda16f0ec52b50ac41d19b10cf7d86b200a131892387b7a2be3d6bf704d37ab3310c76a62554c05da2faa03aca01ced8f702033891de899eabf97b748ef16217a3"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x8, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x22, 0x7, 0x9}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0xf4, 0x2, 0xfd}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x2, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5a, 0x6}]}}]}}]}}]}}, &(0x7f0000003440)={0xa, &(0x7f0000003380)={0xa, 0x6, 0x110, 0x9, 0xb, 0xa, 0x8, 0x9}, 0xc, &(0x7f00000033c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x0, 0x3}]}, 0x1, [{0x4, &(0x7f0000003400)=@lang_id={0x4, 0x3, 0x448}}]}) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000003480)={"836bf3fe215a748d064f182a3b072a6bf14d216b226e16d0b671fb640dfb", 0x80, 0x9, 0x5, [0x1, 0x1, 0x4, 0x37b2, 0x1, 0x8, 0xff, 0x1, 0x4, 0x0, 0xfffffffe, 0x13b0, 0x3512, 0x8, 0x5, 0x0, 0x2, 0x8]}) ioctl$sock_inet_SIOCSIFADDR(r15, 0x8916, &(0x7f0000003500)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}}) pread64$ublk_ch(r8, &(0x7f0000003540)=@buf_max_buf, 0x1000, 0x0) (async) syz_usb_connect$cdc_ncm(0x2, 0x79, &(0x7f0000004540)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xe886ebda35dd2f73, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0x9, 0xd0, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "e09bc4f1e79a"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x1e4631de, 0x8, 0x0, 0xd}, {0x6, 0x24, 0x1a, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x5859d81a93b96f50, 0x10}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x81, 0x5e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x5e, 0xfd}}}}}}}]}}, &(0x7f0000004800)={0xa, &(0x7f00000045c0)={0xa, 0x6, 0x110, 0x0, 0xf, 0x0, 0xff}, 0x44, &(0x7f0000004600)={0x5, 0xf, 0x44, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x0, 0x4, 0xf}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0x8, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "a3d66d2b0d6f60eea12aa2cf8227aa76"}, @ssp_cap={0xc, 0x10, 0xa, 0x83, 0x0, 0x400, 0xf00, 0xd}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2d, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x442aeac205932fda, 0xf, 0x7, 0x37}]}, 0x3, [{0xd1, &(0x7f0000004680)=@string={0xd1, 0x3, "e1ce3b1586dddfb0a48dc45bb4f2de478f0f845155eae8c059928723ceeba9a803298030e98dadb0b0393996abefee9c7004affa8057a0480f4825e2c49edaaf96478a8bc411d17ece25f179b36b0766155b91a0974616c589ada7fec33ed20894b8bb4cb9afc28f0731b2c378d9bc70524a7ae9c273616d7a65b6f5b23b202c52839544bf9a1860b32ae461a12e800158c75ed2f7efeadc6e602a6f1f421a9cf499ef8985e60cd6fc9cbb8c14d8b469e22eb26029ba66e9450fe55e3490ba3b9a1fa2c068808c3c779a82cba5ed1f"}}, {0x4, &(0x7f0000004780)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f00000047c0)=@lang_id={0x4, 0x3, 0xf8b6}}]}) (async) ioctl$UBLK_U_IO_FETCH_REQ(r11, 0xc0107520, &(0x7f0000005840)={0x1, 0xeec, 0x0, &(0x7f0000004840)=@buf_4k="3f938276ae5ec1a6d90bf3e0f8bac75167c0c5410620cb948abad10fd24a062e9534a862f6b8b9c860cb6b9c98f94e59409286c4c2552fb19f3a35795636059ac39c6a449536f05535751c82e634c6cafcaa6197e41c21feb0042c3afd03be9094c680ee86dc58acb173a19a86a95873fee1a963743acd3796f81c584f9a37429e43e38ebdd66d87915a6cc423f761d72fe664ec87899fd72ed9daee5715593c327dd61bb6b4df709c9b1ee192c57497fe45b05ec8f755c0f65b4eb450520a807ef952f564d789de79d08105b8b29426a081f3876e71b9fc37f5abb34e082051ab87ce276bca8222fba653995233519e1ee87debba53e8e7c2133093e268822936a200c3fffad5094ba8e79c3c2e3944dc1ffeff06eb6acc752242dd952be719973454c2cb8e27293ef85bf43121e973107686010c867ad712d1eba6b824fff49faa9ad5dd15c2708c8655f57e94dae668ffb1f12275e695e3fad1d075c47b56d980fbb681ccdd7b913828fa25a6acc2ba14f76a7b348c08e5eb094c897445c878aedc2aba1482dc7fbcdae0f72a4ace8928cea79f8e543bac83d4202f2b5d7632c086fc339d4f2884d5d79e2d2a1eeef4eeca90ca7943e6a14f5e96ba4e36c7e2792f72d22964d025ac5100f0707f5d04143d128f7d373d085e32223339b3edeefe53eb76584e275d6164caf568a514ea9b10530d78a17ebeb6326872069d34cdd149a6a5213d2ef6a77264249da41d49d96368448b374ca4ce748d895bf02d326adc87dbfbbdf72e91638568dd3dfa3c7f937b6f805ebf0d775ced1b2d6f4fc852ba3a0a03d4ecbcf7f830f3b1597dc1e41afd43141bcc55d44e0c7975ba1a7aeb75604fe41cc0a0d7dac98a3d16e2169fc101d64d6167366347fa452cd442f66277ed2334fcecd45187a246d8cd865afe739e7fe9c62117b5363116fcc40d6bf46c64de90e489b1c906ba54f5f5592193586b19549cff2db010d4a2ecbbb2b575dc506c2326f45a42e9e53f13c235a88cdca3ac9f61fbc84205a09a28b31da0e7a2fae8fd05c8987522551a9510e2d352ebdb7515307c01384fbce04fa4d792c1b6c707ece83d1adc97c52ee69e9b797d2f119efbe23489455cc2b72f1e22169ccfc73fce6ab11d25d32c3f1e8290af26f14af994f8f4ecda44b28d892ee9820aa6ff46f2a25a666111ae206dcc8d38463e758ef2ea96ffec8bdb9876db901fc2a71af8181e67753d718a3ab2ba973979ea7c4cbab091e3e2b56ff47256ad176a618c8ffe77a05f9257791c2e9fe5b87d6483749e0b0fbdc0f740c746cc6c31f5d351b4425a52a76dabb4c5f1e32d0c1ce68fd9c525c78482997b7fd04bcfda1c4ada38f6d02d3855ab367b4fae75c7acdf5784f82c0ce0638f735a85db3ae485b797b82f7ce1b8a322fccbe4f63d456f8f42893c38b24c6c955280780c42a35a4f1e79c43eb452d8d77de6fe3d99c55c5181414bd38a8d7873521464ae8115a9f0013a02cb08e1db454c33368c223754ae5f44770b720f4f470765f20b708f021267a347bc555651a43a1a329d1984925eb477e771611198c983b5bda1995e81ece496cb20e13e7151af783c93256a822beba63065c235e9cafbe52be0ed011500c57709b1df2347681e4c326c922caae6d00ceebd8417bc7f72a68b7e683772b86f87488ac806b6f0ebf220c48e514bf21766cf0fb027f679242a800c5d18827d3673f685c59f5e4b24b995b3626e9b1d21279a5e06907f50f1624f91a5d83f99038c81e5005d6806d64b270c3638582337817e509397eed439f98ff26132b2d46ed26dc6e97b5227e94776d12dd6fcc6687315c46b6563ad7969a1b1f30ea2adbda467402dcd775eb266d69a560df14c9da19cfe944ae67be074e6532d09da4f965c4940a3e831a4629d75d5dfc37bde877dd3c4bd8ea60d8589be0a30da3a5a66a160258b3ea95ef86a54591b178e938bdf7800aa269a3308df965faac1394a6aba10e182e809150a1967bc8f13f35ff95a6ffe9eb967f9f6a77b1bee9dd3a92cc2ae4923e5296b9fe07319b7ae76e8466271df89b491918861cdb1e350f865eb30843784ed9881b4d6e41745d603fec9f0238768a854ce40960f43cacdcf27ad1f9e3abe98e8f86c20013449223dc20ea19890a2c155a8cd1c17943d2b0ca9d879dbd1f80042a39a2bdcbdfe7e1941ae33f8354a6c14cea6ba9345ac4920d6fe5f4443fcc1109928c81717799feefa32b6d07420915ceab83742117edcc58804cc1e7db6386ce347c56b24999d991cd8d395fb8c107d8425daa9b8793a129a574bbb8816966523f484c758d08c2cbb9bb174eab204b1fc735c18d66ec40790ce8dab81e1866ce7663f6cb896fe70988ee1c582f0d130107bfc25d84b92255b034016c555f05ea2132845959f81fb882113330f5abcafac215d820d78389b5a7e1283531dfa06410ac5f5f21b667be40b1b95476c6eb89366dfb7d1195bd7c975d3a202aab011721b7203a27075b3a0349cdd23527a185b9ff89e6a6cbcdaac4a562b609759b1419beee0a5e6881e230fa7888bf8ef7a66cd1a373ad580fb4fb4a4b8bed4a9b739873c6df5b4476741fe98be4bd47c1102fc7859bcefb839f187b39bd1d188973235e043784ad700fc09831cb214a50ca6dcd6b7cd564b7107ef469a7f76de3767cb9cacd78e75007b0e6d0f27ee7944de8d9635ba66733ae96003f2a1b7296263624af76fe46011a4326a8c40cbc7024c5c4d9299c2714e07f5d821696b227692adf0d2059bc771add8d604d353fbfde32cd2337570dadb61298139bf4d041ba71675b79d2407cc263af7122e7ab82e0e20a0249fb454b0e69e1bfc172f7584c2adce9b46e50dbad023e5d241bb12a9071a978ef240431fe063e3e501087be6b83b13115518e2a4210ebc35b51529eb39a2689fc4f5deee095494de0d7991702e3cb2327c11d97fc540d72b21662978f8cf977f37c3836f15619cd37ce3bc757d22feada2df2c7b47931f443e922731644f4c7481a45680d876e55415b35648a6d1b993b54c6f8c1f3ae77be5eb8bacde215fe25821ae4bffdb52b00ce8ff136ca7a5adae5a556d6ca03177133214131a9ba45b764ba9e8167150e7437837ab4911c8712c375b8e27da8ad3ae79e8a69b6c57a84b3fae61c8f8945f1a69b91ef167f32a03029c9677139d6cebc3ff008e042f4b25622c979ab4e678f4b4e69f944d8d59bb9e24ed3fc8649eede95f86ffbfd2a7e7d90b68be1039aa27311ab4bd305f2c2d733bcb40f497f240bdb8270715bd208a8eb43d2333910f53b01b6af5ff985bbb2b71c3fa24e9db4b7b3125d70df4844cd8e8a2f498e3dad6d1789c936bd339f0ad7624a4b13ec025f7fc171575c068195fbad8c59ebf80db974468cd5230f15b0ac27a907fff704d042dbc15c108f4693648bf40c4f3a5508ea3c5331b8f5596a088f04998999d8488f9010fe500629c679347f4203b02499cc94748fadf1da54d4ca5f2998e02fce884dd881fc895c777a8627d6d75094a8cb1507238182e37c1402a6f3508bc4d94ad97ab889dae91773c86f67a063f2415266263d8fb9e2f8574d1c904402643bcb633fbe1e0261b2ced2be217eacd09105ff234ef91d743ae4ab84195150cfe222ffde18f63d59c084f9df5c22d564044d95f3e7dcc5b45915ada771a46c0890bde2a8b962337100fdc57621621010bc1fff3d2a6a93b695993b8c6da6a2496e97b7fb62af9c57933cc578787963fc9a1ddb45228871681fc03dbe781d4749605827e0b35f1f4e73af8ccce245e0ceadf755bf9c8f4850643b50d0018f0150c79069c95cb9bc7181a0f9e52e66b158140fe77230d92a341c9e2dbda1464799570ce2d97956f60c1fcce241bd8eea3b552302baf41b37ee13703c89d65e95af5d6398f72d21a714fe60c3f06c1e615a54da71a3f51354c09e6e4a92628f11971382940fe083472ead96e8a421aec849e7b67ff44c3530c5d77ba14066deb9847f2b6fb5e8b98dd17f10f13b1d6f43076b7412165d4ba67d7399ec6b1922f19193f4568636ec9f2be7229f48f5d933a7470aa737818efdfd634fd1b20c7b50eea6b47ffb2a44d901474c151c9ff849156b09e38af16562739b5ff0d4b1e7ad6fd81c9e5c9104912a43539260f79912824b16f787da391ac2059fdf3f1b800aa881b044c69ed4c405defe5aaa5e3f2c6e785169a0768048b748f3eb34f90a6910d7d5813ede476ac02fca2a77a99954011d9d99b80c787ca6b83765ea41a483ca8e20f46ecb7361db52af7448c900b39e8989b6daa0128b011d8d756d79f5f6b9e9f4eb7003fb3d2b39c2dd9c9622a3bb53b80713bde25d9bf367e6124d01ce86c2359ef1f0d591b8406da38817b763625f842293377b9cf9e571c7f49b99242c4234feda902834cde14c09541b7d1532f3fa2a8405f0cf9783243f3f8d084d7f62aa3a655593f0b0bc360e0330a95bf1f495d7bee447c903e5f2d03e6de0c82b486ae7fc812ecf32f8853f4d07974bb1bd6e00863966b8fa3ff10b04156391a3303dcfb0ea1dba1bcfcb1600912b90b6b880fd6f21228b699f0a7ac84100889b06204cdc4002e7ebe41e6c63be6d07032eb31aa3c75faf7a806d889294f0e2b459458e4d171bc6e04635045820227331b1d3e090ee03d3c606a37f85c7ca618b3ef35313845c840ca2176293d42b5e1ab9c1672c592e3f59b967808ee2ddcc0ac83691707ab3fe6d68d5a9a391274d23b9d4f0931d38c3b5388ce779e6ad56c0d5f88b5fc4de909b5ab9622412fcf378f6c3e8e3edf4e8c33c3bde7bd32d1438c5880a1b075d1f7d2e7bc860de55423535e2ae86aa8669d83c6d7674d1fa3dcb1d644bb07872293824e72ded9db0e823af5a71354827ac42dce4f0587ff938efa603e44762d892901cdf39f0ed590ae8bde765414fe80b1d6ba18d128bf21a377b387c17b3fa23d2b5b4171ab09a15f3a4e9bb3e31b286734be4f32e4b5bdcdf1fbd0fbba85879f2de22ce703ba7733ddb50cd588621edcc8025741fe83adb04e1f6aa7f75b219b2b4615dcdc4f438d9dc9893c993dd13dd008d5c6b9e4d4c25f03af04563c3fe6f13d3df2a2836ded9a851ee9de8e76aa6a4cecffb5824e1cb44be43cc168f041654bcc5b08aaa4be05a9cc33b624fdfae28c026ec2a09a6dd6de243ecdf1b10229609c8749e86e867e0dcabc7fd64e912e5149e0562acdc146ad4e4af5c3c3eaa45dff59e2c355c8d5f4ff7733c057c1ea9ecdbb986b1dd3a689e25116d7cf58d8ee6490bd5953c2ce9d097fa38326015b44c1ec6f92ac87d82e84cbae540a8c75379a4bdbbd7e40ecd42f7606f7d0e19d585e2850b88b55e6e8cd63c6d00f57f088b31fac5970d8a3d203349226142b9e3e926e3d3cd5aa36b9b01b766304dbd979636153b78f18385df55db92012bb8bd3f299ece5d9f3efa1964e3dc7bb907eb7ce10ac895406ae90aeec795134e8ecc9c76742b0aeb382f26aef5b9bfd7a0eba926e02ddb56a3af254f31dfea451ab9c4329d8aec257ae3ada05797f64c81c58b63fb178814609ed50e9d1b1e64d98a1698ab426a91a0ae824d167bfbd241f89ec82f3cbfc085e96b67f1d81ff177273d59dc4b83063275da9fbc51cca0d6c81c10eeb67a3ad40e51720306464021c96d521c38e9ce01a4f3fb9f4757af9e918cbced1c4b500e60316ee7414f18e524d9ee76b7e993016319036fd288a522f0f3738035e3ac64b8dfb21e640943d26408d3a1f3fe86b38e21679611b4f16f992"}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000058c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x80, 0x1}}, 0x30) openat$nullb(0xffffffffffffff9c, &(0x7f0000005900), 0x301280, 0x0) 2.420273883s ago: executing program 3 (id=5618): memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) (fail_nth: 6) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) 2.152233525s ago: executing program 3 (id=5620): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x7}, {0x6, 0x8d, 0x0, 0x1}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x9, 0x46080) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x0, &(0x7f0000000180)=0x0) io_destroy(r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000040)={'sit0\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000000040)="14ee4403a7bf8adc35f39199177638011ba308a81f6401f8a7dea4888f301c34f2523a90", 0x24, r0}, 0x68) 1.261952379s ago: executing program 3 (id=5624): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) pselect6(0x40, &(0x7f0000000100)={0x0, 0x200000000000000, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 912.171742ms ago: executing program 8 (id=5626): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000380), 0x7, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x1}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x43, 0xa0, 0xe8, 0x98, 0x198, 0x178, 0x178, 0x198, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xc8, 0xe8, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@addrtype={{0x30}, {0x429, 0x0, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452200a44a3d28da04828d1768c081f126a6bb82700"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'team0\x00', &(0x7f0000001b80)=@ethtool_flash={0x4d, 0xea6, './sys/file0\x00'}}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=fscache']) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000280)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x4, 0xca}]}, 0x18}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r6, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xc}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x23b17066e335cce8, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x23b17066e335cce8, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r0], 0x16c}, 0x1, 0x0, 0x0, 0x317d8553534c7c4e}, 0xc000) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000300)=0x8) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)="02f61dedb5367eba5b5f092a1cb7232130120f44742e3be4948b1a4cfb231162b2e1d547d0baad3ad79691e8eb8606daf4fcf5", 0x33) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000007c0)={"bbb8f109da509c73ed71629510098567", 0x0, 0x0, {0x32, 0x120}, {0x0, 0x1}, 0x69f, [0xffffffffffffffff, 0x80000001, 0x9d25, 0x2, 0x552694c1, 0x5, 0xe6, 0xe0, 0xe, 0x8, 0x6, 0xaf36, 0x8, 0x100000000, 0x7, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r9, 0x50009418, &(0x7f0000000b80)={{r9}, r10, 0x16, @unused=[0x1, 0x7, 0x0, 0x2], @subvolid=0x4}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000680)={'sit0\x00', &(0x7f00000005c0)={@loopback, 0x1, 0x0, 0x80, 0x0, [{@dev}, {@multicast1}, {@multicast1}, {@private}, {@loopback}, {@empty}, {@broadcast}, {@multicast2}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000680)={'sit0\x00', &(0x7f00000005c0)={@loopback, 0x1, 0x0, 0x80, 0x0, [{@dev}, {@multicast1}, {@multicast1}, {@private}, {@loopback}, {@empty}, {@broadcast}, {@multicast2}]}}) 641.255079ms ago: executing program 8 (id=5627): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0xc4, r2, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1e8f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1ff0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x146a}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4844}, 0x20008011) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(r7, 0xaea2, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x10, 0x0, 0xdb57}, {0x10, 0x0, 0x8}]}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000140)={{@local, 0x5}, @any, 0x2, 0xf12, 0x40, 0x5, 0x79, 0xe, 0x2}) sendto$packet(r1, &(0x7f0000000000)="09000000e700140000007e7bfbf788a83baa9900d6f10806950088a8000088a8", 0x20, 0x4042810, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0x8, 0x6, @broadcast}, 0x14) socket$key(0xf, 0x3, 0x2) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040007"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x8, 0x0, 0x3}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r10], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 482.945343ms ago: executing program 8 (id=5628): memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) (fail_nth: 7) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) 302.423229ms ago: executing program 1 (id=5629): ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f00000001c0)={0x480000, 0xfffffa9b, 0xf, 0xaa1, 0x5d}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x40, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x24, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x10, 0x1c, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x8000000000000000}]}]}, @nested={0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000005b00)={'syz', 0x2}, &(0x7f0000005b40)='(\x94\xb7aE)', 0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f00000002c0)=0x80000000, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="280000001100010000000000ffdbdf03000000000000000056ccabd869c2033840919fdc5a8d2500"], 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fe8000/0x14000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x5f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='sf\xe6\x9cM\xa7\xa2.\xc8\x13\xf1\x86\xf6@\xce\xe0\xa4\xf7\xe14_\xb6\xa2\xc9\x11\x1e\xbe\xe8/\x1e\x01\f\x90+\xbfI\xf40\xe0<\xd9H\xa2\xc3\xf4\x1e\xcd\xb7\xec\xb7\xfc\x93\x1ce\xa3\t\x00a\xcdi\xa5#LZ\xdf\xe0\x19\x83\x17(m\xb9g90\xf9b\xa2\xa2\xbe\x161c:2\xd3\x17\x8as\x8d\x7f\xa1\xe0\xb6;\xd9\xe3\x8c\xfd\xbb\xd9', 0x0, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x118, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xe8, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xfffff801}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2f, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3f5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xa46f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0xd47}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xda4229b7, 0xfffffc38}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x4}}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x84}}, @IFLA_VLAN_QOS_MAPPING={0x5, 0x1, {0x6ea, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x96ce, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe0000000, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffb, 0xffff}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}]}, 0x118}}, 0x4000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4000, r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6gre0\x00', r9, 0x2f, 0x0, 0x5, 0x80000000, 0x5a, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x10, 0x8, 0x1, 0x10000}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x10, '\x00', r11, r12, 0x1, 0x0, 0x5}, 0x50) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @local}, 0x71, r9}) 302.118368ms ago: executing program 8 (id=5630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000140)={0x5, r0, 0x9, {0x0, 0x6}, 0x3}, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000005c001a8006000000010000005000058024000180080001000100000008000200000000000800030000ffff0008000400", @ANYRES32=r3, @ANYBLOB="2800038008000100010000100a0002007a112251445500000800030000000000080004"], 0x7c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'pim6reg1\x00', @multicast}) close(r0) 181.51074ms ago: executing program 3 (id=5631): syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000c00), 0x0) 131.871261ms ago: executing program 3 (id=5632): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x136, &(0x7f0000000600)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "73dd00", 0x100, 0x3a, 0x0, @mcast1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x39, {0xe, 0x6, "1b737b", 0x3, 0x11, 0x0, @loopback, @private0, [@dstopts={0x2b}, @srh={0xff, 0xc, 0x4, 0x6, 0x97, 0x10, 0xfffe, [@private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}], "73845cc31e379854fe07eab468c992ea3b3af1bf2f30d1b7470d2f86b7699a898af2df0227159b08e8703d79c26a1d3bf703e4585cd65b22a55cbcf0e5c6be7259a6097fcaf2f8b5885ffcfddd6496219f71862e886a7aef36bc4de52e47f700"}}}}}}}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1d1, 0x0, 0x0, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x0) 61.227197ms ago: executing program 8 (id=5633): syz_open_dev$sndmidi(&(0x7f0000000000), 0xd, 0x88000) (fail_nth: 4) 60.933264ms ago: executing program 3 (id=5634): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fanotify_init(0x0, 0x80000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x1, 0x0, &(0x7f0000000780)) fanotify_mark(r1, 0x60e, 0x48000030, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xa3e}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x2, 0x3}, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 0s ago: executing program 8 (id=5635): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x3, 0x2, 0x9}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) (async) ioctl(r2, 0x8b32, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESDEC=r1, @ANYBLOB="010029bd7200030000003900000008000300", @ANYRESHEX=r3, @ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 8 (id=5636): syz_open_dev$sndmidi(&(0x7f0000000000), 0xd, 0x8803f) kernel console output (not intermixed with test programs): : 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 845.177682][T27328] RBP: 00007fd827d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 845.177692][T27328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 845.177700][T27328] R13: 00007fd827026038 R14: 00007fd827025fa0 R15: 00007ffcbf4481f8 [ 845.177720][T27328] [ 845.330558][T27330] FAULT_INJECTION: forcing a failure. [ 845.330558][T27330] name failslab, interval 1, probability 0, space 0, times 0 [ 845.337517][T27330] CPU: 3 UID: 0 PID: 27330 Comm: syz.1.5293 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.337547][T27330] Tainted: [L]=SOFTLOCKUP [ 845.337554][T27330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 845.337565][T27330] Call Trace: [ 845.337572][T27330] [ 845.337580][T27330] dump_stack_lvl+0x100/0x190 [ 845.337609][T27330] should_fail_ex.cold+0x5/0xa [ 845.337632][T27330] should_failslab+0xc2/0x120 [ 845.337656][T27330] __kvmalloc_node_noprof+0x116/0x970 [ 845.337677][T27330] ? stack_trace_save+0x8e/0xc0 [ 845.337711][T27330] ? seq_read_iter+0x819/0x1270 [ 845.337733][T27330] seq_read_iter+0x819/0x1270 [ 845.337749][T27330] ? kasan_save_stack+0x3f/0x50 [ 845.337771][T27330] ? kasan_save_track+0x14/0x30 [ 845.337792][T27330] ? __kasan_kmalloc+0xaa/0xb0 [ 845.337811][T27330] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 845.337826][T27330] ? ima_calc_file_hash+0x1e3/0x380 [ 845.337852][T27330] ? process_measurement+0xdfe/0x2350 [ 845.337870][T27330] ? path_openat+0x985/0x4280 [ 845.337888][T27330] ? __x64_sys_openat+0x12d/0x210 [ 845.337913][T27330] kernfs_fop_read_iter+0x46c/0x610 [ 845.337942][T27330] __kernel_read+0x397/0xad0 [ 845.337969][T27330] ? __pfx___kernel_read+0x10/0x10 [ 845.338013][T27330] integrity_kernel_read+0x7e/0xb0 [ 845.338037][T27330] ? __pfx_integrity_kernel_read+0x10/0x10 [ 845.338060][T27330] ? ima_calc_file_hash_tfm+0x236/0x350 [ 845.338084][T27330] ima_calc_file_hash_tfm+0x25e/0x350 [ 845.338102][T27330] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 845.338148][T27330] ? ima_alloc_tfm+0x21a/0x2e0 [ 845.338166][T27330] ? kernfs_iop_getattr+0xc4/0xf0 [ 845.338186][T27330] ima_calc_file_hash+0x1e3/0x380 [ 845.338206][T27330] ima_collect_measurement+0x94f/0xb30 [ 845.338233][T27330] ? __pfx_ima_collect_measurement+0x10/0x10 [ 845.338279][T27330] ? vfs_getxattr_alloc+0xec/0x350 [ 845.338305][T27330] ? ima_get_hash_algo+0x241/0x400 [ 845.338336][T27330] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 845.338367][T27330] ? process_measurement+0xdfe/0x2350 [ 845.338384][T27330] process_measurement+0xdfe/0x2350 [ 845.338409][T27330] ? __pfx_process_measurement+0x10/0x10 [ 845.338437][T27330] ? find_held_lock+0x2b/0x80 [ 845.338455][T27330] ? kernfs_fop_open+0x887/0xd50 [ 845.338479][T27330] ? kernfs_fop_open+0x887/0xd50 [ 845.338523][T27330] ? kernfs_put_active+0x93/0xe0 [ 845.338545][T27330] ? kernfs_fop_open+0x3da/0xd50 [ 845.338574][T27330] ima_file_check+0xc3/0x110 [ 845.338595][T27330] ? __pfx_ima_file_check+0x10/0x10 [ 845.338621][T27330] security_file_post_open+0xc4/0x210 [ 845.338650][T27330] path_openat+0x985/0x4280 [ 845.338681][T27330] ? __pfx_path_openat+0x10/0x10 [ 845.338708][T27330] do_file_open+0x20e/0x430 [ 845.338730][T27330] ? __pfx_do_file_open+0x10/0x10 [ 845.338759][T27330] ? __pfx_kfree_link+0x10/0x10 [ 845.338783][T27330] ? alloc_fd+0x471/0x7a0 [ 845.338807][T27330] ? do_getname+0x191/0x390 [ 845.338834][T27330] do_sys_openat2+0x10f/0x1e0 [ 845.338862][T27330] ? __pfx_do_sys_openat2+0x10/0x10 [ 845.338887][T27330] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 845.338914][T27330] ? __fget_files+0x21f/0x3d0 [ 845.338938][T27330] __x64_sys_openat+0x12d/0x210 [ 845.338962][T27330] ? __pfx___x64_sys_openat+0x10/0x10 [ 845.338984][T27330] ? ksys_write+0x1ac/0x250 [ 845.339010][T27330] do_syscall_64+0x115/0x870 [ 845.339034][T27330] ? clear_bhb_loop+0x70/0xc0 [ 845.339057][T27330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.339076][T27330] RIP: 0033:0x7fd826d9e0d9 [ 845.339093][T27330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.339110][T27330] RSP: 002b:00007fd827d3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 845.339129][T27330] RAX: ffffffffffffffda RBX: 00007fd827025fa0 RCX: 00007fd826d9e0d9 [ 845.339140][T27330] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 845.339151][T27330] RBP: 00007fd827d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 845.339162][T27330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 845.339173][T27330] R13: 00007fd827026038 R14: 00007fd827025fa0 R15: 00007ffcbf4481f8 [ 845.339199][T27330] [ 845.449362][T27337] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 845.495303][T27343] fuse: fd is not a fuse device [ 845.628099][T27355] veth0_to_team: entered promiscuous mode [ 845.632836][T27355] batadv0: entered promiscuous mode [ 845.641081][T27355] veth0_to_team: left promiscuous mode [ 845.650813][T27355] batadv0: left promiscuous mode [ 845.716438][T27360] nvme nvme0: rdma connection establishment failed (-104) [ 845.937032][T27377] FAULT_INJECTION: forcing a failure. [ 845.937032][T27377] name failslab, interval 1, probability 0, space 0, times 0 [ 845.942514][T27377] CPU: 3 UID: 0 PID: 27377 Comm: syz.6.5308 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.942543][T27377] Tainted: [L]=SOFTLOCKUP [ 845.942550][T27377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 845.942561][T27377] Call Trace: [ 845.942567][T27377] [ 845.942575][T27377] dump_stack_lvl+0x100/0x190 [ 845.942603][T27377] should_fail_ex.cold+0x5/0xa [ 845.942627][T27377] should_failslab+0xc2/0x120 [ 845.942651][T27377] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 845.942675][T27377] ? ima_collect_measurement+0x531/0xb30 [ 845.942701][T27377] krealloc_node_align_noprof+0x321/0x3e0 [ 845.942727][T27377] ima_collect_measurement+0x531/0xb30 [ 845.942760][T27377] ? __pfx_ima_collect_measurement+0x10/0x10 [ 845.942805][T27377] ? vfs_getxattr_alloc+0xec/0x350 [ 845.942833][T27377] ? ima_get_hash_algo+0x241/0x400 [ 845.942859][T27377] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 845.942890][T27377] ? process_measurement+0xdfe/0x2350 [ 845.942907][T27377] process_measurement+0xdfe/0x2350 [ 845.942933][T27377] ? __pfx_process_measurement+0x10/0x10 [ 845.942961][T27377] ? find_held_lock+0x2b/0x80 [ 845.942978][T27377] ? kernfs_fop_open+0x887/0xd50 [ 845.943004][T27377] ? kernfs_fop_open+0x887/0xd50 [ 845.943048][T27377] ? kernfs_put_active+0x93/0xe0 [ 845.943068][T27377] ? kernfs_fop_open+0x3da/0xd50 [ 845.943096][T27377] ima_file_check+0xc3/0x110 [ 845.943117][T27377] ? __pfx_ima_file_check+0x10/0x10 [ 845.943141][T27377] security_file_post_open+0xc4/0x210 [ 845.943167][T27377] path_openat+0x985/0x4280 [ 845.943198][T27377] ? __pfx_path_openat+0x10/0x10 [ 845.943222][T27377] do_file_open+0x20e/0x430 [ 845.943241][T27377] ? __pfx_do_file_open+0x10/0x10 [ 845.943266][T27377] ? __pfx_kfree_link+0x10/0x10 [ 845.943283][T27377] ? alloc_fd+0x471/0x7a0 [ 845.943297][T27377] ? do_getname+0x191/0x390 [ 845.943314][T27377] do_sys_openat2+0x10f/0x1e0 [ 845.943329][T27377] ? __pfx_do_sys_openat2+0x10/0x10 [ 845.943344][T27377] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 845.943362][T27377] ? __fget_files+0x21f/0x3d0 [ 845.943377][T27377] __x64_sys_openat+0x12d/0x210 [ 845.943392][T27377] ? __pfx___x64_sys_openat+0x10/0x10 [ 845.943422][T27377] ? ksys_write+0x1ac/0x250 [ 845.943438][T27377] do_syscall_64+0x115/0x870 [ 845.943453][T27377] ? clear_bhb_loop+0x70/0xc0 [ 845.943468][T27377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.943479][T27377] RIP: 0033:0x7f8e64d9e0d9 [ 845.943490][T27377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.943515][T27377] RSP: 002b:00007f8e65cfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 845.943529][T27377] RAX: ffffffffffffffda RBX: 00007f8e65025fa0 RCX: 00007f8e64d9e0d9 [ 845.943536][T27377] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 845.943542][T27377] RBP: 00007f8e65cfc090 R08: 0000000000000000 R09: 0000000000000000 [ 845.943549][T27377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 845.943556][T27377] R13: 00007f8e65026038 R14: 00007f8e65025fa0 R15: 00007ffd5bc9f888 [ 845.943570][T27377] [ 845.984630][T27379] fuse: fd is not a fuse device [ 846.017086][T27382] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5310'. [ 846.128349][T27388] fuse: fd is not a fuse device [ 846.211393][T27392] bond6: entered promiscuous mode [ 846.216235][T27392] 8021q: adding VLAN 0 to HW filter on device bond6 [ 846.304895][T27399] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5315'. [ 846.333156][T27399] bond1: Invalid ad_actor_system MAC address. [ 846.335165][T27399] bond1: option ad_actor_system: invalid value (65541) [ 846.339898][T27399] bond1 (unregistering): Released all slaves [ 846.517767][T27407] netlink: 'syz.5.5317': attribute type 4 has an invalid length. [ 846.520350][T27407] netlink: 'syz.5.5317': attribute type 8 has an invalid length. [ 846.525012][T27407] netlink: 212 bytes leftover after parsing attributes in process `syz.5.5317'. [ 846.533899][T27409] FAULT_INJECTION: forcing a failure. [ 846.533899][T27409] name failslab, interval 1, probability 0, space 0, times 0 [ 846.539624][T27409] CPU: 2 UID: 0 PID: 27409 Comm: syz.8.5319 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.539652][T27409] Tainted: [L]=SOFTLOCKUP [ 846.539658][T27409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 846.539668][T27409] Call Trace: [ 846.539691][T27409] [ 846.539698][T27409] dump_stack_lvl+0x100/0x190 [ 846.539776][T27409] should_fail_ex.cold+0x5/0xa [ 846.539808][T27409] should_failslab+0xc2/0x120 [ 846.539849][T27409] kmem_cache_alloc_noprof+0x91/0x6a0 [ 846.539872][T27409] ? audit_log_start+0x29d/0x930 [ 846.539902][T27409] audit_log_start+0x29d/0x930 [ 846.539923][T27409] ? __pfx_audit_log_start+0x10/0x10 [ 846.539952][T27409] integrity_audit_message+0x10c/0x4f0 [ 846.539989][T27409] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 846.540023][T27409] ? __pfx_integrity_audit_message+0x10/0x10 [ 846.540050][T27409] ? take_dentry_name_snapshot+0x310/0x7c0 [ 846.540079][T27409] integrity_audit_msg+0x41/0x60 [ 846.540107][T27409] ima_collect_measurement+0x79a/0xb30 [ 846.540136][T27409] ? __pfx_ima_collect_measurement+0x10/0x10 [ 846.540200][T27409] ? vfs_getxattr_alloc+0xec/0x350 [ 846.540228][T27409] ? ima_get_hash_algo+0x241/0x400 [ 846.540251][T27409] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 846.540276][T27409] ? process_measurement+0xdfe/0x2350 [ 846.540291][T27409] process_measurement+0xdfe/0x2350 [ 846.540317][T27409] ? __pfx_process_measurement+0x10/0x10 [ 846.540344][T27409] ? find_held_lock+0x2b/0x80 [ 846.540371][T27409] ? kernfs_fop_open+0x887/0xd50 [ 846.540407][T27409] ? kernfs_fop_open+0x887/0xd50 [ 846.540447][T27409] ? kernfs_put_active+0x93/0xe0 [ 846.540467][T27409] ? kernfs_fop_open+0x3da/0xd50 [ 846.540495][T27409] ima_file_check+0xc3/0x110 [ 846.540514][T27409] ? __pfx_ima_file_check+0x10/0x10 [ 846.540539][T27409] security_file_post_open+0xc4/0x210 [ 846.540585][T27409] path_openat+0x985/0x4280 [ 846.540616][T27409] ? __pfx_path_openat+0x10/0x10 [ 846.540643][T27409] do_file_open+0x20e/0x430 [ 846.540664][T27409] ? __pfx_do_file_open+0x10/0x10 [ 846.540692][T27409] ? __pfx_kfree_link+0x10/0x10 [ 846.540721][T27409] ? alloc_fd+0x471/0x7a0 [ 846.540744][T27409] ? do_getname+0x191/0x390 [ 846.540769][T27409] do_sys_openat2+0x10f/0x1e0 [ 846.540792][T27409] ? __pfx_do_sys_openat2+0x10/0x10 [ 846.540816][T27409] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 846.540905][T27409] ? __fget_files+0x21f/0x3d0 [ 846.540928][T27409] __x64_sys_openat+0x12d/0x210 [ 846.540953][T27409] ? __pfx___x64_sys_openat+0x10/0x10 [ 846.540975][T27409] ? ksys_write+0x1ac/0x250 [ 846.541002][T27409] do_syscall_64+0x115/0x870 [ 846.541036][T27409] ? clear_bhb_loop+0x70/0xc0 [ 846.541059][T27409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.541078][T27409] RIP: 0033:0x7f946f39e0d9 [ 846.541095][T27409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.541112][T27409] RSP: 002b:00007f94702c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 846.541139][T27409] RAX: ffffffffffffffda RBX: 00007f946f625fa0 RCX: 00007f946f39e0d9 [ 846.541151][T27409] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 846.541162][T27409] RBP: 00007f94702c9090 R08: 0000000000000000 R09: 0000000000000000 [ 846.541173][T27409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 846.541183][T27409] R13: 00007f946f626038 R14: 00007f946f625fa0 R15: 00007ffc4d67f8d8 [ 846.541208][T27409] [ 846.903808][T27424] ubi0: attaching mtd0 [ 846.907184][T27424] ubi0: scanning is finished [ 846.910307][T27424] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 846.980295][T27435] smpboot: CPU 1 is now offline [ 847.106915][T27449] FAULT_INJECTION: forcing a failure. [ 847.106915][T27449] name failslab, interval 1, probability 0, space 0, times 0 [ 847.111148][T27449] CPU: 3 UID: 0 PID: 27449 Comm: syz.6.5331 Tainted: G L syzkaller #0 PREEMPT(full) [ 847.111167][T27449] Tainted: [L]=SOFTLOCKUP [ 847.111171][T27449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 847.111178][T27449] Call Trace: [ 847.111183][T27449] [ 847.111189][T27449] dump_stack_lvl+0x100/0x190 [ 847.111209][T27449] should_fail_ex.cold+0x5/0xa [ 847.111225][T27449] should_failslab+0xc2/0x120 [ 847.111243][T27449] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 847.111259][T27449] ? __alloc_skb+0x140/0x710 [ 847.111305][T27449] __alloc_skb+0x140/0x710 [ 847.111318][T27449] ? __alloc_skb+0x5b7/0x710 [ 847.111331][T27449] ? __pfx___alloc_skb+0x10/0x10 [ 847.111346][T27449] ? lockdep_init_map_type+0x5c/0x250 [ 847.111364][T27449] audit_log_start+0x350/0x930 [ 847.111382][T27449] ? __pfx_audit_log_start+0x10/0x10 [ 847.111400][T27449] integrity_audit_message+0x10c/0x4f0 [ 847.111418][T27449] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 847.111436][T27449] ? __pfx_integrity_audit_message+0x10/0x10 [ 847.111454][T27449] ? take_dentry_name_snapshot+0x310/0x7c0 [ 847.111473][T27449] integrity_audit_msg+0x41/0x60 [ 847.111491][T27449] ima_collect_measurement+0x79a/0xb30 [ 847.111509][T27449] ? __pfx_ima_collect_measurement+0x10/0x10 [ 847.111536][T27449] ? vfs_getxattr_alloc+0xec/0x350 [ 847.111553][T27449] ? ima_get_hash_algo+0x241/0x400 [ 847.111571][T27449] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 847.111592][T27449] ? process_measurement+0xdfe/0x2350 [ 847.111603][T27449] process_measurement+0xdfe/0x2350 [ 847.111620][T27449] ? __pfx_process_measurement+0x10/0x10 [ 847.111637][T27449] ? find_held_lock+0x2b/0x80 [ 847.111647][T27449] ? kernfs_fop_open+0x887/0xd50 [ 847.111665][T27449] ? kernfs_fop_open+0x887/0xd50 [ 847.111691][T27449] ? kernfs_put_active+0x93/0xe0 [ 847.111706][T27449] ? kernfs_fop_open+0x3da/0xd50 [ 847.111725][T27449] ima_file_check+0xc3/0x110 [ 847.111737][T27449] ? __pfx_ima_file_check+0x10/0x10 [ 847.111753][T27449] security_file_post_open+0xc4/0x210 [ 847.111787][T27449] path_openat+0x985/0x4280 [ 847.111806][T27449] ? __pfx_path_openat+0x10/0x10 [ 847.111823][T27449] do_file_open+0x20e/0x430 [ 847.111836][T27449] ? __pfx_do_file_open+0x10/0x10 [ 847.111854][T27449] ? __pfx_kfree_link+0x10/0x10 [ 847.111868][T27449] ? alloc_fd+0x471/0x7a0 [ 847.111885][T27449] ? do_getname+0x191/0x390 [ 847.111902][T27449] do_sys_openat2+0x10f/0x1e0 [ 847.111918][T27449] ? __pfx_do_sys_openat2+0x10/0x10 [ 847.111934][T27449] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 847.111952][T27449] ? __fget_files+0x21f/0x3d0 [ 847.111966][T27449] __x64_sys_openat+0x12d/0x210 [ 847.111982][T27449] ? __pfx___x64_sys_openat+0x10/0x10 [ 847.111997][T27449] ? ksys_write+0x1ac/0x250 [ 847.112012][T27449] do_syscall_64+0x115/0x870 [ 847.112028][T27449] ? clear_bhb_loop+0x70/0xc0 [ 847.112043][T27449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.112059][T27449] RIP: 0033:0x7f8e64d9e0d9 [ 847.112074][T27449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.112087][T27449] RSP: 002b:00007f8e65cfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 847.112102][T27449] RAX: ffffffffffffffda RBX: 00007f8e65025fa0 RCX: 00007f8e64d9e0d9 [ 847.112112][T27449] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 847.112123][T27449] RBP: 00007f8e65cfc090 R08: 0000000000000000 R09: 0000000000000000 [ 847.112133][T27449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 847.112143][T27449] R13: 00007f8e65026038 R14: 00007f8e65025fa0 R15: 00007ffd5bc9f888 [ 847.112167][T27449] [ 847.253571][T27424] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 847.272900][T27435] smpboot: CPU 3 is now offline [ 847.360970][T27437] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 847.408388][T27437] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 847.514660][T27463] fuse: fd is not a fuse device [ 847.560919][T27467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5337'. [ 847.633580][T27476] FAULT_INJECTION: forcing a failure. [ 847.633580][T27476] name failslab, interval 1, probability 0, space 0, times 0 [ 847.638603][T27476] CPU: 1 UID: 0 PID: 27476 Comm: syz.1.5341 Tainted: G L syzkaller #0 PREEMPT(full) [ 847.638630][T27476] Tainted: [L]=SOFTLOCKUP [ 847.638636][T27476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 847.638645][T27476] Call Trace: [ 847.638651][T27476] [ 847.638658][T27476] dump_stack_lvl+0x100/0x190 [ 847.638685][T27476] should_fail_ex.cold+0x5/0xa [ 847.638707][T27476] should_failslab+0xc2/0x120 [ 847.638729][T27476] __kmalloc_cache_noprof+0x91/0x6c0 [ 847.638746][T27476] ? do_raw_spin_unlock+0x145/0x1e0 [ 847.638775][T27476] ? inode_doinit_use_xattr+0x54/0x330 [ 847.638801][T27476] inode_doinit_use_xattr+0x54/0x330 [ 847.638824][T27476] inode_doinit_with_dentry+0x10e6/0x1320 [ 847.638853][T27476] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 847.638876][T27476] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 847.638918][T27476] selinux_d_instantiate+0x26/0x40 [ 847.638941][T27476] security_d_instantiate+0x14c/0x1b0 [ 847.638962][T27476] d_splice_alias_ops+0xd7/0x15c0 [ 847.638987][T27476] ? rcu_is_watching+0x12/0xc0 [ 847.639021][T27476] ? __up_read+0x333/0x980 [ 847.639041][T27476] ? __pfx_d_splice_alias_ops+0x10/0x10 [ 847.639059][T27476] ? kernfs_iop_lookup+0x234/0x2d0 [ 847.639072][T27476] ? kernfs_iop_lookup+0x234/0x2d0 [ 847.639089][T27476] kernfs_iop_lookup+0x23f/0x2d0 [ 847.639104][T27476] __lookup_slow+0x155/0x320 [ 847.639122][T27476] lookup_slow+0x50/0x70 [ 847.639138][T27476] link_path_walk+0x1377/0x1cc0 [ 847.639161][T27476] path_openat+0x1c9/0x4280 [ 847.639173][T27476] ? __kasan_slab_alloc+0x89/0x90 [ 847.639188][T27476] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 847.639202][T27476] ? do_getname+0x35/0x390 [ 847.639216][T27476] ? __x64_sys_openat+0x12d/0x210 [ 847.639236][T27476] ? __pfx_path_openat+0x10/0x10 [ 847.639252][T27476] do_file_open+0x20e/0x430 [ 847.639266][T27476] ? __pfx_do_file_open+0x10/0x10 [ 847.639284][T27476] ? __pfx_kfree_link+0x10/0x10 [ 847.639298][T27476] ? alloc_fd+0x471/0x7a0 [ 847.639312][T27476] ? do_getname+0x191/0x390 [ 847.639329][T27476] do_sys_openat2+0x10f/0x1e0 [ 847.639344][T27476] ? __pfx_do_sys_openat2+0x10/0x10 [ 847.639360][T27476] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 847.639379][T27476] ? __fget_files+0x21f/0x3d0 [ 847.639393][T27476] __x64_sys_openat+0x12d/0x210 [ 847.639409][T27476] ? __pfx___x64_sys_openat+0x10/0x10 [ 847.639423][T27476] ? ksys_write+0x1ac/0x250 [ 847.639438][T27476] do_syscall_64+0x115/0x870 [ 847.639454][T27476] ? clear_bhb_loop+0x70/0xc0 [ 847.639468][T27476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.639480][T27476] RIP: 0033:0x7fd826d9e0d9 [ 847.639491][T27476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.639503][T27476] RSP: 002b:00007fd827d3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 847.639515][T27476] RAX: ffffffffffffffda RBX: 00007fd827025fa0 RCX: 00007fd826d9e0d9 [ 847.639522][T27476] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 847.639529][T27476] RBP: 00007fd827d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 847.639536][T27476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 847.639542][T27476] R13: 00007fd827026038 R14: 00007fd827025fa0 R15: 00007ffcbf4481f8 [ 847.639557][T27476] [ 847.785003][T27481] xt_nfacct: accounting object `syz0' does not exist [ 847.834867][T27488] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5344'. [ 847.838754][T27488] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5344'. [ 847.841259][T27485] »»»»»»: renamed from vlan0 (while UP) [ 847.950182][T27496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5347'. [ 848.058890][T27509] FAULT_INJECTION: forcing a failure. [ 848.058890][T27509] name failslab, interval 1, probability 0, space 0, times 0 [ 848.066828][T27509] CPU: 0 UID: 0 PID: 27509 Comm: syz.6.5351 Tainted: G L syzkaller #0 PREEMPT(full) [ 848.066847][T27509] Tainted: [L]=SOFTLOCKUP [ 848.066852][T27509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 848.066858][T27509] Call Trace: [ 848.066863][T27509] [ 848.066867][T27509] dump_stack_lvl+0x100/0x190 [ 848.066888][T27509] should_fail_ex.cold+0x5/0xa [ 848.066904][T27509] should_failslab+0xc2/0x120 [ 848.066922][T27509] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 848.066937][T27509] ? __d_alloc+0x35/0xa50 [ 848.066955][T27509] __d_alloc+0x35/0xa50 [ 848.066970][T27509] d_alloc_parallel+0x105/0x14b0 [ 848.066993][T27509] ? __pfx_d_alloc_parallel+0x10/0x10 [ 848.067012][T27509] ? __pfx___might_resched+0x10/0x10 [ 848.067039][T27509] ? find_held_lock+0x2b/0x80 [ 848.067052][T27509] ? down_read+0x13b/0x4c0 [ 848.067071][T27509] ? __pfx_down_read+0x10/0x10 [ 848.067089][T27509] __lookup_slow+0x98/0x320 [ 848.067106][T27509] lookup_slow+0x50/0x70 [ 848.067122][T27509] link_path_walk+0x1712/0x1cc0 [ 848.067146][T27509] path_openat+0x1c9/0x4280 [ 848.067157][T27509] ? __kasan_slab_alloc+0x89/0x90 [ 848.067172][T27509] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 848.067185][T27509] ? do_getname+0x35/0x390 [ 848.067199][T27509] ? __x64_sys_openat+0x12d/0x210 [ 848.067219][T27509] ? __pfx_path_openat+0x10/0x10 [ 848.067236][T27509] do_file_open+0x20e/0x430 [ 848.067249][T27509] ? __pfx_do_file_open+0x10/0x10 [ 848.067267][T27509] ? __pfx_kfree_link+0x10/0x10 [ 848.067282][T27509] ? alloc_fd+0x471/0x7a0 [ 848.067296][T27509] ? do_getname+0x191/0x390 [ 848.067313][T27509] do_sys_openat2+0x10f/0x1e0 [ 848.067328][T27509] ? __pfx_do_sys_openat2+0x10/0x10 [ 848.067343][T27509] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 848.067360][T27509] ? __fget_files+0x21f/0x3d0 [ 848.067375][T27509] __x64_sys_openat+0x12d/0x210 [ 848.067390][T27509] ? __pfx___x64_sys_openat+0x10/0x10 [ 848.067405][T27509] ? ksys_write+0x1ac/0x250 [ 848.067421][T27509] do_syscall_64+0x115/0x870 [ 848.067436][T27509] ? clear_bhb_loop+0x70/0xc0 [ 848.067451][T27509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.067462][T27509] RIP: 0033:0x7f8e64d9e0d9 [ 848.067473][T27509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.067485][T27509] RSP: 002b:00007f8e65cfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 848.067496][T27509] RAX: ffffffffffffffda RBX: 00007f8e65025fa0 RCX: 00007f8e64d9e0d9 [ 848.067504][T27509] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 848.067511][T27509] RBP: 00007f8e65cfc090 R08: 0000000000000000 R09: 0000000000000000 [ 848.067518][T27509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 848.067524][T27509] R13: 00007f8e65026038 R14: 00007f8e65025fa0 R15: 00007ffd5bc9f888 [ 848.067539][T27509] [ 848.175967][ T8542] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 848.196830][T27511] overlayfs: failed to resolve './file1/file0': -2 [ 848.334094][ T8542] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 848.337993][T27519] syz.6.5355 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 848.339819][ T8542] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.347291][ T8542] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.351520][ T8542] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 848.357071][ T8542] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.363655][ T8542] usb 10-1: config 0 descriptor?? [ 848.407019][T27521] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 848.460167][T27523] jffs2: notice: (27523) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 848.603227][ T5872] IPVS: starting estimator thread 0... [ 848.642139][T27536] FAULT_INJECTION: forcing a failure. [ 848.642139][T27536] name failslab, interval 1, probability 0, space 0, times 0 [ 848.646887][T27536] CPU: 2 UID: 0 PID: 27536 Comm: syz.8.5361 Tainted: G L syzkaller #0 PREEMPT(full) [ 848.646917][T27536] Tainted: [L]=SOFTLOCKUP [ 848.646924][T27536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 848.646935][T27536] Call Trace: [ 848.646942][T27536] [ 848.646949][T27536] dump_stack_lvl+0x100/0x190 [ 848.646981][T27536] should_fail_ex.cold+0x5/0xa [ 848.647005][T27536] should_failslab+0xc2/0x120 [ 848.647031][T27536] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 848.647055][T27536] ? alloc_inode+0x183/0x250 [ 848.647085][T27536] alloc_inode+0x183/0x250 [ 848.647109][T27536] iget_locked+0x1d9/0x6d0 [ 848.647136][T27536] ? __pfx_iget_locked+0x10/0x10 [ 848.647160][T27536] ? kernfs_root+0xee/0x2a0 [ 848.647179][T27536] ? kernfs_root+0xee/0x2a0 [ 848.647204][T27536] kernfs_get_inode+0x46/0x470 [ 848.647225][T27536] kernfs_iop_lookup+0x1a7/0x2d0 [ 848.647248][T27536] __lookup_slow+0x155/0x320 [ 848.647275][T27536] lookup_slow+0x50/0x70 [ 848.647298][T27536] link_path_walk+0x1712/0x1cc0 [ 848.647334][T27536] path_openat+0x1c9/0x4280 [ 848.647351][T27536] ? __kasan_slab_alloc+0x89/0x90 [ 848.647372][T27536] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 848.647390][T27536] ? do_getname+0x35/0x390 [ 848.647413][T27536] ? __x64_sys_openat+0x12d/0x210 [ 848.647443][T27536] ? __pfx_path_openat+0x10/0x10 [ 848.647469][T27536] do_file_open+0x20e/0x430 [ 848.647491][T27536] ? __pfx_do_file_open+0x10/0x10 [ 848.647515][T27536] ? __pfx_kfree_link+0x10/0x10 [ 848.647538][T27536] ? alloc_fd+0x471/0x7a0 [ 848.647560][T27536] ? do_getname+0x191/0x390 [ 848.647583][T27536] do_sys_openat2+0x10f/0x1e0 [ 848.647605][T27536] ? __pfx_do_sys_openat2+0x10/0x10 [ 848.647628][T27536] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 848.647655][T27536] ? __fget_files+0x21f/0x3d0 [ 848.647678][T27536] __x64_sys_openat+0x12d/0x210 [ 848.647702][T27536] ? __pfx___x64_sys_openat+0x10/0x10 [ 848.647725][T27536] ? ksys_write+0x1ac/0x250 [ 848.647751][T27536] do_syscall_64+0x115/0x870 [ 848.647774][T27536] ? clear_bhb_loop+0x70/0xc0 [ 848.647794][T27536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.647812][T27536] RIP: 0033:0x7f946f39e0d9 [ 848.647827][T27536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.647842][T27536] RSP: 002b:00007f94702c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 848.647865][T27536] RAX: ffffffffffffffda RBX: 00007f946f625fa0 RCX: 00007f946f39e0d9 [ 848.647875][T27536] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 848.647886][T27536] RBP: 00007f94702c9090 R08: 0000000000000000 R09: 0000000000000000 [ 848.647898][T27536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 848.647908][T27536] R13: 00007f946f626038 R14: 00007f946f625fa0 R15: 00007ffc4d67f8d8 [ 848.647932][T27536] [ 848.660008][T27538] fuse: fd is not a fuse device [ 848.691929][T27534] IPVS: using max 27 ests per chain, 64800 per kthread [ 848.771671][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 848.776879][ T8542] usbhid 10-1:0.0: can't add hid device: -71 [ 848.779708][ T8542] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 848.792124][ T8542] usb 10-1: USB disconnect, device number 23 [ 848.818132][T27546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5364'. [ 848.835107][T27546] vlan0: entered promiscuous mode [ 848.837408][T27546] gretap0: entered promiscuous mode [ 849.046924][T27564] FAULT_INJECTION: forcing a failure. [ 849.046924][T27564] name failslab, interval 1, probability 0, space 0, times 0 [ 849.053255][T27564] CPU: 0 UID: 0 PID: 27564 Comm: syz.1.5371 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.053284][T27564] Tainted: [L]=SOFTLOCKUP [ 849.053291][T27564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 849.053302][T27564] Call Trace: [ 849.053308][T27564] [ 849.053316][T27564] dump_stack_lvl+0x100/0x190 [ 849.053346][T27564] should_fail_ex.cold+0x5/0xa [ 849.053371][T27564] should_failslab+0xc2/0x120 [ 849.053398][T27564] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 849.053421][T27564] ? alloc_inode+0x183/0x250 [ 849.053452][T27564] alloc_inode+0x183/0x250 [ 849.053503][T27564] iget_locked+0x1d9/0x6d0 [ 849.053529][T27564] ? __pfx_iget_locked+0x10/0x10 [ 849.053553][T27564] ? kernfs_root+0xee/0x2a0 [ 849.053573][T27564] ? kernfs_root+0xee/0x2a0 [ 849.053598][T27564] kernfs_get_inode+0x46/0x470 [ 849.053619][T27564] kernfs_iop_lookup+0x1a7/0x2d0 [ 849.053644][T27564] __lookup_slow+0x155/0x320 [ 849.053672][T27564] lookup_slow+0x50/0x70 [ 849.053698][T27564] link_path_walk+0x1712/0x1cc0 [ 849.053741][T27564] path_openat+0x1c9/0x4280 [ 849.053760][T27564] ? __kasan_slab_alloc+0x89/0x90 [ 849.053783][T27564] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 849.053804][T27564] ? do_getname+0x35/0x390 [ 849.053826][T27564] ? __x64_sys_openat+0x12d/0x210 [ 849.053859][T27564] ? __pfx_path_openat+0x10/0x10 [ 849.053887][T27564] do_file_open+0x20e/0x430 [ 849.053910][T27564] ? __pfx_do_file_open+0x10/0x10 [ 849.053940][T27564] ? __pfx_kfree_link+0x10/0x10 [ 849.053966][T27564] ? alloc_fd+0x471/0x7a0 [ 849.053988][T27564] ? do_getname+0x191/0x390 [ 849.054015][T27564] do_sys_openat2+0x10f/0x1e0 [ 849.054038][T27564] ? __pfx_do_sys_openat2+0x10/0x10 [ 849.054063][T27564] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 849.054091][T27564] ? __fget_files+0x21f/0x3d0 [ 849.054115][T27564] __x64_sys_openat+0x12d/0x210 [ 849.054139][T27564] ? __pfx___x64_sys_openat+0x10/0x10 [ 849.054162][T27564] ? ksys_write+0x1ac/0x250 [ 849.054189][T27564] do_syscall_64+0x115/0x870 [ 849.054213][T27564] ? clear_bhb_loop+0x70/0xc0 [ 849.054235][T27564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.054255][T27564] RIP: 0033:0x7fd826d9e0d9 [ 849.054287][T27564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.054305][T27564] RSP: 002b:00007fd827d3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 849.054324][T27564] RAX: ffffffffffffffda RBX: 00007fd827025fa0 RCX: 00007fd826d9e0d9 [ 849.054335][T27564] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 849.054347][T27564] RBP: 00007fd827d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 849.054357][T27564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 849.054368][T27564] R13: 00007fd827026038 R14: 00007fd827025fa0 R15: 00007ffcbf4481f8 [ 849.054394][T27564] [ 849.221086][T27575] fuse: fd is not a fuse device [ 849.271567][T27570] could not allocate digest TFM handle cryptd(blake2b-160) [ 849.277531][T27583] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 849.310565][ T42] kauditd_printk_skb: 77 callbacks suppressed [ 849.310578][ T42] audit: type=1800 audit(1105.232:5598): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 849.324154][ T42] audit: type=1400 audit(1105.242:5599): avc: denied { write } for pid=27586 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.336269][ T42] audit: type=1800 audit(1105.252:5600): pid=27588 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.5378" name="resume" dev="sysfs" ino=891 res=0 errno=0 [ 849.344930][ T42] audit: type=1400 audit(1105.262:5601): avc: denied { read } for pid=27587 comm="syz.8.5378" path="socket:[129296]" dev="sockfs" ino=129296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 849.380476][ T42] audit: type=1400 audit(1105.302:5602): avc: denied { watch } for pid=27592 comm="syz.1.5380" path="/237/file0" dev="tmpfs" ino=1353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 849.417177][ T42] audit: type=1800 audit(1105.342:5603): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 849.470960][ T42] audit: type=1800 audit(1105.392:5604): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 849.480228][T27604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5382'. [ 849.481527][T27603] FAULT_INJECTION: forcing a failure. [ 849.481527][T27603] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 849.487970][T27604] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5382'. [ 849.491906][T27603] CPU: 3 UID: 0 PID: 27603 Comm: syz.8.5383 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.491932][T27603] Tainted: [L]=SOFTLOCKUP [ 849.491938][T27603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 849.491949][T27603] Call Trace: [ 849.491957][T27603] [ 849.491966][T27603] dump_stack_lvl+0x100/0x190 [ 849.491996][T27603] should_fail_ex.cold+0x5/0xa [ 849.492019][T27603] ? prepare_alloc_pages+0x16d/0x5f0 [ 849.492061][T27603] should_fail_alloc_page+0xeb/0x140 [ 849.492087][T27603] prepare_alloc_pages+0x1f0/0x5f0 [ 849.492115][T27603] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 849.492147][T27603] ? stack_trace_save+0x8e/0xc0 [ 849.492166][T27603] ? __pfx_stack_trace_save+0x10/0x10 [ 849.492185][T27603] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 849.492210][T27603] ? kasan_save_stack+0x3f/0x50 [ 849.492231][T27603] ? kasan_save_stack+0x30/0x50 [ 849.492251][T27603] ? kasan_save_track+0x14/0x30 [ 849.492270][T27603] ? __kasan_slab_alloc+0x89/0x90 [ 849.492289][T27603] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 849.492309][T27603] ? security_inode_alloc+0x3b/0x2c0 [ 849.492332][T27603] ? inode_init_always_gfp+0xc77/0xfb0 [ 849.492353][T27603] ? alloc_inode+0x8e/0x250 [ 849.492375][T27603] ? iget_locked+0x1d9/0x6d0 [ 849.492399][T27603] ? kernfs_get_inode+0x46/0x470 [ 849.492420][T27603] ? look_up_lock_class+0x64/0x120 [ 849.492447][T27603] ? __lookup_slow+0x155/0x320 [ 849.492476][T27603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.492499][T27603] ? __lock_acquire+0x49f/0x1a40 [ 849.492523][T27603] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 849.492550][T27603] ? policy_nodemask+0xed/0x4f0 [ 849.492581][T27603] alloc_pages_mpol+0x1fb/0x540 [ 849.492603][T27603] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 849.492627][T27603] ? do_raw_spin_lock+0x128/0x260 [ 849.492651][T27603] ? find_held_lock+0x2b/0x80 [ 849.492677][T27603] ? inode_doinit_with_dentry+0x70b/0x1320 [ 849.492708][T27603] alloc_pages_noprof+0x1a/0x160 [ 849.492735][T27603] get_free_pages_noprof+0x10/0xb0 [ 849.492758][T27603] inode_doinit_with_dentry+0x788/0x1320 [ 849.492784][T27603] ? __lock_acquire+0x49f/0x1a40 [ 849.492805][T27603] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 849.492832][T27603] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 849.492868][T27603] selinux_d_instantiate+0x26/0x40 [ 849.492897][T27603] security_d_instantiate+0x14c/0x1b0 [ 849.492921][T27603] d_splice_alias_ops+0xd7/0x15c0 [ 849.492950][T27603] ? rcu_is_watching+0x12/0xc0 [ 849.492975][T27603] ? __up_read+0x333/0x980 [ 849.492999][T27603] ? __pfx_d_splice_alias_ops+0x10/0x10 [ 849.493026][T27603] ? kernfs_iop_lookup+0x234/0x2d0 [ 849.493049][T27603] ? kernfs_iop_lookup+0x234/0x2d0 [ 849.493077][T27603] kernfs_iop_lookup+0x23f/0x2d0 [ 849.493100][T27603] __lookup_slow+0x155/0x320 [ 849.493127][T27603] lookup_slow+0x50/0x70 [ 849.493149][T27603] link_path_walk+0x1712/0x1cc0 [ 849.493185][T27603] path_openat+0x1c9/0x4280 [ 849.493206][T27603] ? __kasan_slab_alloc+0x89/0x90 [ 849.493227][T27603] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 849.493247][T27603] ? do_getname+0x35/0x390 [ 849.493267][T27603] ? __x64_sys_openat+0x12d/0x210 [ 849.493299][T27603] ? __pfx_path_openat+0x10/0x10 [ 849.493326][T27603] do_file_open+0x20e/0x430 [ 849.493348][T27603] ? __pfx_do_file_open+0x10/0x10 [ 849.493377][T27603] ? __pfx_kfree_link+0x10/0x10 [ 849.493402][T27603] ? alloc_fd+0x471/0x7a0 [ 849.493427][T27603] ? do_getname+0x191/0x390 [ 849.493455][T27603] do_sys_openat2+0x10f/0x1e0 [ 849.493506][T27603] ? __pfx_do_sys_openat2+0x10/0x10 [ 849.493531][T27603] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 849.493558][T27603] ? __fget_files+0x21f/0x3d0 [ 849.493581][T27603] __x64_sys_openat+0x12d/0x210 [ 849.493606][T27603] ? __pfx___x64_sys_openat+0x10/0x10 [ 849.493630][T27603] ? ksys_write+0x1ac/0x250 [ 849.493665][T27603] do_syscall_64+0x115/0x870 [ 849.493689][T27603] ? clear_bhb_loop+0x70/0xc0 [ 849.493707][T27603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.493728][T27603] RIP: 0033:0x7f946f39e0d9 [ 849.493743][T27603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.493760][T27603] RSP: 002b:00007f94702c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 849.493778][T27603] RAX: ffffffffffffffda RBX: 00007f946f625fa0 RCX: 00007f946f39e0d9 [ 849.493791][T27603] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 849.493802][T27603] RBP: 00007f94702c9090 R08: 0000000000000000 R09: 0000000000000000 [ 849.493812][T27603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 849.493824][T27603] R13: 00007f946f626038 R14: 00007f946f625fa0 R15: 00007ffc4d67f8d8 [ 849.493848][T27603] [ 849.496703][ T42] audit: type=1800 audit(1105.422:5605): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 849.510780][T27604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 849.512599][ T42] audit: type=1800 audit(1105.422:5606): pid=27603 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.5383" name="state" dev="sysfs" ino=22945 res=0 errno=0 [ 849.680322][ T42] audit: type=1800 audit(1105.482:5607): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 849.737021][T27615] fuse: fd is not a fuse device [ 850.016347][T27607] syz.5.5385 (27607): drop_caches: 1 [ 850.156328][T27607] syz.5.5385 (27607): drop_caches: 1 [ 850.420271][T27633] FAULT_INJECTION: forcing a failure. [ 850.420271][T27633] name failslab, interval 1, probability 0, space 0, times 0 [ 850.429748][T27633] CPU: 2 UID: 0 PID: 27633 Comm: syz.5.5392 Tainted: G L syzkaller #0 PREEMPT(full) [ 850.429784][T27633] Tainted: [L]=SOFTLOCKUP [ 850.429790][T27633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 850.429801][T27633] Call Trace: [ 850.429808][T27633] [ 850.429816][T27633] dump_stack_lvl+0x100/0x190 [ 850.429847][T27633] should_fail_ex.cold+0x5/0xa [ 850.429871][T27633] should_failslab+0xc2/0x120 [ 850.429897][T27633] __kmalloc_cache_noprof+0x91/0x6c0 [ 850.429916][T27633] ? do_raw_spin_unlock+0x145/0x1e0 [ 850.429942][T27633] ? inode_doinit_use_xattr+0x54/0x330 [ 850.429970][T27633] inode_doinit_use_xattr+0x54/0x330 [ 850.429995][T27633] inode_doinit_with_dentry+0x10e6/0x1320 [ 850.430030][T27633] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 850.430054][T27633] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 850.430088][T27633] selinux_d_instantiate+0x26/0x40 [ 850.430113][T27633] security_d_instantiate+0x14c/0x1b0 [ 850.430136][T27633] d_splice_alias_ops+0xd7/0x15c0 [ 850.430162][T27633] ? rcu_is_watching+0x12/0xc0 [ 850.430189][T27633] ? __up_read+0x333/0x980 [ 850.430234][T27633] ? __pfx_d_splice_alias_ops+0x10/0x10 [ 850.430260][T27633] ? kernfs_iop_lookup+0x234/0x2d0 [ 850.430280][T27633] ? kernfs_iop_lookup+0x234/0x2d0 [ 850.430305][T27633] kernfs_iop_lookup+0x23f/0x2d0 [ 850.430328][T27633] __lookup_slow+0x155/0x320 [ 850.430355][T27633] lookup_slow+0x50/0x70 [ 850.430379][T27633] link_path_walk+0x1712/0x1cc0 [ 850.430415][T27633] path_openat+0x1c9/0x4280 [ 850.430448][T27633] ? __kasan_slab_alloc+0x89/0x90 [ 850.430470][T27633] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 850.430490][T27633] ? do_getname+0x35/0x390 [ 850.430511][T27633] ? __x64_sys_openat+0x12d/0x210 [ 850.430540][T27633] ? __pfx_path_openat+0x10/0x10 [ 850.430565][T27633] do_file_open+0x20e/0x430 [ 850.430584][T27633] ? __pfx_do_file_open+0x10/0x10 [ 850.430611][T27633] ? __pfx_kfree_link+0x10/0x10 [ 850.430635][T27633] ? alloc_fd+0x471/0x7a0 [ 850.430655][T27633] ? do_getname+0x191/0x390 [ 850.430680][T27633] do_sys_openat2+0x10f/0x1e0 [ 850.430701][T27633] ? __pfx_do_sys_openat2+0x10/0x10 [ 850.430723][T27633] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 850.430748][T27633] ? __fget_files+0x21f/0x3d0 [ 850.430769][T27633] __x64_sys_openat+0x12d/0x210 [ 850.430796][T27633] ? __pfx___x64_sys_openat+0x10/0x10 [ 850.430816][T27633] ? ksys_write+0x1ac/0x250 [ 850.430837][T27633] do_syscall_64+0x115/0x870 [ 850.430858][T27633] ? clear_bhb_loop+0x70/0xc0 [ 850.430881][T27633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.430897][T27633] RIP: 0033:0x7f9a0d19e0d9 [ 850.430912][T27633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.430930][T27633] RSP: 002b:00007f9a0e100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 850.430964][T27633] RAX: ffffffffffffffda RBX: 00007f9a0d425fa0 RCX: 00007f9a0d19e0d9 [ 850.430976][T27633] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 850.430987][T27633] RBP: 00007f9a0e100090 R08: 0000000000000000 R09: 0000000000000000 [ 850.430997][T27633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 850.431007][T27633] R13: 00007f9a0d426038 R14: 00007f9a0d425fa0 R15: 00007fff037796d8 [ 850.431031][T27633] [ 850.663913][T27650] 9pnet_fd: p9_fd_create_unix (27650): problem connecting socket: ./file2: -2 [ 850.680429][T27650] fuse: fd is not a fuse device [ 850.838312][T27662] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.843448][T27662] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.930942][T27662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.942956][T27662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.081533][T27666] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.094872][T27674] __nla_validate_parse: 1 callbacks suppressed [ 851.094891][T27674] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.5403'. [ 851.101566][T27674] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.5403'. [ 851.162128][T18952] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.166059][T18952] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.177112][T18952] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.201637][T27679] FAULT_INJECTION: forcing a failure. [ 851.201637][T27679] name failslab, interval 1, probability 0, space 0, times 0 [ 851.209188][T27679] CPU: 3 UID: 0 PID: 27679 Comm: syz.1.5404 Tainted: G L syzkaller #0 PREEMPT(full) [ 851.209209][T27679] Tainted: [L]=SOFTLOCKUP [ 851.209214][T27679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 851.209220][T27679] Call Trace: [ 851.209225][T27679] [ 851.209231][T27679] dump_stack_lvl+0x100/0x190 [ 851.209256][T27679] should_fail_ex.cold+0x5/0xa [ 851.209280][T27679] should_failslab+0xc2/0x120 [ 851.209302][T27679] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 851.209323][T27679] ? __d_alloc+0x35/0xa50 [ 851.209347][T27679] __d_alloc+0x35/0xa50 [ 851.209366][T27679] ? __lock_acquire+0x49f/0x1a40 [ 851.209390][T27679] d_alloc_parallel+0x105/0x14b0 [ 851.209423][T27679] ? __pfx_d_alloc_parallel+0x10/0x10 [ 851.209474][T27679] ? __d_lookup+0x25c/0x4a0 [ 851.209505][T27679] ? __d_lookup+0x266/0x4a0 [ 851.209539][T27679] path_openat+0x271c/0x4280 [ 851.209570][T27679] ? __pfx_path_openat+0x10/0x10 [ 851.209597][T27679] do_file_open+0x20e/0x430 [ 851.209619][T27679] ? __pfx_do_file_open+0x10/0x10 [ 851.209646][T27679] ? __pfx_kfree_link+0x10/0x10 [ 851.209668][T27679] ? alloc_fd+0x471/0x7a0 [ 851.209683][T27679] ? do_getname+0x191/0x390 [ 851.209700][T27679] do_sys_openat2+0x10f/0x1e0 [ 851.209716][T27679] ? __pfx_do_sys_openat2+0x10/0x10 [ 851.209732][T27679] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 851.209753][T27679] ? __fget_files+0x21f/0x3d0 [ 851.209775][T27679] __x64_sys_openat+0x12d/0x210 [ 851.209797][T27679] ? __pfx___x64_sys_openat+0x10/0x10 [ 851.209816][T27679] ? ksys_write+0x1ac/0x250 [ 851.209843][T27679] do_syscall_64+0x115/0x870 [ 851.209867][T27679] ? clear_bhb_loop+0x70/0xc0 [ 851.209888][T27679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.209906][T27679] RIP: 0033:0x7fd826d9e0d9 [ 851.209917][T27679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.209929][T27679] RSP: 002b:00007fd827d3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 851.209940][T27679] RAX: ffffffffffffffda RBX: 00007fd827025fa0 RCX: 00007fd826d9e0d9 [ 851.209948][T27679] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 851.209955][T27679] RBP: 00007fd827d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 851.209968][T27679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 851.209974][T27679] R13: 00007fd827026038 R14: 00007fd827025fa0 R15: 00007ffcbf4481f8 [ 851.209989][T27679] [ 851.528275][T27685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5406'. [ 851.533706][T27689] 9pnet_fd: p9_fd_create_unix (27689): problem connecting socket: ./file2: -2 [ 851.541677][T27689] fuse: fd is not a fuse device [ 851.890264][T27710] FAULT_INJECTION: forcing a failure. [ 851.890264][T27710] name failslab, interval 1, probability 0, space 0, times 0 [ 851.895328][T27710] CPU: 2 UID: 0 PID: 27710 Comm: syz.6.5413 Tainted: G L syzkaller #0 PREEMPT(full) [ 851.895357][T27710] Tainted: [L]=SOFTLOCKUP [ 851.895364][T27710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 851.895374][T27710] Call Trace: [ 851.895381][T27710] [ 851.895389][T27710] dump_stack_lvl+0x100/0x190 [ 851.895417][T27710] should_fail_ex.cold+0x5/0xa [ 851.895441][T27710] should_failslab+0xc2/0x120 [ 851.895465][T27710] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 851.895488][T27710] ? alloc_inode+0x183/0x250 [ 851.895518][T27710] alloc_inode+0x183/0x250 [ 851.895542][T27710] iget_locked+0x1d9/0x6d0 [ 851.895568][T27710] ? __pfx_iget_locked+0x10/0x10 [ 851.895590][T27710] ? kernfs_root+0xee/0x2a0 [ 851.895609][T27710] ? kernfs_root+0xee/0x2a0 [ 851.895632][T27710] kernfs_get_inode+0x46/0x470 [ 851.895652][T27710] kernfs_iop_lookup+0x1a7/0x2d0 [ 851.895671][T27710] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 851.895693][T27710] path_openat+0x241f/0x4280 [ 851.895723][T27710] ? __pfx_path_openat+0x10/0x10 [ 851.895749][T27710] do_file_open+0x20e/0x430 [ 851.895770][T27710] ? __pfx_do_file_open+0x10/0x10 [ 851.895797][T27710] ? __pfx_kfree_link+0x10/0x10 [ 851.895821][T27710] ? alloc_fd+0x471/0x7a0 [ 851.895842][T27710] ? do_getname+0x191/0x390 [ 851.895867][T27710] do_sys_openat2+0x10f/0x1e0 [ 851.895890][T27710] ? __pfx_do_sys_openat2+0x10/0x10 [ 851.895913][T27710] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 851.895941][T27710] ? __fget_files+0x21f/0x3d0 [ 851.895963][T27710] __x64_sys_openat+0x12d/0x210 [ 851.895986][T27710] ? __pfx___x64_sys_openat+0x10/0x10 [ 851.896007][T27710] ? ksys_write+0x1ac/0x250 [ 851.896032][T27710] do_syscall_64+0x115/0x870 [ 851.896055][T27710] ? clear_bhb_loop+0x70/0xc0 [ 851.896077][T27710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.896095][T27710] RIP: 0033:0x7f8e64d9e0d9 [ 851.896110][T27710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.896127][T27710] RSP: 002b:00007f8e65cfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 851.896144][T27710] RAX: ffffffffffffffda RBX: 00007f8e65025fa0 RCX: 00007f8e64d9e0d9 [ 851.896156][T27710] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 851.896167][T27710] RBP: 00007f8e65cfc090 R08: 0000000000000000 R09: 0000000000000000 [ 851.896177][T27710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 851.896192][T27710] R13: 00007f8e65026038 R14: 00007f8e65025fa0 R15: 00007ffd5bc9f888 [ 851.896217][T27710] [ 852.179305][T25807] bridge0: port 3(syz_tun) entered disabled state [ 852.203003][T25807] syz_tun (unregistering): left allmulticast mode [ 852.205714][T25807] syz_tun (unregistering): left promiscuous mode [ 852.208174][T25807] bridge0: port 3(syz_tun) entered disabled state [ 852.525276][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 852.531964][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 852.536181][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.736794][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 852.737137][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 852.742621][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 852.747645][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 852.748728][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.755998][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 852.759997][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 852.778456][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 852.885428][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 852.890658][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 852.896803][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.999441][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 853.006634][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 853.010925][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.094227][T27737] lo speed is unknown, defaulting to 1000 [ 853.096796][T27737] xfrm0 speed is unknown, defaulting to 1000 [ 853.291239][ T12] bridge_slave_1: left promiscuous mode [ 853.293556][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.298239][ T12] bridge_slave_0: left promiscuous mode [ 853.300773][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.551365][T12534] smbdirect: ib_dev[syz1] removed [ 853.652651][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.657179][ T12] bond0 (unregistering): Released all slaves [ 853.662627][ T12] bond1 (unregistering): Released all slaves [ 853.671496][ T12] bond2 (unregistering): (slave veth3): Releasing active interface [ 853.675598][ T12] bond2 (unregistering): Released all slaves [ 853.683589][ T12] bond3 (unregistering): Released all slaves [ 853.692053][ T12] bond4 (unregistering): Released all slaves [ 853.701009][ T12] bond5 (unregistering): Released all slaves [ 853.714880][ T12] bond6 (unregistering): Released all slaves [ 853.766713][T22748] xfrm0 speed is unknown, defaulting to 1000 [ 853.768625][T22748] infiniband syz1: ib_query_port failed (-19) [ 853.861606][T27762] FAULT_INJECTION: forcing a failure. [ 853.861606][T27762] name failslab, interval 1, probability 0, space 0, times 0 [ 853.872166][T27762] CPU: 2 UID: 0 PID: 27762 Comm: syz.5.5424 Tainted: G L syzkaller #0 PREEMPT(full) [ 853.872198][T27762] Tainted: [L]=SOFTLOCKUP [ 853.872206][T27762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 853.872217][T27762] Call Trace: [ 853.872225][T27762] [ 853.872233][T27762] dump_stack_lvl+0x100/0x190 [ 853.872265][T27762] should_fail_ex.cold+0x5/0xa [ 853.872292][T27762] should_failslab+0xc2/0x120 [ 853.872320][T27762] kmem_cache_alloc_noprof+0x91/0x6a0 [ 853.872343][T27762] ? __pfx_map_id_range_down+0x10/0x10 [ 853.872367][T27762] ? security_inode_alloc+0x3b/0x2c0 [ 853.872401][T27762] security_inode_alloc+0x3b/0x2c0 [ 853.872430][T27762] inode_init_always_gfp+0xc77/0xfb0 [ 853.872458][T27762] alloc_inode+0x8e/0x250 [ 853.872486][T27762] iget_locked+0x1d9/0x6d0 [ 853.872536][T27762] ? __pfx_iget_locked+0x10/0x10 [ 853.872563][T27762] ? kernfs_root+0xee/0x2a0 [ 853.872585][T27762] ? kernfs_root+0xee/0x2a0 [ 853.872612][T27762] kernfs_get_inode+0x46/0x470 [ 853.872634][T27762] kernfs_iop_lookup+0x1a7/0x2d0 [ 853.872662][T27762] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 853.872687][T27762] path_openat+0x241f/0x4280 [ 853.872720][T27762] ? __pfx_path_openat+0x10/0x10 [ 853.872750][T27762] do_file_open+0x20e/0x430 [ 853.872774][T27762] ? __pfx_do_file_open+0x10/0x10 [ 853.872806][T27762] ? __pfx_kfree_link+0x10/0x10 [ 853.872834][T27762] ? alloc_fd+0x471/0x7a0 [ 853.872858][T27762] ? do_getname+0x191/0x390 [ 853.872885][T27762] do_sys_openat2+0x10f/0x1e0 [ 853.872910][T27762] ? __pfx_do_sys_openat2+0x10/0x10 [ 853.872934][T27762] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 853.872963][T27762] ? __fget_files+0x21f/0x3d0 [ 853.872987][T27762] __x64_sys_openat+0x12d/0x210 [ 853.873011][T27762] ? __pfx___x64_sys_openat+0x10/0x10 [ 853.873052][T27762] ? ksys_write+0x1ac/0x250 [ 853.873078][T27762] do_syscall_64+0x115/0x870 [ 853.873103][T27762] ? clear_bhb_loop+0x70/0xc0 [ 853.873126][T27762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.873145][T27762] RIP: 0033:0x7f9a0d19e0d9 [ 853.873161][T27762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.873179][T27762] RSP: 002b:00007f9a0e100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 853.873199][T27762] RAX: ffffffffffffffda RBX: 00007f9a0d425fa0 RCX: 00007f9a0d19e0d9 [ 853.873211][T27762] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 853.873222][T27762] RBP: 00007f9a0e100090 R08: 0000000000000000 R09: 0000000000000000 [ 853.873232][T27762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 853.873242][T27762] R13: 00007f9a0d426038 R14: 00007f9a0d425fa0 R15: 00007fff037796d8 [ 853.873267][T27762] [ 853.944631][T27737] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.000369][T27737] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.003716][T27737] bridge_slave_0: entered allmulticast mode [ 854.007847][T27737] bridge_slave_0: entered promiscuous mode [ 854.013577][T27737] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.016784][T27737] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.019882][T27737] bridge_slave_1: entered allmulticast mode [ 854.023126][T27737] bridge_slave_1: entered promiscuous mode [ 854.025998][ T12] tipc: Disabling bearer [ 854.035475][ T12] tipc: Left network mode [ 854.269896][ T12] IPVS: stopping backup sync thread 21357 ... [ 854.292272][T27737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.297634][T27737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.323564][ T5434] 8021q: adding VLAN 0 to HW filter on device eth6 [ 854.369402][T27737] team0: Port device team_slave_0 added [ 854.374372][T27737] team0: Port device team_slave_1 added [ 854.387183][ T42] kauditd_printk_skb: 56 callbacks suppressed [ 854.387195][ T42] audit: type=1400 audit(1110.312:5664): avc: denied { write } for pid=27789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.431871][ T8542] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 854.436325][ T42] audit: type=1400 audit(1110.362:5665): avc: denied { write } for pid=27795 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.437689][T27737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.450209][T27737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.461058][T27737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.467636][T27737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.470546][T27737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.481176][T27737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.554874][T27737] hsr_slave_0: entered promiscuous mode [ 854.560940][T27737] hsr_slave_1: entered promiscuous mode [ 854.564889][T27737] debugfs: 'hsr0' already exists in 'hsr' [ 854.565273][T27800] fuse: Bad value for 'fd' [ 854.566948][T27737] Cannot create hsr debugfs directory [ 854.570492][ T42] audit: type=1804 audit(1110.492:5666): pid=27801 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.5429" name="/newroot/254/file0" dev="tmpfs" ino=1445 res=1 errno=0 [ 854.588370][ T8542] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 854.594189][ T8542] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 47, changing to 9 [ 854.601092][ T8542] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26378, setting to 1024 [ 854.626205][ T8542] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 47, changing to 9 [ 854.634669][ T8542] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26378, setting to 1024 [ 854.654990][ T8542] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.657938][ T8542] usb 10-1: Product: syz [ 854.660949][ T8542] usb 10-1: Manufacturer: syz [ 854.662875][ T8542] usb 10-1: SerialNumber: syz [ 854.669074][ T42] audit: type=1800 audit(1110.592:5667): pid=26041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=370021 res=0 errno=0 [ 854.678795][T27782] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 854.682423][ T42] audit: type=1800 audit(1110.592:5668): pid=26041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=370053 res=0 errno=0 [ 854.690762][ T42] audit: type=1800 audit(1110.592:5669): pid=26041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=370028 res=0 errno=0 [ 854.698307][ T8542] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 854.704114][ T8542] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 854.707015][ T42] audit: type=1400 audit(1110.592:5670): avc: denied { write } for pid=27805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.718137][ T8542] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 854.724575][ T42] audit: type=1800 audit(1110.592:5671): pid=26041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=370029 res=0 errno=0 [ 854.737362][ T42] audit: type=1400 audit(1110.642:5672): avc: denied { write } for pid=27813 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.744346][ T42] audit: type=1800 audit(1110.662:5673): pid=26041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=370050 res=0 errno=0 [ 854.797472][ T5434] 8021q: adding VLAN 0 to HW filter on device eth7 [ 854.860335][ T12] hsr_slave_0: left promiscuous mode [ 854.863319][ T12] hsr_slave_1: left promiscuous mode [ 854.865465][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 854.867902][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.870934][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 854.873496][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.880681][ T12] veth1_macvtap: left promiscuous mode [ 854.882939][ T12] veth0_macvtap: left promiscuous mode [ 854.922050][ T64] Bluetooth: hci0: command tx timeout [ 855.296891][T27832] FAULT_INJECTION: forcing a failure. [ 855.296891][T27832] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 855.302527][T27832] CPU: 1 UID: 0 PID: 27832 Comm: syz.1.5435 Tainted: G L syzkaller #0 PREEMPT(full) [ 855.302553][T27832] Tainted: [L]=SOFTLOCKUP [ 855.302559][T27832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 855.302568][T27832] Call Trace: [ 855.302575][T27832] [ 855.302580][T27832] dump_stack_lvl+0x100/0x190 [ 855.302607][T27832] should_fail_ex.cold+0x5/0xa [ 855.302625][T27832] ? prepare_alloc_pages+0x16d/0x5f0 [ 855.302649][T27832] should_fail_alloc_page+0xeb/0x140 [ 855.302672][T27832] prepare_alloc_pages+0x1f0/0x5f0 [ 855.302696][T27832] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 855.302724][T27832] ? stack_trace_save+0x8e/0xc0 [ 855.302741][T27832] ? __pfx_stack_trace_save+0x10/0x10 [ 855.302758][T27832] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 855.302779][T27832] ? kasan_save_stack+0x3f/0x50 [ 855.302796][T27832] ? kasan_save_stack+0x30/0x50 [ 855.302813][T27832] ? kasan_save_track+0x14/0x30 [ 855.302830][T27832] ? __kasan_slab_alloc+0x89/0x90 [ 855.302847][T27832] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 855.302864][T27832] ? security_inode_alloc+0x3b/0x2c0 [ 855.302885][T27832] ? inode_init_always_gfp+0xc77/0xfb0 [ 855.302902][T27832] ? alloc_inode+0x8e/0x250 [ 855.302921][T27832] ? iget_locked+0x1d9/0x6d0 [ 855.302940][T27832] ? kernfs_get_inode+0x46/0x470 [ 855.302955][T27832] ? look_up_lock_class+0x64/0x120 [ 855.302975][T27832] ? path_openat+0x241f/0x4280 [ 855.302999][T27832] ? __lock_acquire+0x49f/0x1a40 [ 855.303018][T27832] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 855.303038][T27832] ? policy_nodemask+0xed/0x4f0 [ 855.303061][T27832] alloc_pages_mpol+0x1fb/0x540 [ 855.303083][T27832] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 855.303101][T27832] ? do_raw_spin_lock+0x128/0x260 [ 855.303123][T27832] ? find_held_lock+0x2b/0x80 [ 855.303137][T27832] ? inode_doinit_with_dentry+0x70b/0x1320 [ 855.303163][T27832] alloc_pages_noprof+0x1a/0x160 [ 855.303186][T27832] get_free_pages_noprof+0x10/0xb0 [ 855.303205][T27832] inode_doinit_with_dentry+0x788/0x1320 [ 855.303229][T27832] ? __lock_acquire+0x49f/0x1a40 [ 855.303248][T27832] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 855.303269][T27832] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 855.303302][T27832] selinux_d_instantiate+0x26/0x40 [ 855.303324][T27832] security_d_instantiate+0x14c/0x1b0 [ 855.303342][T27832] d_splice_alias_ops+0xd7/0x15c0 [ 855.303377][T27832] ? rcu_is_watching+0x12/0xc0 [ 855.303400][T27832] ? __up_read+0x333/0x980 [ 855.303422][T27832] ? __pfx_d_splice_alias_ops+0x10/0x10 [ 855.303444][T27832] ? kernfs_iop_lookup+0x234/0x2d0 [ 855.303461][T27832] ? kernfs_iop_lookup+0x234/0x2d0 [ 855.303483][T27832] kernfs_iop_lookup+0x23f/0x2d0 [ 855.303499][T27832] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 855.303519][T27832] path_openat+0x241f/0x4280 [ 855.303545][T27832] ? __pfx_path_openat+0x10/0x10 [ 855.303567][T27832] do_file_open+0x20e/0x430 [ 855.303585][T27832] ? __pfx_do_file_open+0x10/0x10 [ 855.303610][T27832] ? __pfx_kfree_link+0x10/0x10 [ 855.303631][T27832] ? alloc_fd+0x471/0x7a0 [ 855.303650][T27832] ? do_getname+0x191/0x390 [ 855.303672][T27832] do_sys_openat2+0x10f/0x1e0 [ 855.303691][T27832] ? __pfx_do_sys_openat2+0x10/0x10 [ 855.303711][T27832] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 855.303732][T27832] ? __fget_files+0x21f/0x3d0 [ 855.303752][T27832] __x64_sys_openat+0x12d/0x210 [ 855.303771][T27832] ? __pfx___x64_sys_openat+0x10/0x10 [ 855.303789][T27832] ? ksys_write+0x1ac/0x250 [ 855.303811][T27832] do_syscall_64+0x115/0x870 [ 855.303830][T27832] ? clear_bhb_loop+0x70/0xc0 [ 855.303849][T27832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.303864][T27832] RIP: 0033:0x7fd826d9e0d9 [ 855.303879][T27832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.303893][T27832] RSP: 002b:00007fd827d3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 855.303908][T27832] RAX: ffffffffffffffda RBX: 00007fd827025fa0 RCX: 00007fd826d9e0d9 [ 855.303918][T27832] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 855.303928][T27832] RBP: 00007fd827d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 855.303936][T27832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 855.303945][T27832] R13: 00007fd827026038 R14: 00007fd827025fa0 R15: 00007ffcbf4481f8 [ 855.303966][T27832] [ 855.505783][ T5434] 8021q: adding VLAN 0 to HW filter on device eth8 [ 855.523312][T27836] netlink: 'syz.1.5436': attribute type 1 has an invalid length. [ 855.613926][T27836] 8021q: adding VLAN 0 to HW filter on device bond2 [ 855.635040][T27838] bond2: (slave geneve2): making interface the new active one [ 855.640827][T27838] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 855.750249][T27849] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 855.752947][T27849] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 855.767597][T27849] vhci_hcd vhci_hcd.0: Device attached [ 855.779334][T27849] vhci_hcd vhci_hcd.0: port 0 already used [ 855.784672][T27851] vhci_hcd: connection closed [ 855.792685][ T7969] vhci_hcd vhci_hcd.1: stop threads [ 855.796498][ T7969] vhci_hcd vhci_hcd.1: release socket [ 855.798563][ T7969] vhci_hcd vhci_hcd.1: disconnect device [ 855.970267][ T5434] 8021q: adding VLAN 0 to HW filter on device eth9 [ 855.995418][T27864] input: syz0 as /devices/virtual/input/input68 [ 856.030974][T27860] futex_wake_op: syz.5.5427 tries to shift op by -1; fix this program [ 856.069243][ T12] IPVS: stop unused estimator thread 0... [ 856.364566][T27787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.367643][T27787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.392710][T27883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 856.429149][T27883] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 856.453582][T27737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 856.459441][T27737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 856.463845][T27737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 856.470021][T27737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 856.475029][T27737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 856.480356][T27737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 856.483643][T27737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 856.489704][T27737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 856.500157][T27892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 856.559251][T27737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.570777][T27737] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.578305][T27787] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.581416][T27787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.605030][T27787] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.608123][T27787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.946931][T27737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.980711][T27737] veth0_vlan: entered promiscuous mode [ 856.992985][T27737] veth1_vlan: entered promiscuous mode [ 857.002179][ T64] Bluetooth: hci0: command tx timeout [ 857.021177][T27737] veth0_macvtap: entered promiscuous mode [ 857.032403][T27737] veth1_macvtap: entered promiscuous mode [ 857.048963][T27737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.063178][T27737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.129797][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.142771][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.146879][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.151545][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.189738][T27881] [U] × [ 857.243042][ T5866] usb 10-1: USB disconnect, device number 24 [ 857.254033][ T5866] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 857.263580][ T5866] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 857.280448][ T5866] ti_usb_3410_5052 10-1:2.0: device disconnected [ 857.362436][T27936] Bluetooth: MGMT ver 1.23 [ 857.364143][T27936] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 858.042124][ T64] Bluetooth: hci3: command 0x0401 tx timeout [ 858.047950][T22835] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 858.050109][T22835] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 858.361684][T27976] lo speed is unknown, defaulting to 1000 [ 859.092695][ T64] Bluetooth: hci0: command tx timeout [ 859.501664][ T42] kauditd_printk_skb: 78 callbacks suppressed [ 859.501682][ T42] audit: type=1800 audit(1115.422:5752): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 860.132077][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 860.132133][T22835] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 860.136666][T22835] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 860.208837][ T42] audit: type=1800 audit(1116.132:5753): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=327352 res=0 errno=0 [ 860.245201][ T42] audit: type=1400 audit(1116.172:5754): avc: denied { write } for pid=27993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.324029][ T42] audit: type=1400 audit(1116.252:5755): avc: denied { write } for pid=27996 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.424974][ T42] audit: type=1400 audit(1116.352:5756): avc: denied { write } for pid=27999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.495054][ T42] audit: type=1400 audit(1116.422:5757): avc: denied { write } for pid=28002 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.590534][ T42] audit: type=1400 audit(1116.512:5758): avc: denied { write } for pid=28004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.645511][ T42] audit: type=1400 audit(1116.572:5759): avc: denied { write } for pid=28007 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.162026][ T64] Bluetooth: hci0: command tx timeout [ 862.282294][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 862.282760][T22835] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 862.287234][T22835] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 864.362288][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 864.362350][T22835] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 864.367015][T22835] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 864.379666][ T42] audit: type=1800 audit(1120.302:5760): pid=27887 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.5445" name="state" dev="sysfs" ino=22945 res=0 errno=0 [ 864.416200][T28011] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5455'. [ 864.417654][ T42] audit: type=1800 audit(1120.342:5761): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 864.457161][T28014] gretap0: entered promiscuous mode [ 864.471655][T27787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.479007][T27787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.502181][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 864.502195][ T42] audit: type=1800 audit(1120.432:5766): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=373007 res=0 errno=0 [ 864.511162][T28015] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 864.517139][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.518571][ T42] audit: type=1800 audit(1120.442:5767): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=373136 res=0 errno=0 [ 864.519861][T28011] tmpfs: Bad value for 'mpol' [ 864.530781][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.534727][ T42] audit: type=1400 audit(1120.462:5768): avc: denied { append } for pid=28010 comm="syz.5.5455" name="uprobe_events" dev="tracefs" ino=2063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 864.573159][ T42] audit: type=1800 audit(1120.502:5769): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 864.611663][ T42] audit: type=1800 audit(1120.532:5770): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 864.630751][ T42] audit: type=1400 audit(1120.552:5771): avc: denied { read } for pid=28032 comm="syz.3.5419" name="btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 864.646016][ T42] audit: type=1400 audit(1120.562:5772): avc: denied { open } for pid=28032 comm="syz.3.5419" path="/dev/btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 864.671840][ T42] audit: type=1400 audit(1120.562:5773): avc: denied { ioctl } for pid=28032 comm="syz.3.5419" path="/dev/btrfs-control" dev="devtmpfs" ino=1339 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 864.680859][ T42] audit: type=1800 audit(1120.592:5774): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 864.684814][T28036] input: syz1 as /devices/virtual/input/input69 [ 864.688711][ T42] audit: type=1800 audit(1120.602:5775): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 864.714920][T28040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5462'. [ 864.778168][T25048] bridge0: port 3(syz_tun) entered disabled state [ 864.805168][T25048] syz_tun (unregistering): left allmulticast mode [ 864.807324][T25048] syz_tun (unregistering): left promiscuous mode [ 864.809430][T25048] bridge0: port 3(syz_tun) entered disabled state [ 864.956506][T28053] kvm: pic: single mode not supported [ 865.055547][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.065194][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.160658][T28066] team0 (unregistering): Port device team_slave_0 removed [ 865.170219][T15096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 865.170523][T28066] team0 (unregistering): Port device team_slave_1 removed [ 865.186420][T28071] fuse: fd is not a fuse device [ 865.188411][T15096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 865.194614][T15096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 865.202210][T15096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 865.205888][T15096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 865.238915][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.245061][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.346730][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.351299][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.489481][T28088] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5477'. [ 865.493832][ T13] netdevsim netdevsim5 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.493880][ T13] netdevsim netdevsim5 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.516641][T28067] lo speed is unknown, defaulting to 1000 [ 865.728823][T28095] netlink: 'syz.8.5479': attribute type 64 has an invalid length. [ 865.842684][ T13] veth1: left allmulticast mode [ 865.844378][ T13] veth1: left promiscuous mode [ 865.846157][ T13] bridge0: port 1(veth1) entered disabled state [ 865.850838][ T13] bridge_slave_1: left promiscuous mode [ 865.852857][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.140747][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.156581][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.173169][ T13] bond0 (unregistering): Released all slaves [ 866.178983][ T13] bond1 (unregistering): Released all slaves [ 866.213465][ T5434] 8021q: adding VLAN 0 to HW filter on device eth17 [ 866.236533][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5482'. [ 866.238020][T28067] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.242882][T28067] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.245364][T28067] bridge_slave_0: entered allmulticast mode [ 866.251368][T28067] bridge_slave_0: entered promiscuous mode [ 866.362558][T28123] fuse: fd is not a fuse device [ 866.394150][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5482'. [ 866.395514][T28067] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.406288][T28067] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.409903][T28067] bridge_slave_1: entered allmulticast mode [ 866.413534][T28067] bridge_slave_1: entered promiscuous mode [ 866.448397][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5482'. [ 866.481693][T28067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.493305][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5482'. [ 866.503406][T28067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.511287][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5482'. [ 866.549837][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5482'. [ 866.629752][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5482'. [ 866.699897][T28067] team0: Port device team_slave_0 added [ 866.704920][T28067] team0: Port device team_slave_1 added [ 866.707234][T28137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28137 comm=syz.8.5485 [ 866.791350][ T5434] 8021q: adding VLAN 0 to HW filter on device eth19 [ 866.811268][T28067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.820106][T28067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.830413][T28067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.843874][T28067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.850750][T28067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.862501][T28067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.885031][T28143] cgroup: release_agent respecified [ 866.957299][T28067] hsr_slave_0: entered promiscuous mode [ 866.959841][T28067] hsr_slave_1: entered promiscuous mode [ 866.962096][T28067] debugfs: 'hsr0' already exists in 'hsr' [ 866.964179][T28067] Cannot create hsr debugfs directory [ 866.973792][T28149] netlink: 'syz.8.5489': attribute type 2 has an invalid length. [ 867.048436][ T13] hsr_slave_0: left promiscuous mode [ 867.051191][ T13] hsr_slave_1: left promiscuous mode [ 867.054317][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 867.056744][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.059665][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 867.063100][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.068865][ T13] veth1_macvtap: left promiscuous mode [ 867.070758][ T13] veth0_macvtap: left promiscuous mode [ 867.073620][ T13] veth1_vlan: left promiscuous mode [ 867.075391][ T13] veth0_vlan: left promiscuous mode [ 867.322137][ T64] Bluetooth: hci3: command tx timeout [ 867.795547][ T5434] 8021q: adding VLAN 0 to HW filter on device eth20 [ 867.903476][T14909] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 867.918740][T28176] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 868.084138][T14909] usb 6-1: Using ep0 maxpacket: 8 [ 868.089492][T14909] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 868.095911][T14909] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 868.099504][T14909] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 868.104051][T14909] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 868.108072][T14909] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 868.112448][T14909] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.117813][T14909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.158318][ T5434] 8021q: adding VLAN 0 to HW filter on device eth21 [ 868.184743][ T13] IPVS: stop unused estimator thread 0... [ 868.346041][T14909] usb 6-1: usb_control_msg returned -32 [ 868.347921][T14909] usbtmc 6-1:16.0: can't read capabilities [ 868.503468][T28067] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 868.508279][T28067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 868.511417][T28067] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 868.515945][T28067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.531082][T28067] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 868.536713][T28067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.540139][T28067] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 868.547726][T28067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 868.624057][T28067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.642396][T28067] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.650529][T27787] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.653178][T27787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.665504][T27787] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.667849][T27787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.719295][T28214] gadgetfs: bound to dummy_udc driver [ 868.960969][T28067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.997081][T28067] veth0_vlan: entered promiscuous mode [ 869.010122][T28067] veth1_vlan: entered promiscuous mode [ 869.029453][T28067] veth0_macvtap: entered promiscuous mode [ 869.036675][T28067] veth1_macvtap: entered promiscuous mode [ 869.049067][T28067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.058189][T28067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.108433][T28243] usbtmc 6-1:16.0: control status returned 0 [ 869.166427][T12527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.176262][T12527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.198085][T18974] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.201024][T18974] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.218876][T19905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.222513][T19905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.233245][T18974] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.239477][T18974] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.412325][ T64] Bluetooth: hci3: command tx timeout [ 869.558482][ T42] kauditd_printk_skb: 103 callbacks suppressed [ 869.558494][ T42] audit: type=1400 audit(1125.482:5879): avc: denied { write } for pid=28261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.607074][ T42] audit: type=1400 audit(1125.532:5880): avc: denied { write } for pid=28264 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.696151][ T42] audit: type=1400 audit(1125.622:5881): avc: denied { write } for pid=28266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.738217][ T42] audit: type=1800 audit(1125.662:5882): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 869.761970][ T42] audit: type=1400 audit(1125.692:5883): avc: denied { write } for pid=28269 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.783471][T28271] kvm: user requested TSC rate below hardware speed [ 869.789286][T28271] netlink: Conntrack attr has 8 unknown bytes [ 869.791431][T28271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 869.851867][ T42] audit: type=1400 audit(1125.772:5884): avc: denied { write } for pid=28273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.880300][ T42] audit: type=1800 audit(1125.802:5885): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 869.919241][ T42] audit: type=1400 audit(1125.842:5886): avc: denied { write } for pid=28276 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.940210][ T42] audit: type=1800 audit(1125.862:5887): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 869.964994][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.015428][T28281] netlink: 'syz.3.5503': attribute type 11 has an invalid length. [ 870.018156][T28281] __nla_validate_parse: 13 callbacks suppressed [ 870.018172][T28281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5503'. [ 870.023924][ T42] audit: type=1400 audit(1125.942:5888): avc: denied { write } for pid=28283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.037523][T28281] netlink: 'syz.3.5503': attribute type 11 has an invalid length. [ 870.040207][T28281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5503'. [ 870.052996][ T7969] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.063073][ T7969] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.065998][ T7969] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.068793][ T7969] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.095899][T28293] netlink: 'syz.3.5505': attribute type 1 has an invalid length. [ 870.353963][T28318] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38 sclass=netlink_audit_socket pid=28318 comm=syz.0.5512 [ 870.509426][T28334] vlan2: entered allmulticast mode [ 870.511537][T28334] bond0: entered allmulticast mode [ 870.514631][T28334] bond_slave_0: entered allmulticast mode [ 870.516621][T28334] bond_slave_1: entered allmulticast mode [ 870.650753][T14906] usb 6-1: USB disconnect, device number 38 [ 870.690397][T28347] fuse: fd is not a fuse device [ 870.727081][T28351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5522'. [ 870.756489][T22835] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 870.894017][T22835] usb 13-1: device descriptor read/64, error -71 [ 871.131979][T22835] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 871.261962][T22835] usb 13-1: device descriptor read/64, error -71 [ 871.372406][T22835] usb usb13-port1: attempt power cycle [ 871.492591][ T64] Bluetooth: hci3: command tx timeout [ 871.637830][T28373] kvm: user requested TSC rate below hardware speed [ 871.644084][T28373] netlink: Conntrack attr has 8 unknown bytes [ 871.648879][T28373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 871.732008][T22835] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 871.754598][T22835] usb 13-1: device descriptor read/8, error -71 [ 871.785945][T28384] input: syz1 as /devices/virtual/input/input70 [ 871.834665][T28390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5530'. [ 871.838829][T28390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5530'. [ 871.841692][T28390] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 871.845178][T28390] iwpm_mapping_info_cb: Unable to parse nlmsg [ 871.898990][T28399] No control pipe specified [ 871.910205][T28399] fuse: fd is not a fuse device [ 871.977502][T28410] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 871.996813][T28416] netlink: 'syz.1.5540': attribute type 1 has an invalid length. [ 872.002069][T22835] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 872.011651][T28411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5537'. [ 872.035131][T22835] usb 13-1: device descriptor read/8, error -71 [ 872.134989][T28430] fuse: fd is not a fuse device [ 872.142124][T22835] usb usb13-port1: unable to enumerate USB device [ 872.190699][T28441] netlink: 'syz.0.5549': attribute type 11 has an invalid length. [ 872.290968][T28452] CIFS: Attempting to mount //127.0.0.1/share [ 872.298861][T28452] CIFS: VFS: Error connecting to socket. Aborting operation. [ 872.303378][T28452] CIFS: VFS: cifs_mount failed w/return code = -111 [ 872.312420][T28454] CIFS: Attempting to mount //127.0.0.1/share [ 872.327028][T28454] CIFS: VFS: Error connecting to socket. Aborting operation. [ 872.330061][T28454] CIFS: VFS: cifs_mount failed w/return code = -111 [ 872.477844][T28462] syzkaller0: entered promiscuous mode [ 872.479735][T28462] syzkaller0: entered allmulticast mode [ 872.482579][T28464] deleting an unspecified loop device is not supported. [ 872.486395][T28462] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5555'. [ 872.489684][T28462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5555'. [ 872.551928][T22835] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 872.711948][T22835] usb 6-1: Using ep0 maxpacket: 32 [ 872.716322][T22835] usb 6-1: unable to get BOS descriptor or descriptor too short [ 872.722725][T22835] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 872.732541][T22835] usb 6-1: string descriptor 0 read error: -22 [ 872.735268][T22835] usb 6-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 872.746508][T22835] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 872.753823][T22835] dw2102: su3000_power_ctrl: 1, initialized 0 [ 872.760648][T22835] dvb-usb: bulk message failed: -22 (2/0) [ 872.786061][T22835] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 872.789622][T22835] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 872.793095][T22835] usb 6-1: media controller created [ 872.797629][T22835] dvb-usb: bulk message failed: -22 (6/0) [ 872.802406][T22835] dw2102: i2c transfer failed. [ 872.805486][T22835] dvb-usb: bulk message failed: -22 (6/0) [ 872.807396][T22835] dw2102: i2c transfer failed. [ 872.810152][T22835] dvb-usb: bulk message failed: -22 (6/0) [ 872.813816][T22835] dw2102: i2c transfer failed. [ 872.815397][T22835] dvb-usb: bulk message failed: -22 (6/0) [ 872.817233][T22835] dw2102: i2c transfer failed. [ 872.818773][T22835] dvb-usb: bulk message failed: -22 (6/0) [ 872.820564][T22835] dw2102: i2c transfer failed. [ 872.822538][T22835] dvb-usb: bulk message failed: -22 (6/0) [ 872.824409][T22835] dw2102: i2c transfer failed. [ 872.826008][T22835] dvb-usb: MAC address: 02:02:02:02:02:02 [ 872.829818][T28476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5561'. [ 872.837644][T22835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 872.868819][T22835] dvb-usb: bulk message failed: -22 (3/0) [ 872.872194][T22835] dw2102: command 0x0e transfer failed. [ 872.875696][T22835] dvb-usb: bulk message failed: -22 (3/0) [ 872.877536][T22835] dw2102: command 0x0e transfer failed. [ 873.109182][T28485] dummy0: entered allmulticast mode [ 873.192118][T22835] dvb-usb: bulk message failed: -22 (3/0) [ 873.194675][T22835] dw2102: command 0x0e transfer failed. [ 873.197096][T22835] dvb-usb: bulk message failed: -22 (3/0) [ 873.199362][T22835] dw2102: command 0x0e transfer failed. [ 873.201516][T22835] dvb-usb: bulk message failed: -22 (1/0) [ 873.203914][T22835] dw2102: command 0x51 transfer failed. [ 873.210959][T28442] dvb-usb: bulk message failed: -22 (5/0) [ 873.216807][T28442] dw2102: i2c transfer failed. [ 873.233046][T28496] gadgetfs: Unknown parameter 'echo_l' [ 873.239872][T22835] DVB: Unable to find symbol ds3000_attach() [ 873.243131][T22835] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 873.301920][T22835] rc_core: IR keymap rc-su3000 not found [ 873.304698][T22835] Registered IR keymap rc-empty [ 873.314091][T22835] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 873.320146][T22835] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input71 [ 873.334430][T22835] dvb-usb: schedule remote query interval to 150 msecs. [ 873.337446][T22835] dw2102: su3000_power_ctrl: 0, initialized 1 [ 873.340020][T22835] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 873.348570][T22835] usb 6-1: USB disconnect, device number 39 [ 873.414652][T22835] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 873.558439][T28506] FAULT_INJECTION: forcing a failure. [ 873.558439][T28506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.562123][ T64] Bluetooth: hci3: command tx timeout [ 873.563489][T28506] CPU: 2 UID: 0 PID: 28506 Comm: syz.8.5570 Tainted: G L syzkaller #0 PREEMPT(full) [ 873.563508][T28506] Tainted: [L]=SOFTLOCKUP [ 873.563513][T28506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 873.563520][T28506] Call Trace: [ 873.563524][T28506] [ 873.563529][T28506] dump_stack_lvl+0x100/0x190 [ 873.563550][T28506] should_fail_ex.cold+0x5/0xa [ 873.563571][T28506] strncpy_from_user+0x3b/0x2d0 [ 873.563619][T28506] do_getname+0x78/0x390 [ 873.563642][T28506] do_sys_openat2+0xc7/0x1e0 [ 873.563662][T28506] ? __pfx_do_sys_openat2+0x10/0x10 [ 873.563682][T28506] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 873.563700][T28506] ? __fget_files+0x21f/0x3d0 [ 873.563715][T28506] __x64_sys_openat+0x12d/0x210 [ 873.563731][T28506] ? __pfx___x64_sys_openat+0x10/0x10 [ 873.563746][T28506] ? ksys_write+0x1ac/0x250 [ 873.563761][T28506] do_syscall_64+0x115/0x870 [ 873.563777][T28506] ? clear_bhb_loop+0x70/0xc0 [ 873.563791][T28506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.563804][T28506] RIP: 0033:0x7f946f39e0d9 [ 873.563815][T28506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.563826][T28506] RSP: 002b:00007f94702c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 873.563838][T28506] RAX: ffffffffffffffda RBX: 00007f946f625fa0 RCX: 00007f946f39e0d9 [ 873.563845][T28506] RDX: 0000000000000001 RSI: 0000200000000780 RDI: ffffffffffffff9c [ 873.563852][T28506] RBP: 00007f94702c9090 R08: 0000000000000000 R09: 0000000000000000 [ 873.563859][T28506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.563865][T28506] R13: 00007f946f626038 R14: 00007f946f625fa0 R15: 00007ffc4d67f8d8 [ 873.563879][T28506] [ 873.922801][T28527] openvswitch: netlink: Port -2146435068 exceeds max allowable 65535 [ 873.994036][T28532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5576'. [ 874.012845][T28532] bridge1: port 1(dummy0) entered blocking state [ 874.015698][T28532] bridge1: port 1(dummy0) entered disabled state [ 874.018705][T28532] dummy0: entered allmulticast mode [ 874.023821][T28532] dummy0: entered promiscuous mode [ 874.030888][T28532] netlink: 'syz.1.5576': attribute type 10 has an invalid length. [ 874.045786][T28532] bridge1: port 1(dummy0) entered blocking state [ 874.048993][T28532] bridge1: port 1(dummy0) entered forwarding state [ 874.056365][T28532] dummy0: left allmulticast mode [ 874.058483][T28532] bridge1: port 1(dummy0) entered disabled state [ 874.221581][T28546] program syz.3.5582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 874.754141][T16137] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 874.911908][T16137] usb 13-1: Using ep0 maxpacket: 16 [ 874.914967][T16137] usb 13-1: New USB device found, idVendor=0486, idProduct=0185, bcdDevice= 0.40 [ 874.920268][T16137] usb 13-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 874.926345][T16137] usb 13-1: config 1 interface 0 has no altsetting 0 [ 874.931366][T16137] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.935174][T16137] usb 13-1: Product: syz [ 874.937383][T16137] usb 13-1: Manufacturer: syz [ 874.939433][T16137] usb 13-1: SerialNumber: syz [ 874.947364][ T42] kauditd_printk_skb: 119 callbacks suppressed [ 874.947379][ T42] audit: type=1800 audit(1130.872:6008): pid=26041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=383342 res=0 errno=0 [ 874.958727][ T42] audit: type=1800 audit(1130.872:6009): pid=26041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=383374 res=0 errno=0 [ 874.965522][ T42] audit: type=1800 audit(1130.872:6010): pid=26041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=383349 res=0 errno=0 [ 874.972071][ T42] audit: type=1800 audit(1130.872:6011): pid=26041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=383350 res=0 errno=0 [ 875.129637][T28562] __nla_validate_parse: 1 callbacks suppressed [ 875.129650][T28562] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5588'. [ 875.140736][T28562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5588'. [ 875.143812][T28562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5588'. [ 875.151724][T28557] netlink: 14975 bytes leftover after parsing attributes in process `syz.8.5586'. [ 875.175812][T28562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5588'. [ 875.178713][T28562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5588'. [ 875.196580][T28565] input: syz0 as /devices/virtual/input/input72 [ 875.200785][ T42] audit: type=1800 audit(1131.122:6012): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=383408 res=0 errno=0 [ 875.215754][ T42] audit: type=1800 audit(1131.122:6013): pid=26558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=383423 res=0 errno=0 [ 875.222233][ T42] audit: type=1800 audit(1131.122:6014): pid=26558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=383426 res=0 errno=0 [ 875.231736][ T42] audit: type=1800 audit(1131.122:6015): pid=26558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=383425 res=0 errno=0 [ 875.239208][ T42] audit: type=1800 audit(1131.122:6016): pid=26558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=383424 res=0 errno=0 [ 875.248025][ T42] audit: type=1800 audit(1131.122:6017): pid=26558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=383415 res=0 errno=0 [ 875.370390][T16137] usbhid 13-1:1.0: can't add hid device: -71 [ 875.373718][T16137] usbhid 13-1:1.0: probe with driver usbhid failed with error -71 [ 875.386995][T16137] usb 13-1: USB disconnect, device number 7 [ 875.593164][T28574] tmpfs: Unknown parameter 'ions/midi2.usb0' [ 875.987424][T28593] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5598'. [ 876.278976][T28603] kAFS: bad VL server IP address [ 876.404297][T28616] FAULT_INJECTION: forcing a failure. [ 876.404297][T28616] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 876.409306][T28616] CPU: 1 UID: 0 PID: 28616 Comm: syz.1.5607 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.409326][T28616] Tainted: [L]=SOFTLOCKUP [ 876.409331][T28616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 876.409362][T28616] Call Trace: [ 876.409370][T28616] [ 876.409377][T28616] dump_stack_lvl+0x100/0x190 [ 876.409405][T28616] should_fail_ex.cold+0x5/0xa [ 876.409423][T28616] ? prepare_alloc_pages+0x16d/0x5f0 [ 876.409451][T28616] should_fail_alloc_page+0xeb/0x140 [ 876.409473][T28616] prepare_alloc_pages+0x1f0/0x5f0 [ 876.409492][T28616] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 876.409511][T28616] ? stack_trace_save+0x8e/0xc0 [ 876.409524][T28616] ? __pfx_stack_trace_save+0x10/0x10 [ 876.409537][T28616] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 876.409552][T28616] ? kasan_save_stack+0x3f/0x50 [ 876.409566][T28616] ? kasan_save_stack+0x30/0x50 [ 876.409579][T28616] ? kasan_save_track+0x14/0x30 [ 876.409592][T28616] ? __kasan_slab_alloc+0x89/0x90 [ 876.409606][T28616] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 876.409619][T28616] ? security_inode_alloc+0x3b/0x2c0 [ 876.409636][T28616] ? inode_init_always_gfp+0xc77/0xfb0 [ 876.409649][T28616] ? alloc_inode+0x8e/0x250 [ 876.409665][T28616] ? iget_locked+0x1d9/0x6d0 [ 876.409681][T28616] ? kernfs_get_inode+0x46/0x470 [ 876.409693][T28616] ? look_up_lock_class+0x64/0x120 [ 876.409709][T28616] ? __lookup_slow+0x155/0x320 [ 876.409728][T28616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.409743][T28616] ? __lock_acquire+0x49f/0x1a40 [ 876.409758][T28616] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 876.409774][T28616] ? policy_nodemask+0xed/0x4f0 [ 876.409792][T28616] alloc_pages_mpol+0x1fb/0x540 [ 876.409809][T28616] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 876.409824][T28616] ? do_raw_spin_lock+0x128/0x260 [ 876.409841][T28616] ? find_held_lock+0x2b/0x80 [ 876.409851][T28616] ? inode_doinit_with_dentry+0x70b/0x1320 [ 876.409872][T28616] alloc_pages_noprof+0x1a/0x160 [ 876.409891][T28616] get_free_pages_noprof+0x10/0xb0 [ 876.409905][T28616] inode_doinit_with_dentry+0x788/0x1320 [ 876.409925][T28616] ? __lock_acquire+0x49f/0x1a40 [ 876.409939][T28616] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 876.409956][T28616] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 876.409977][T28616] selinux_d_instantiate+0x26/0x40 [ 876.409995][T28616] security_d_instantiate+0x14c/0x1b0 [ 876.410009][T28616] d_splice_alias_ops+0xd7/0x15c0 [ 876.410027][T28616] ? rcu_is_watching+0x12/0xc0 [ 876.410046][T28616] ? __up_read+0x333/0x980 [ 876.410064][T28616] ? __pfx_d_splice_alias_ops+0x10/0x10 [ 876.410081][T28616] ? kernfs_iop_lookup+0x234/0x2d0 [ 876.410094][T28616] ? kernfs_iop_lookup+0x234/0x2d0 [ 876.410111][T28616] kernfs_iop_lookup+0x23f/0x2d0 [ 876.410126][T28616] __lookup_slow+0x155/0x320 [ 876.410143][T28616] lookup_slow+0x50/0x70 [ 876.410158][T28616] link_path_walk+0x1377/0x1cc0 [ 876.410181][T28616] path_openat+0x1c9/0x4280 [ 876.410193][T28616] ? __kasan_slab_alloc+0x89/0x90 [ 876.410207][T28616] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 876.410225][T28616] ? do_getname+0x35/0x390 [ 876.410239][T28616] ? __x64_sys_openat+0x12d/0x210 [ 876.410258][T28616] ? __pfx_path_openat+0x10/0x10 [ 876.410275][T28616] do_file_open+0x20e/0x430 [ 876.410288][T28616] ? __pfx_do_file_open+0x10/0x10 [ 876.410305][T28616] ? __pfx_kfree_link+0x10/0x10 [ 876.410320][T28616] ? alloc_fd+0x471/0x7a0 [ 876.410334][T28616] ? do_getname+0x191/0x390 [ 876.410350][T28616] do_sys_openat2+0x10f/0x1e0 [ 876.410365][T28616] ? __pfx_do_sys_openat2+0x10/0x10 [ 876.410381][T28616] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 876.410398][T28616] ? __fget_files+0x21f/0x3d0 [ 876.410412][T28616] __x64_sys_openat+0x12d/0x210 [ 876.410427][T28616] ? __pfx___x64_sys_openat+0x10/0x10 [ 876.410442][T28616] ? ksys_write+0x1ac/0x250 [ 876.410457][T28616] do_syscall_64+0x115/0x870 [ 876.410472][T28616] ? clear_bhb_loop+0x70/0xc0 [ 876.410487][T28616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.410499][T28616] RIP: 0033:0x7fd826d9e0d9 [ 876.410510][T28616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.410521][T28616] RSP: 002b:00007fd827d3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 876.410533][T28616] RAX: ffffffffffffffda RBX: 00007fd827025fa0 RCX: 00007fd826d9e0d9 [ 876.410541][T28616] RDX: 0000000000000001 RSI: 0000200000000780 RDI: ffffffffffffff9c [ 876.410548][T28616] RBP: 00007fd827d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 876.410554][T28616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.410561][T28616] R13: 00007fd827026038 R14: 00007fd827025fa0 R15: 00007ffcbf4481f8 [ 876.410575][T28616] [ 876.605896][T28618] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 876.754025][T28629] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 876.991989][ T5872] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 877.122195][ T5872] usb 6-1: device descriptor read/64, error -71 [ 877.361910][ T5872] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 877.466834][T28641] syzkaller1: entered promiscuous mode [ 877.469191][T28641] syzkaller1: entered allmulticast mode [ 877.495240][T28641] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5615'. [ 877.501990][ T5872] usb 6-1: device descriptor read/64, error -71 [ 877.563171][T28644] kvm: user requested TSC rate below hardware speed [ 877.570004][T28644] netlink: Conntrack attr has 8 unknown bytes [ 877.577530][T28644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.622349][ T5872] usb usb6-port1: attempt power cycle [ 877.716090][T28648] FAULT_INJECTION: forcing a failure. [ 877.716090][T28648] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 877.723244][T28648] CPU: 1 UID: 0 PID: 28648 Comm: syz.3.5618 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.723289][T28648] Tainted: [L]=SOFTLOCKUP [ 877.723295][T28648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.723305][T28648] Call Trace: [ 877.723326][T28648] [ 877.723334][T28648] dump_stack_lvl+0x100/0x190 [ 877.723373][T28648] should_fail_ex.cold+0x5/0xa [ 877.723394][T28648] ? prepare_alloc_pages+0x16d/0x5f0 [ 877.723422][T28648] should_fail_alloc_page+0xeb/0x140 [ 877.723450][T28648] prepare_alloc_pages+0x1f0/0x5f0 [ 877.723480][T28648] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 877.723519][T28648] ? stack_trace_save+0x8e/0xc0 [ 877.723540][T28648] ? __pfx_stack_trace_save+0x10/0x10 [ 877.723559][T28648] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 877.723583][T28648] ? kasan_save_stack+0x3f/0x50 [ 877.723604][T28648] ? kasan_save_stack+0x30/0x50 [ 877.723623][T28648] ? kasan_save_track+0x14/0x30 [ 877.723644][T28648] ? __kasan_slab_alloc+0x89/0x90 [ 877.723665][T28648] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 877.723686][T28648] ? security_inode_alloc+0x3b/0x2c0 [ 877.723710][T28648] ? inode_init_always_gfp+0xc77/0xfb0 [ 877.723729][T28648] ? alloc_inode+0x8e/0x250 [ 877.723753][T28648] ? iget_locked+0x1d9/0x6d0 [ 877.723777][T28648] ? kernfs_get_inode+0x46/0x470 [ 877.723801][T28648] ? look_up_lock_class+0x64/0x120 [ 877.723828][T28648] ? __lookup_slow+0x155/0x320 [ 877.723855][T28648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.723890][T28648] ? __lock_acquire+0x49f/0x1a40 [ 877.723913][T28648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 877.723937][T28648] ? policy_nodemask+0xed/0x4f0 [ 877.723965][T28648] alloc_pages_mpol+0x1fb/0x540 [ 877.723992][T28648] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 877.724015][T28648] ? do_raw_spin_lock+0x128/0x260 [ 877.724042][T28648] ? find_held_lock+0x2b/0x80 [ 877.724059][T28648] ? inode_doinit_with_dentry+0x70b/0x1320 [ 877.724120][T28648] alloc_pages_noprof+0x1a/0x160 [ 877.724153][T28648] get_free_pages_noprof+0x10/0xb0 [ 877.724176][T28648] inode_doinit_with_dentry+0x788/0x1320 [ 877.724205][T28648] ? __lock_acquire+0x49f/0x1a40 [ 877.724228][T28648] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 877.724264][T28648] selinux_d_instantiate+0x26/0x40 [ 877.724292][T28648] security_d_instantiate+0x14c/0x1b0 [ 877.724316][T28648] d_splice_alias_ops+0xd7/0x15c0 [ 877.724346][T28648] ? rcu_is_watching+0x12/0xc0 [ 877.724377][T28648] ? __up_read+0x333/0x980 [ 877.724405][T28648] ? __pfx_d_splice_alias_ops+0x10/0x10 [ 877.724433][T28648] ? kernfs_iop_lookup+0x234/0x2d0 [ 877.724454][T28648] ? kernfs_iop_lookup+0x234/0x2d0 [ 877.724482][T28648] kernfs_iop_lookup+0x23f/0x2d0 [ 877.724514][T28648] __lookup_slow+0x155/0x320 [ 877.724543][T28648] lookup_slow+0x50/0x70 [ 877.724569][T28648] link_path_walk+0x1712/0x1cc0 [ 877.724608][T28648] path_openat+0x1c9/0x4280 [ 877.724628][T28648] ? __kasan_slab_alloc+0x89/0x90 [ 877.724652][T28648] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 877.724674][T28648] ? do_getname+0x35/0x390 [ 877.724697][T28648] ? __x64_sys_openat+0x12d/0x210 [ 877.724732][T28648] ? __pfx_path_openat+0x10/0x10 [ 877.724760][T28648] do_file_open+0x20e/0x430 [ 877.724785][T28648] ? __pfx_do_file_open+0x10/0x10 [ 877.724816][T28648] ? __pfx_kfree_link+0x10/0x10 [ 877.724842][T28648] ? alloc_fd+0x471/0x7a0 [ 877.724866][T28648] ? do_getname+0x191/0x390 [ 877.724894][T28648] do_sys_openat2+0x10f/0x1e0 [ 877.724917][T28648] ? __pfx_do_sys_openat2+0x10/0x10 [ 877.724943][T28648] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 877.724973][T28648] ? __fget_files+0x21f/0x3d0 [ 877.724998][T28648] __x64_sys_openat+0x12d/0x210 [ 877.725023][T28648] ? __pfx___x64_sys_openat+0x10/0x10 [ 877.725046][T28648] ? ksys_write+0x1ac/0x250 [ 877.725074][T28648] do_syscall_64+0x115/0x870 [ 877.725098][T28648] ? clear_bhb_loop+0x70/0xc0 [ 877.725121][T28648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.725141][T28648] RIP: 0033:0x7fdcde59e0d9 [ 877.725159][T28648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.725177][T28648] RSP: 002b:00007fdcdf384028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 877.725209][T28648] RAX: ffffffffffffffda RBX: 00007fdcde825fa0 RCX: 00007fdcde59e0d9 [ 877.725222][T28648] RDX: 0000000000000001 RSI: 0000200000000780 RDI: ffffffffffffff9c [ 877.725235][T28648] RBP: 00007fdcdf384090 R08: 0000000000000000 R09: 0000000000000000 [ 877.725248][T28648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.725259][T28648] R13: 00007fdcde826038 R14: 00007fdcde825fa0 R15: 00007ffea9656278 [ 877.725287][T28648] [ 877.923658][T28651] bridge_slave_0: left allmulticast mode [ 877.935269][T28651] bridge_slave_0: left promiscuous mode [ 877.938046][T28651] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.970694][T28651] bridge_slave_1: left allmulticast mode [ 877.972527][ T5872] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 877.975197][T28651] bridge_slave_1: left promiscuous mode [ 877.979607][T28651] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.991137][T28651] bond0: (slave bond_slave_0): Releasing backup interface [ 877.994253][ T5872] usb 6-1: device descriptor read/8, error -71 [ 877.998141][T28651] bond0: (slave bond_slave_1): Releasing backup interface [ 878.002184][T28651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.005524][T28651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.009855][T28651] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 878.241959][ T5872] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 878.272675][ T5872] usb 6-1: device descriptor read/8, error -71 [ 878.382439][ T5872] usb usb6-port1: unable to enumerate USB device [ 879.267884][T28675] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5626'. [ 879.270961][T28673] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5626'. [ 879.464694][T28677] kvm: user requested TSC rate below hardware speed [ 879.468851][T28677] netlink: Conntrack attr has 8 unknown bytes [ 879.470901][T28677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.601888][T28679] FAULT_INJECTION: forcing a failure. [ 879.601888][T28679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 879.607394][T28679] CPU: 0 UID: 0 PID: 28679 Comm: syz.8.5628 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.607423][T28679] Tainted: [L]=SOFTLOCKUP [ 879.607430][T28679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 879.607441][T28679] Call Trace: [ 879.607462][T28679] [ 879.607471][T28679] dump_stack_lvl+0x100/0x190 [ 879.607501][T28679] should_fail_ex.cold+0x5/0xa [ 879.607523][T28679] ? prepare_alloc_pages+0x16d/0x5f0 [ 879.607551][T28679] should_fail_alloc_page+0xeb/0x140 [ 879.607579][T28679] prepare_alloc_pages+0x1f0/0x5f0 [ 879.607609][T28679] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 879.607649][T28679] ? stack_trace_save+0x8e/0xc0 [ 879.607671][T28679] ? __pfx_stack_trace_save+0x10/0x10 [ 879.607692][T28679] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 879.607717][T28679] ? kasan_save_stack+0x3f/0x50 [ 879.607737][T28679] ? kasan_save_stack+0x30/0x50 [ 879.607758][T28679] ? kasan_save_track+0x14/0x30 [ 879.607776][T28679] ? __kasan_slab_alloc+0x89/0x90 [ 879.607796][T28679] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 879.607817][T28679] ? security_inode_alloc+0x3b/0x2c0 [ 879.607843][T28679] ? inode_init_always_gfp+0xc77/0xfb0 [ 879.607862][T28679] ? alloc_inode+0x8e/0x250 [ 879.607886][T28679] ? iget_locked+0x1d9/0x6d0 [ 879.607909][T28679] ? kernfs_get_inode+0x46/0x470 [ 879.607929][T28679] ? look_up_lock_class+0x64/0x120 [ 879.607953][T28679] ? __lookup_slow+0x155/0x320 [ 879.607981][T28679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.608006][T28679] ? __lock_acquire+0x49f/0x1a40 [ 879.608029][T28679] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 879.608054][T28679] ? policy_nodemask+0xed/0x4f0 [ 879.608081][T28679] alloc_pages_mpol+0x1fb/0x540 [ 879.608107][T28679] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 879.608130][T28679] ? do_raw_spin_lock+0x128/0x260 [ 879.608156][T28679] ? find_held_lock+0x2b/0x80 [ 879.608172][T28679] ? inode_doinit_with_dentry+0x70b/0x1320 [ 879.608205][T28679] alloc_pages_noprof+0x1a/0x160 [ 879.608233][T28679] get_free_pages_noprof+0x10/0xb0 [ 879.608256][T28679] inode_doinit_with_dentry+0x788/0x1320 [ 879.608287][T28679] ? __lock_acquire+0x49f/0x1a40 [ 879.608310][T28679] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 879.608345][T28679] selinux_d_instantiate+0x26/0x40 [ 879.608372][T28679] security_d_instantiate+0x14c/0x1b0 [ 879.608393][T28679] d_splice_alias_ops+0xd7/0x15c0 [ 879.608421][T28679] ? rcu_is_watching+0x12/0xc0 [ 879.608448][T28679] ? __up_read+0x333/0x980 [ 879.608474][T28679] ? __pfx_d_splice_alias_ops+0x10/0x10 [ 879.608500][T28679] ? kernfs_iop_lookup+0x234/0x2d0 [ 879.608522][T28679] ? kernfs_iop_lookup+0x234/0x2d0 [ 879.608548][T28679] kernfs_iop_lookup+0x23f/0x2d0 [ 879.608572][T28679] __lookup_slow+0x155/0x320 [ 879.608600][T28679] lookup_slow+0x50/0x70 [ 879.608625][T28679] link_path_walk+0x1377/0x1cc0 [ 879.608668][T28679] path_openat+0x1c9/0x4280 [ 879.608687][T28679] ? __kasan_slab_alloc+0x89/0x90 [ 879.608709][T28679] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 879.608729][T28679] ? do_getname+0x35/0x390 [ 879.608751][T28679] ? __x64_sys_openat+0x12d/0x210 [ 879.608784][T28679] ? __pfx_path_openat+0x10/0x10 [ 879.608812][T28679] do_file_open+0x20e/0x430 [ 879.608834][T28679] ? __pfx_do_file_open+0x10/0x10 [ 879.608863][T28679] ? __pfx_kfree_link+0x10/0x10 [ 879.608886][T28679] ? alloc_fd+0x471/0x7a0 [ 879.608909][T28679] ? do_getname+0x191/0x390 [ 879.608934][T28679] do_sys_openat2+0x10f/0x1e0 [ 879.608958][T28679] ? __pfx_do_sys_openat2+0x10/0x10 [ 879.608982][T28679] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 879.609009][T28679] ? __fget_files+0x21f/0x3d0 [ 879.609033][T28679] __x64_sys_openat+0x12d/0x210 [ 879.609057][T28679] ? __pfx___x64_sys_openat+0x10/0x10 [ 879.609079][T28679] ? ksys_write+0x1ac/0x250 [ 879.609106][T28679] do_syscall_64+0x115/0x870 [ 879.609130][T28679] ? clear_bhb_loop+0x70/0xc0 [ 879.609153][T28679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.609172][T28679] RIP: 0033:0x7f946f39e0d9 [ 879.609188][T28679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.609206][T28679] RSP: 002b:00007f94702c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 879.609236][T28679] RAX: ffffffffffffffda RBX: 00007f946f625fa0 RCX: 00007f946f39e0d9 [ 879.609248][T28679] RDX: 0000000000000001 RSI: 0000200000000780 RDI: ffffffffffffff9c [ 879.609260][T28679] RBP: 00007f94702c9090 R08: 0000000000000000 R09: 0000000000000000 [ 879.609270][T28679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.609281][T28679] R13: 00007f946f626038 R14: 00007f946f625fa0 R15: 00007ffc4d67f8d8 [ 879.609306][T28679] [ 879.785999][T28681] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 879.819535][T28681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28681 comm=syz.1.5629 [ 879.840523][T28684] pim6reg1: entered promiscuous mode [ 879.842509][T28684] pim6reg1: entered allmulticast mode [ 879.959349][ T42] kauditd_printk_skb: 55 callbacks suppressed [ 879.959365][ T42] audit: type=1800 audit(1135.882:6073): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 879.996299][T28689] ip6gre1: entered promiscuous mode [ 879.998136][T28689] ip6gre1: entered allmulticast mode [ 880.015088][ T42] audit: type=1800 audit(1135.942:6074): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 880.059682][ T42] audit: type=1800 audit(1135.982:6075): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 880.088458][ T42] audit: type=1800 audit(1136.012:6076): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 880.126897][ T42] audit: type=1800 audit(1136.052:6077): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 880.148426][T28701] [ 880.149454][T28701] ============================================ [ 880.151867][T28701] WARNING: possible recursive locking detected [ 880.154105][T28701] syzkaller #0 Tainted: G L [ 880.156738][T28701] -------------------------------------------- [ 880.159420][T28701] syz.8.5636/28701 is trying to acquire lock: [ 880.161581][T28701] ffff888036830160 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_kernel_open+0xa4/0x190 [ 880.165456][T28701] [ 880.165456][T28701] but task is already holding lock: [ 880.168405][T28701] ffff8880351c4160 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_open+0x296/0xba0 [ 880.172090][T28701] [ 880.172090][T28701] other info that might help us debug this: [ 880.175179][T28701] Possible unsafe locking scenario: [ 880.175179][T28701] [ 880.176665][ T42] audit: type=1400 audit(1136.102:6078): avc: denied { write } for pid=28699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.178142][T28701] CPU0 [ 880.178150][T28701] ---- [ 880.178155][T28701] lock(&rmidi->open_mutex); [ 880.178171][T28701] lock(&rmidi->open_mutex); [ 880.192489][T28701] [ 880.192489][T28701] *** DEADLOCK *** [ 880.192489][T28701] [ 880.195278][T28701] May be due to missing lock nesting notation [ 880.195278][T28701] [ 880.198477][T28701] 2 locks held by syz.8.5636/28701: [ 880.200560][T28701] #0: ffff8880351c4160 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_open+0x296/0xba0 [ 880.204556][T28701] #1: ffff888036830460 (&ump->open_mutex){+.+.}-{4:4}, at: snd_ump_legacy_open+0x120/0x4e0 [ 880.208335][T28701] [ 880.208335][T28701] stack backtrace: [ 880.210585][T28701] CPU: 1 UID: 0 PID: 28701 Comm: syz.8.5636 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.210621][T28701] Tainted: [L]=SOFTLOCKUP [ 880.210629][T28701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 880.210643][T28701] Call Trace: [ 880.210650][T28701] [ 880.210657][T28701] dump_stack_lvl+0x100/0x190 [ 880.210686][T28701] print_deadlock_bug.cold+0xbd/0xca [ 880.210731][T28701] __lock_acquire+0x1256/0x1a40 [ 880.210761][T28701] lock_acquire+0x1b9/0x370 [ 880.210783][T28701] ? snd_rawmidi_kernel_open+0xa4/0x190 [ 880.210806][T28701] ? __pfx___might_resched+0x10/0x10 [ 880.210835][T28701] __mutex_lock+0x1a4/0x1bd0 [ 880.210864][T28701] ? snd_rawmidi_kernel_open+0xa4/0x190 [ 880.210882][T28701] ? snd_rawmidi_kernel_open+0xa4/0x190 [ 880.210900][T28701] ? __mutex_lock+0x26d/0x1bd0 [ 880.210921][T28701] ? snd_ump_legacy_open+0x120/0x4e0 [ 880.210942][T28701] ? __pfx___mutex_lock+0x10/0x10 [ 880.210963][T28701] ? __pfx___mutex_lock+0x10/0x10 [ 880.210989][T28701] ? snd_rawmidi_kernel_open+0xa4/0x190 [ 880.211007][T28701] snd_rawmidi_kernel_open+0xa4/0x190 [ 880.211027][T28701] snd_ump_legacy_open+0x367/0x4e0 [ 880.211049][T28701] open_substream+0x480/0x970 [ 880.211066][T28701] rawmidi_open_priv+0x595/0x6f0 [ 880.211085][T28701] snd_rawmidi_open+0x4c9/0xba0 [ 880.211106][T28701] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 880.211124][T28701] ? __pfx_default_wake_function+0x10/0x10 [ 880.211148][T28701] ? kobject_get_unless_zero+0x156/0x200 [ 880.211177][T28701] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 880.211195][T28701] snd_open+0x201/0x450 [ 880.211235][T28701] ? __pfx_snd_open+0x10/0x10 [ 880.211258][T28701] chrdev_open+0x234/0x6a0 [ 880.211277][T28701] ? __pfx_chrdev_open+0x10/0x10 [ 880.211294][T28701] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 880.211331][T28701] do_dentry_open+0x6ab/0x14d0 [ 880.211348][T28701] ? __pfx_chrdev_open+0x10/0x10 [ 880.211368][T28701] vfs_open+0x82/0x3f0 [ 880.211389][T28701] path_openat+0x2873/0x4280 [ 880.211411][T28701] ? __pfx_path_openat+0x10/0x10 [ 880.211432][T28701] do_file_open+0x20e/0x430 [ 880.211450][T28701] ? __pfx_do_file_open+0x10/0x10 [ 880.211475][T28701] ? alloc_fd+0x471/0x7a0 [ 880.211493][T28701] ? do_getname+0x191/0x390 [ 880.211515][T28701] do_sys_openat2+0x10f/0x1e0 [ 880.211536][T28701] ? __pfx_do_sys_openat2+0x10/0x10 [ 880.211561][T28701] __x64_sys_openat+0x12d/0x210 [ 880.211582][T28701] ? __pfx___x64_sys_openat+0x10/0x10 [ 880.211606][T28701] do_syscall_64+0x115/0x870 [ 880.211637][T28701] ? clear_bhb_loop+0x70/0xc0 [ 880.211659][T28701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.211677][T28701] RIP: 0033:0x7f946f35e90e [ 880.211693][T28701] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 880.211711][T28701] RSP: 002b:00007f94702c8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 880.211731][T28701] RAX: ffffffffffffffda RBX: 00007f94702c96c0 RCX: 00007f946f35e90e [ 880.211744][T28701] RDX: 000000000008803f RSI: 00007f94702c8c00 RDI: ffffffffffffff9c [ 880.211756][T28701] RBP: 00007f94702c8c00 R08: 0000000000000000 R09: 0000000000000000 [ 880.211767][T28701] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 880.211778][T28701] R13: 00007f946f626038 R14: 00007f946f625fa0 R15: 00007ffc4d67f8d8 [ 880.211794][T28701] [ 880.239228][ T42] audit: type=1800 audit(1136.162:6079): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 880.369380][ T42] audit: type=1400 audit(1136.202:6080): avc: denied { write } for pid=28704 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.384463][ T42] audit: type=1800 audit(1136.242:6081): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 880.649147][ T42] audit: type=1400 audit(1136.572:6082): avc: denied { write } for pid=28708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1