last executing test programs: 1m26.121983932s ago: executing program 1 (id=24): socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='deny', 0x4) sendto$inet(r0, &(0x7f0000000500)="0089db385cdcf626903354328e2afbd0503128dcbbbffc84c304d8e8a33c10ae3d695be650febac87a371d77abebefea6ce201480a5eb8f32810cf148a2092a0a23a0ff06c0b4cbfeabf126b6a818e325487924e1190a0a723710c97a899d4ec9ea1d224d709fbcaa62a0a79d3bd6c153e72682539f77d55231f98649e6f", 0x7e, 0x85, &(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x218, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x50]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x310) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000005c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000640)=0x8, 0x4) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0xb041}], 0x1, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x800}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x3c, 0x1, 0x8, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x8000, 0x401, 0x80000001}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0x4, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', r5, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x82000) 1m26.071753433s ago: executing program 1 (id=25): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newsa={0x150, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x4d2, 0x32}, @in=@remote, {0x2, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @iptfs_drop_time={0x8, 0x24, 0x2710}, @iptfs_reorder_window={0x6, 0x25, 0x3}]}, 0x150}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x40, 0x32, 0x0, @remote, @local}, {0x4d2, 0x1, @basic={0x0, 0x0, 0x0, [@runt="00112233"]}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x40, 0x32, 0x0, @remote, @local}, {0x4d2, 0x3, @basic={0x0, 0x0, 0x0, [@runt="00112233"]}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0\x00') 1m25.971240154s ago: executing program 1 (id=26): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000280)={0x4, 0x5}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="777275fa02060000000000000000000001000007"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000140)=@sg0, r0, &(0x7f0000000200)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r6, &(0x7f00000004c0), &(0x7f0000000500)=@udp=r5}, 0x20) recvfrom$inet6(r5, 0x0, 0x0, 0x40002042, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, 0x0) socket(0x10, 0x3, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x130) ptrace$pokeuser(0x6, 0x0, 0x388, 0xb000003) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 1m25.810558047s ago: executing program 1 (id=29): setgid(0xee00) r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000100)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000047c0)=@vmx={0x4, 0x0, 0x1078, {0x1002000, 0xffffffffffffffff}, {"d07ee51100"}}) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='bpf\x00', 0x214dc7, 0x0) syz_kvm_add_vcpu$x86(r2, &(0x7f00000003c0)={0x0, &(0x7f0000000180)=[@enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x263c, 0xc, 0x1}}, @out_dx={0x6a, 0x28, {0xdbc1, 0x1, 0x3}}, @code={0xa, 0x63, {"66ba210066ed0fa1c48255b71ec4a3297b47c80066baf80cb8440a468eef66bafc0cb803000000efb9d40200000f322647eb73c4e239000366baf80cb8ab8b5a8fef66bafc0cb05fee26660f64830e000000"}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @code={0xa, 0x74, {"66baf80cb8d87ed488ef66bafc0c66b8620066ef66bad10466b8000866ef66baf80cb8664be58eef66bafc0c66edc422fda8c40f01fc48b8d7000000000000000f23c80f21f8350c0090000f23f80f01c566450f388247fd460f01dfc40259bc4416fd"}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x7, 0x3d, 0x1}}, @code={0xa, 0x56, {"66baf80cb8403a1f84ef66bafc0cb800000000ef0f35b99f0800000f32430fae0ec4617d73f0f666bad104b052ee406f8172a7a082ffff6566366545dfb7000000000f2311"}}, @in_dx={0x69, 0x20, {0xd1dd}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x235}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x6023, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f0000002780)={0x2020}, 0xfc4b) 1m25.640356473s ago: executing program 1 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0x1d) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)='27', 0x2) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000140)='gfs2\x00', 0x10, 0x0) (fail_nth: 8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff6000/0x1000)=nil) 1m25.37039841s ago: executing program 1 (id=34): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$netlink(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xdc1, &(0x7f00000006c0)={@local, @empty, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0xdab, 0x66, 0x0, 0x4, 0x21, 0x0, @loopback, @multicast1}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x7, 0x3, "3abd73", 0x70, ' Y\b'}, "ea7742cae1119614fdecd964f61cd7c6e2aac3f1f6136f5767ce6b944f4d16a5301808dfeb8282fa3d066fb11a3ba4a83d5a786a4a366f9c73a77bfd94120248a99a559d42fcf046805578f72d49339e4deb45f42c0c260a89e74b723449e618f92ff800618bdf4448898424e5c12d1342b5593858267e11d84c1aab2906962dd01f37da0f531ed5a1d516d59290dcbe0885383b6e2a8c214eff48bd8950f31bba5e25a8bcbc4599a97be6fed56b4e7dcfe09257fdd8580dd5dea1fd3873cf58498df54d308c3112ff953ef0fa39f49bc7d86eedd7c4bf3171e4d0f434b97854695e47feddd9e0f1aa515c3db816dde92f317b51c7e1c03ec327ea12d863540788c8b77bd334314592e4ca28bda907db59a6ba764898c6baa7d4986dd4485a4d90085507291718d17927e9ab9bef35f8fb6cd8861d030ae96eb121369828acf1ab1263358fa1526fef9b487535519b3de63dd6fcd578e63a2839aa52295ab1d5f280bae1ccb6172021460460774d028081431f064ad26765c59da8707535f468a35ff765a6a6b629d88db0282814a53886db25605d624cd8e589c6b14538364089f81f0c6040cbe003854f1941d82afcd98cfec6c1f4f6d7e669a0ce1035aca9ee3bb3f0e032527f948188989ca830600166cb0a055fd918bb566bc163dd057033fb21e1a2b8fd4d88711c9defb4bd75e44129e1665e39be3aea06d42f77d5d4bda7532d43b8b1f1a2defea47b6e63aefcc77781a55dada27bd571accacb0c8fe3a667bbc08aa9ad36dce36997da0becfe58151e7aa524dd91b5308a88396c6e1cfbc046714fcf665e3a4623d2e51f0287821f630245a10035bba17ed25d86b42808b80e6b8de426029ea06e00209380b671b1f53c0e7fee8dda54ad8ef2329889220a88cdcda46b344fc2ac19dd31c31cca419c154229d0548a443b2a5d4ed3db78685c4da9cc2d5d80f3fb78d7842bceed4b18864a54c74ff8846327f1232bd28d5f51a0383f606a8d85903d49ef5f48730b175e432bcbae2cb29e32d6007f3940da5e23349caf2f916f694c6dc307fd9545fa6d900a6e1b9a8cfde5260007b5a438bf7222ac47b56614a42c86508e90939f177174d4b8f1a349f803b2b75c43e06bd0aba06692e5fed07e2c7af2fc8e7e2b109ce2ec446a33fd36eeff6c4f7639ce6e476772699ee96dc2a207af12f7507012aa77d96ee7ba0256549548d885ca5e794b86adb62d6f9f5051d52534b8bf7072e9c94db09cd5be9bc90e0d87a7d8397644e386ed9f70103f0d93b63b558d6be7eb580b8844275159e3ee8532c518c9c096d767438ca9d84ee14388d206d8afa94eac4eca04e6b0b90230a66c9accaf70d165a872664ad8d732b906fedc09db03bb84a6ec4e56ad1ab2cd871cb97cd755c6446b5cdba5999d3dabfc192575e1d62232dfaadfabb5cfa9174ec68d4caf87d3978de4fb1a614ef1dbfde670557248f51ecc9b826957f5d67f05e50f192c3bc0a2d4d61ebcae4e57fe8cd0189a4c2d3389a6d7c6e01fb120e5783f84ff9bc800519f6128ab5cde9d4c392a896040a29dbe3c4626453d9b065bb8a1b4d54e158e19db876aaf3184fbb242ea545b3b0a4316923d9ad4d65a11dc7fd36b95a3d90ac3d539aff5ebdd166e33eb185c09c3ff7e4ff50a9b3057b15c621c998fd38ebad0770d10c747b55b2890856880b94892f35d1c6c9462e6b96e27afd5a4791eaa6e40ce807597a5f510b095fa75215dfec39840fc895561a5ff5e72332ccb871c98b6690818984a30f5f7587043c1127f24933e37540df5ebe7772977a669dd4ef9b60a79ccf7ce55f46b161685d112afc5bbb8b68879b3ee2a1b5e51fedb02863e0d2be3f6746e531aaad1943ccbcb6e96a2540f5f970c728b9b3bffa98347cc546f317f35496c1ee4ec75d4c9fa08580bbfbbfcb5a941049d54eecec220b2c54a06f2ad3be96a2157e9493554ecc08963d1cc2bb4a83536b20e85cbc02be6aaaaa8773c6a5203d403d80d5296a53fbcf6083f6cac2bdadd82bea925e6ca502b71e7eedf785dd25e606f5a6d0aa27e06943e5fc8131d9c4aa4011650c6fa05ce40aa8a8b0be5b3bbdfa3df6e451762e7f71fdca43f1161b40397576d33eb654085b138b00dc863f55b3ab4ff9e13b6e02721fa915a717b38b528bc703a0357e9e66720e810a2ee3973ba7e022650b7899cc3baf12986f9fefc6106e2c5f5a278573822038f60ab6cf528f8672c0196862c2b5c829110273cdb36634e6b91920fd9f27ef9a8fdd5b76ea5c1b1e180a57aabff4fdd3505f3836cab79c28450cda0e5efbbd55e039a1d0284c543410a16d092e5885b0530c0e9273cf9626190ac625d39f089d902ff34c283261f17ed5f6f50816e585c1b72e84c435c0ced5ea6905b5830ebc98bc92716ad480a6689670f68b80e331c13642e17022330bb1f3197e21ca90ff997194e8c8e55718cd03d1b617d445e6265f78f3ab20e75121f2126bd31ced2901c27cfe7eeb0b376f7ebe4907abbd3e06479bf5878d444d32cce87583531c1d80fcda4c83b903d2a82964b4703d3b54af65c5d60238f227b45fa25ca6b433089cf7b09af915b7b0422f366119734ab58f105aacb675b2433b41e2f3d9634741adb401c3333a7a70f7e11b6a2182ad2069ee8bd2f981c681abecf9e30b6781cd4035be7ef82c1ff939600925b9ea6444f11f2c53861d5c31f449154debec97fd07484db94f9d1362d2cff4305b1484f21e6758bcffe83d0a25fbab3df8201a4a1c83957d5c2182606f5b7b1501754e5940a8f667b047c0a2b184eb1155a66491d8735bb176038781d7ca99569af475db82fcecc5c115a159d737be7c4d8baaeb0653afb684804a51b51db172efc9e7bfe6af9aa8e9114967ec6235dcb7e593431b3c3da2fb2e5dfe7513362c6b7fd45df745971a5de8c57372f51d6f5d18edf9afeb23b004092d53ade2df245a70f8341ea837fa106fe8f666a63781749474274bbe661e57f66fa38ea94455037278ee69614f644f0a4e2ab6767f71dc2003a75f5d75c77ad9b43b8d2486b61eba8a2a2cd025749f56587f4350f57ca7ea236a4fa7de7ed30c902c4b6cbbd7f3a405b8ff7b05f11f7473dc8bf3bd93583abf14cf69ee43191af645048d966b32f5f36a9954ca6024f849c77d4969da10cedb2e92f2892eb4048bd1541e9e0979eb56b7add705df810c39908c9de07ce59382160b863904f83317102fce3cc68333016c9234e863ec554f204c1e2376f5ee76706c7921057d69b7a20e5d68b15dab1764796e1dadd53e2a1ff18e9157e6fc7f7dcf8c2e500fa501828754bb2543a30f044918dedee0fb5a4f45b04ea2413799fa069ba6b6e51b97587524ef3f3d21d28a6ed7b3edabac33a270672ec7b82f8009eb43add31d52dce6441b2aefbf1784a31d152387f07d01688b3f812d6a51b31711ed7b1e9a4706aaae89c21eeff29fb28aaa5484e4954fdb6e2e60854b4af5b37d014e492b99f57bbd975def16056b28f35b3cd7d4df9ca2320e6091c2b4b333a047d3b29c44e18337767f13c48503cc3dbf460f3c0036701a695c89e601d86dffeb80456ca46f0c5080de3b817a95a07d543338fd254d4d0bdb0c24e6ad7d2df037b234956eb5be8bb72334ec4447b72962e0e14d3e0c6936e97ebe57c23cefd7d52f83b15cbff1ea8ae52c4c6cc7f27aac41ff75a0fee8ba35d0f8a0ee8e0567e8cf635f3b5d1f6d07332e6c28f770a9a1348fc82e8373baaaf19724d064fdb69c8abf1c099aa8c5a6838a479c8d875f726dfbcbd2d64feb617a88089d01248e40d537812dc0af5b5a63db9e6295d1cf59d78b8e833d7d40d61b36b35419eb60e0c8ac8b5448de74b28373f7c4295f14bc658d4369b4abe23d193a1f19bcba766922b7b1891b29c6b8b48f4c4cdee013d5cc6318e4b434e43ce3270de7ff53641c3e291bdc2c81ecc641502dfbbad7d905dcafc9e070eb001e142676308f650a6ba75c53f36a51caa2363f1aea081682caa7d73cef2632f7e59143f3c772eaa9a28194e5c90f5077d4f2e8a9be79eac6edb4b09feaed4c9fdaf7dabfde72d378a3b13a228cc12eb6e6fc642bb25b204a505cbbb8ae5b992d807e391ce2a963f9caa6a1e97fd081d1135c5f323c34ee5bd44a5fed36198c37570e7a76c70a4d037dd26da0cd655da49686ce2b07a15a4d6d1fb632eb6d166f99fca503385c9c7d6600bca715dbb2922015586885ee88b324de6448bf06b935938a3b9387ce0492b28f72e0205008c71d2cc85193ccc9df99e12334c2f1965957e62ee10f63e0cd8ef466aa1f8f62cea64bd329ad9a79fdc8a122ce5ba79aa04d4b8cab13af27d9174f0839cf5c3e726e0d2a3bd15982b047437c2be0a59c503b3408f3de1db85e567d342c1e626da9770955c90783b0a9ffb1cda52c4929b9d45ee8fa721c79c657331154fef74dcd6e068945557ef027bbecbe5f7fd9dd09c31be30198e05b67fc94f21a6e5cd75050c56a8d6499c2c6eaabe3eff5e9177b5fd1a4117f2c1cc37b67fbacad37f4071c734ad74eb974f9456d481eafa61f83758f37acb91d19431cc07ee18ffaca1d92b868ce0ab9063da1f5d8eb2a99965d93c73a28dd8395253dd3ea6de367cc5fc92dd1c8210f1d86f0be4b55b6703b6a4195255562c85b0aa4d17240f5724ce0bd23849176e1234aa51a72e9e79cc048e9dcff3733890b6ac6652c87072a2c5d23b14350c462b3e43ea49261ee6b4e6b9ba82c43e89bdfebe2fef505370a7c5514ca8055c2be318e2ac98628e053469a9c9e074db857dcd818cda9c1be25effb347cd4b549e58f9306fd01d5e9f76bd1948cc9d4ba895bdf0840a1c9c1947f300236cd09af63160fd3c1d14000000000000000000"}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}}, 0x0) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="0000890d0180c2000003aaaaaaaaaabb81000000080045ec00280066000000deecaa29fe"], 0x3e) 1m10.258476944s ago: executing program 32 (id=34): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$netlink(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xdc1, &(0x7f00000006c0)={@local, @empty, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0xdab, 0x66, 0x0, 0x4, 0x21, 0x0, @loopback, @multicast1}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x7, 0x3, "3abd73", 0x70, ' Y\b'}, "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"}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}}, 0x0) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="0000890d0180c2000003aaaaaaaaaabb81000000080045ec00280066000000deecaa29fe"], 0x3e) 1m7.421548546s ago: executing program 2 (id=281): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400", @ANYBLOB="0000000000000000280012"], 0x48}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000006c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000700), 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES8=r2], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000030a010800000000000000000a0000070900010073797a31000000000900030073797a30000000001c000880040002"], 0x90}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x2, 0x40000000000180, 0x100000000002, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x9, 0x1, 0xfffffffffffffff8, 0x2, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000000206010a00000000000000000000000005000500020000000900020073797a3000000000280004000000feff0c", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x2002c8c4}, 0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000400)={0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000680)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m7.119834534s ago: executing program 2 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r3], 0x1c}}, 0x0) sendfile(r1, r1, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/cpu_dma_latency\x00', 0x2, 0x0) timer_create(0x2, &(0x7f0000000100)={0x0, 0x21, 0x2}, &(0x7f0000000140)) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f00000001c0)=[{r5, 0x84df}], 0x1, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="900035bc00002400000000000080ff0000000700000080006730261c30a525a4282f7c9a94b0814f5f50cb8971c91a57ef095238a4492b5eba8cc1fc386452396507fc585e2215920b33a7603286ae8b8b1e0d0953f4f8763ebdb46bac6894a8134f8ab15c8a263b6ec2fda36cef888f17d05ba96b45bf643ff33d118283e1e0d73cac0721728ebb029ef04ef190046ce3c1405cfe"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x40}}]}, 0x30}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10040000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x0, &(0x7f0000000a40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000a80)='./file0\x00') write$binfmt_elf64(r7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x0, 0x0, 0x0) unshare(0x2040400) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000ff0900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) read(r4, 0x0, 0x0) 1m7.020070667s ago: executing program 2 (id=287): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x80881000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, 0x0, 0x24000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/fscreate\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000640)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0xa2000, 0x0) lseek(r5, 0xca, 0x3) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000001b40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000003b80)={0x50, 0x0, r6, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50) chdir(&(0x7f0000003c00)='./file0\x00') syz_fuse_handle_req(r4, &(0x7f0000003c40)="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", 0x2000, &(0x7f0000005c40)={&(0x7f0000005d00)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x14438207, 0x0, 0xffff, 0x0, 0xf84}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000001640)='./dev\x00', &(0x7f0000001680)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000016c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000001700)=@filename='./dev/sda1\x00', &(0x7f0000001740)='./mnt\x00', &(0x7f0000001780)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f00000017c0)='./mnt\x00') symlinkat(0x0, 0xffffffffffffff9c, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00004aa000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000001800)={0x310, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x98, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x20, 0x0, @random="2405084b471f817cb84a23856f92b4fe0c54fe39a05205439d00cb8d"}, {0x5, 0x0, @random="f4"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x15, 0x0, @random="7ba905d9d7015911b76b42347916098414"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x118, 0x84, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xe2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7fffffff}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1ff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x101}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="c4db8c5ae0aa"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x20, 0x1, @random="bf843d7000b801ceb89af69c066047e668f4f5728358964302ea028f"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x7f}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7f}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfffff800}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1a, 0x1, @random="148535397b227a1d314f21cddd399bc5de8cd77bf56e"}]}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0x134, 0x2a, [@random_vendor={0xdd, 0xfa, "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"}, @chsw_timing={0x68, 0x4, {0x980f, 0x5}}, @challenge={0x10, 0x1, 0xb6}, @rann={0x7e, 0x15, {{0x1, 0x29}, 0x8, 0x1, @device_b, 0x6, 0x24, 0x8}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x5, 0x20}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x310}, 0x1, 0x0, 0x0, 0x10000800}, 0x40088d0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x2, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xa}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x27}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xe7e}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000600)={0x1, 0x0, [{0x485, 0x0, 0x20000165}]}) 1m6.940547454s ago: executing program 3 (id=292): r0 = socket$inet(0xa, 0x801, 0x84) timer_create(0x0, &(0x7f00000008c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000900)=0x0) timer_settime(r1, 0x1, &(0x7f0000000140), 0x0) mmap(&(0x7f0000420000/0x3000)=nil, 0x3000, 0x3800003, 0x200000005c831, r0, 0xffffc000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000980)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000009c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000a00)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x40000008) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) timer_settime(r5, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r3) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02"], 0x66) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000b80)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r9, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000c80)={0x0, 0xf, 0x2, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r7, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x8) syz_ublk_setup_io_uring(0x4257, &(0x7f0000000000)={0x0, 0xddb8, 0x1000, 0x0, 0x85}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) sendmsg$nl_route(r6, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a00000429bd7000fcdbdf2580202007fe00c80400000000395e9b342bc80de4ea673764ca75f2e093cc756bbeb7d4c558891a692dbfa0909e71908229c9c7e1983ec8d06563d39a23e4061f50f5eb053d0e727cc63c8a0df4b32464093f12b13694c2f7560d795221bfd234d88df79233f9e79ff4c3d3952379d33b82669eaa9daf85ea7d"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x44040887) 1m6.831530467s ago: executing program 3 (id=294): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) setns(0xc9, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000580)=0x9, 0x4) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000005c0)={0x200000000000001}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000600)=[{{&(0x7f0000000640)={0xa, 0x4e23, 0x16f3ba41, @mcast2, 0x7}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000006c0)="024bbc2c17066a", 0x7}, {&(0x7f0000000700)="96c329", 0x3}], 0x2}}], 0x1, 0x4001c00) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r1, 0x8}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010010000500000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x20000402, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000040000000100000084000000", @ANYRES32=0x0, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000001c0)={0x0, 'syz_tun\x00', {0x1}}) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r7) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x30, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x800) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="020000090000000000f7030079800000000000004c8c82ef12c85e1bd59ad6558bbf761d16ac60930105826d5bfc22fc40aa9cad52ce5bee0c33cc4cf20e8856840489958bb8ebd4bbba6a91c1a35c985280bbb3ceb580169ed2e978e7055c0aa7b27bb8948fff0d8908c28b7380f48b1f863f18eace", @ANYRES32=0x1, @ANYBLOB="faffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000100"/28], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x2, 0x3, 0x8, 0xc1, 0x20250, r3, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x16, 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB="653b1800010000001812479b5988716ca2de3a314b873706dd9335647ab4393ebdba032ef7e64ace9238af75df5509", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x40, 0xe7, &(0x7f00000009c0)=""/231, 0x41100, 0xa, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0x3, 0x80000000, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000fc0)=[r9, r3, r4, r10, r4, r4, r4, r4], &(0x7f0000001000)=[{0x3, 0x4, 0xd, 0x3}], 0x10, 0x8}, 0x94) r11 = fsmount(0xffffffffffffffff, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xa, &(0x7f00000002c0)=ANY=[@ANYRES64=r6, @ANYRES32=r4, @ANYBLOB="0000000000000000620afcff00000000bfa25c838d74000007020000fcffffff85000000010000005100010000000000950000000000000061010011000000009500000000000000252c9a125a11d56898e9847a9af7091a91f7fa09de0168929a3371d967f555fa2540785ecf110abc9ccb3fc0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000840)='./proc/file0\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r12, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000010}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 1m6.671906292s ago: executing program 3 (id=296): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @rand_addr=0x64010100, @empty}}}], 0x20}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@filename='mtd0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x101c42, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) 1m6.671550182s ago: executing program 3 (id=297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000002c0)=0x42000401, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c000000090601020000000000000000020008000900020073797a3000000042240007800c00018008000140e00000020c00028008000140ffffffff08000a4000000001050001000700"], 0x4c}}, 0x800) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e22, 0x0, @empty, 0x1000}, 0x1c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000200)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000045e4d344b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000480)=@generic={0x0, r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000140001002dbd7000fddbdf2502184000", @ANYRES32, @ANYBLOB="08000200ac1e0001140006"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0xa0) mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000840)='./file0/../file0\x00') mount$bind(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0xd5848, 0x0) pivot_root(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='./file0/../file0\x00') r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000700)={0x2, 0x4e22, @loopback}, 0x10) 1m6.610330799s ago: executing program 3 (id=299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffffb]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002440)={0x0, 0x0, 0xfffffffb}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000180)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='sec\x00', &(0x7f0000000200)='krb5i\x00', 0x0) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000080)='wi', 0x2}], 0x1, 0x1) rmdir(&(0x7f0000000240)='./file0\x00') migrate_pages(0x0, 0x9, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0x102) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x18, r5, 0x92aee21e8374661, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44004}, 0x40880) 1m6.19931464s ago: executing program 3 (id=301): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f320de337c0004060000000000bf852c8986626691b01b2d44e4ce5f715f2d2d285f2c2dde2cb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) 1m6.136263243s ago: executing program 33 (id=301): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f320de337c0004060000000000bf852c8986626691b01b2d44e4ce5f715f2d2d285f2c2dde2cb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) 1m6.091637483s ago: executing program 2 (id=303): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.time\x00', 0x275a, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000440)={@mcast2}, 0x14) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/89, 0x59}], 0x1, 0xb7, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 1m5.950331585s ago: executing program 2 (id=304): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "e3c7c5c9af62780c183990a8a514eece95f673e72221e9232b0599dcb73580d4ad446a6613a8c2e0fbe83b5351cb4bdac6608ed797d41f306a4f4fd6df7a12eb", 0x28}, 0x48, 0xfffffffffffffff9) keyctl$link(0x8, 0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000002600)={0x14}, 0x14) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0x1d) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "0af2bb1b151128ea231d27f28af019fde8253972b1054bd8f57ea88db0b313476267e39fe5bafa9b0e8e48c30a4cf04357f42ba847aa80ba67d67dbab58ec0e6", 0x40}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, r0, r0, 0x0) write(r2, &(0x7f0000000580)='27', 0x2) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000140)='gfs2\x00', 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff6000/0x1000)=nil) 1m5.490840077s ago: executing program 2 (id=305): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000240)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000280)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f00000002c0)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000400)='P', 0x1, 0x1e8000) r1 = syz_open_dev$loop(&(0x7f0000000580), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000005c0)={0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 54.811168319s ago: executing program 0 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount$tmpfs(0x0, &(0x7f0000000340)='.\x00', &(0x7f00000003c0), 0x200000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0) tee(r0, r0, 0xffffffff, 0x3) r5 = gettid() r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000017c0)="130000001a001f00030300f9002304000a04d6", 0x13) ftruncate(r6, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001a00)={0x6, 0x7504, {r5}, {r3}, 0x7, 0x2}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001600)=@o_path={&(0x7f00000015c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1f, 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="1802000000000100000000000000000085000000c500000095"], &(0x7f0000001780)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001640)=@o_path={&(0x7f0000001580)='./file0\x00', r8, 0x4000, r2}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000043c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0400328059021580fe277017f8a8db89cdd5d86a2515c22c733b7fb4ef225d8dda6554fd7fde8e2a15cae3410a774720a661575471fc47560afaa041df31b28f1915b77f45a83e593479373231ebfdc771f131c948729d21872f009f37754a510ca831e48670b378a4f391e0063b2d407883f60c87081a6c103f576c1b4fc8f2f8a31bb98bc11bb23c007036aaa81267fa68a3986097d833f85ac3f21a0f7b573912953108004500", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="736cbe31c63df22be75472326b847f8fd98a2181375cdcbf5033f39f75f60f41f3af3da5998a3a973bda0669be0ebf755e9584c8f6ec46a82ef4f8021b81dc55473f5c3fa77812ea1b9521435fcd88acc7784812a174bda55ee4a7daeeb7a3a4474bbccc3f20ca1c21e49190d6d3261b2506284ed0c547f24b5d51e917e4fbc19469f2314587c9dd27b66880bc31d39ab8074bb1088416955d97cb57c4795af40400b68008006500e000000208002300", @ANYRES32=r7, @ANYBLOB="1400bc0020010000000000000000000000000000040008800000000800f200", @ANYRES32=r3, @ANYBLOB="040055800400fe809b2e7a358423c34b8767550d7d25467f3ea59ed8c9b3a8f57a329c0441a3cc409ec595801c7f660bcb846a1f452b9d55a8e6b3f17f8754786b9fa8190bd3a0e73999a825c6891f8f549ea3366ad89f04005f0004000b800000000c00a000ffff00000000000000"], 0x295c}}, 0xc004) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000440)={{r0}, "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"}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=@newtaction={0xa0, 0x30, 0x9, 0x70bd2b, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3, 0x0, 0x4}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000140), 0xffffffff7ffffffd, 0x160862) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000001c0)={r11, 0x1000, {0x0, 0x0, 0x0, 0x8, 0x4000000000000bfd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xe]}}) pwritev(r10, &(0x7f0000000300)=[{&(0x7f0000000340)}, {&(0x7f0000000380)="f0e370dde86bf130bd7fbe27c0fdd7b4b93c526e42bc9ba30fbd9360191459333b5a2b881799936116fb661fb784cabbe56abf5e9f3781061e19c5", 0x3b}, {&(0x7f00000003c0)}], 0x3, 0x1, 0x8) socket$netlink(0x10, 0x3, 0x8) 54.728570862s ago: executing program 0 (id=420): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000080)={0xc, r1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4) prlimit64(0x0, 0x10, &(0x7f0000000140)={0x2000000000, 0xfffffffffffffffe}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x88c, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x80600, 0x0, 0x0, 0x0, 0x0, 0x0) 54.661516475s ago: executing program 0 (id=422): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) openat(0xffffffffffffffff, 0x0, 0x503942, 0x70) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000140)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x246, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8080) r3 = syz_open_dev$sndpcmc(0x0, 0x1, 0x101000) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3ff, 0x1, 0x6, 0xdf6, 0xffff, 0xffffffffffffffff}) sched_setattr(r4, &(0x7f0000000340)={0x38, 0x0, 0x4, 0x8, 0x0, 0xc, 0x1, 0xfffffe0000000001, 0xfa11, 0x5}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000004000000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000440)=""/112, &(0x7f00000004c0), &(0x7f0000000500), 0x80, r5, 0x0, 0x7}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/crypto\x00', 0x0, 0x0) 54.581658735s ago: executing program 0 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}, {0xc8}}}, 0x6) 54.51185166s ago: executing program 0 (id=425): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2a, 0x9, 0x70bd25, 0x25dfd37f, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0x20, 0x2f, 0x107, 0x0, 0x25dfdbfb, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="8847b2f7"]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc014) 53.941520642s ago: executing program 0 (id=427): r0 = socket(0x840000000002, 0x3, 0xff) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/kernel/ns_last_pid\x00', 0x2, 0x0) write$tcp_mem(r1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r1}, 0x94) (async) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080)=0xfff, 0x4) 53.781263415s ago: executing program 34 (id=427): r0 = socket(0x840000000002, 0x3, 0xff) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/kernel/ns_last_pid\x00', 0x2, 0x0) write$tcp_mem(r1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r1}, 0x94) (async) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080)=0xfff, 0x4) 50.41371599s ago: executing program 35 (id=305): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000240)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000280)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f00000002c0)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000400)='P', 0x1, 0x1e8000) r1 = syz_open_dev$loop(&(0x7f0000000580), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000005c0)={0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 48.579892192s ago: executing program 5 (id=472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0x4, 0x2, 0x8, 0x4, 0x3, 0x3, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x42600}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x10800) 48.399411798s ago: executing program 5 (id=477): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x3000, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000310009002abd7000000000000400000004001d"], 0x18}}, 0x84) 48.269026115s ago: executing program 5 (id=482): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x5cc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106, 0x6}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106, 0x6}}, 0x20) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/15, 0x13}], 0x1d) 48.1799749s ago: executing program 5 (id=486): syz_open_procfs$userns(0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x700, 0x3, 0xb2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffe, 0x800, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0xa001, 0xfffffffe, 0x20146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacdc, 0x4, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x80000, 0x1, 0x167}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0x3, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) inotify_add_watch(0xffffffffffffffff, 0x0, 0x260) 47.811049933s ago: executing program 5 (id=488): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0x1d) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)='27', 0x2) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000140)='gfs2\x00', 0x10, 0x0) (fail_nth: 11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff6000/0x1000)=nil) 47.621236818s ago: executing program 5 (id=493): setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000080)={0x480002000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_ethernet(0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaa88a81200670017008847c74eb1f37a02"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x2001, 0x5) write(r1, &(0x7f00000003c0)='atkbd', 0x5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x43}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3564}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc7}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x53}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xff}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000019680)={'wlan1\x00', @random="0300"}) 32.598112338s ago: executing program 36 (id=493): setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000080)={0x480002000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_ethernet(0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaa88a81200670017008847c74eb1f37a02"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x2001, 0x5) write(r1, &(0x7f00000003c0)='atkbd', 0x5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x43}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3564}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc7}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x53}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xff}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000019680)={'wlan1\x00', @random="0300"}) 23.441051723s ago: executing program 7 (id=772): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x4c, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000007, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x209d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0xf, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000006c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000700), 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES8=r2], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000030a010800000000000000000a0000070900010073797a31000000000900030073797a30000000001c000880040002"], 0x90}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x2, 0x40000000000180, 0x100000000002, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x9, 0x1, 0xfffffffffffffff8, 0x2, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000000206010a00000000000000000000000005000500020000000900020073797a3000000000280004000000feff0c", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x2002c8c4}, 0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000400)={0x1}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000680)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 23.210405267s ago: executing program 7 (id=777): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x178) mount(&(0x7f0000000340)=@filename='mtd0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000400)='./file0\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c, 0x0}}], 0x1, 0x20000012) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f00000000c0)={'virt_wifi0\x00', @multicast}) r1 = open(&(0x7f0000000440)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000000480)=""/184, 0xb8) getdents(r1, 0x0, 0x0) 23.210180693s ago: executing program 7 (id=778): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) dup2(r1, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, r1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x12, &(0x7f00000001c0)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0x95}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce5f715f2d2d285f2c2dde2cb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) 23.070427969s ago: executing program 7 (id=781): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) tkill(r2, 0xc) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x1, 0x7, "4af92c", 0x34, 0x88}) 23.069912263s ago: executing program 7 (id=783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES32=r0]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000008000000e47f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000300)='s\\', &(0x7f0000000340)=""/106}, 0x20) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0x1d) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000440), 0x0, 0x8100) ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0x8000000000000001) write(r4, &(0x7f0000000580)='27', 0x2) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000140)='gfs2\x00', 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff6000/0x1000)=nil) 22.611506033s ago: executing program 7 (id=785): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x4c, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000007, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x209d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0xf, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000006c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000700), 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES8=r2], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000030a010800000000000000000a0000070900010073797a31000000000900030073797a30000000001c000880040002"], 0x90}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x2, 0x40000000000180, 0x100000000002, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x9, 0x1, 0xfffffffffffffff8, 0x2, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000000206010a00000000000000000000000005000500020000000900020073797a3000000000280004000000feff0c", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x2002c8c4}, 0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000400)={0x1}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000680)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 19.630314437s ago: executing program 8 (id=804): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x6000, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000310009002abd7000000000000400000004001d"], 0x18}}, 0x84) 19.430764623s ago: executing program 8 (id=808): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400", @ANYBLOB="0000000000000000280012"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x4c, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000007, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x209d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0xf, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x6, &(0x7f0000000640)={0x0, 0x11, 0x0, @thr={&(0x7f0000000780)="3cb0072db28ddc814abcca645e27f7487bfa83106ddd394753829e02cc2f2b88f797ee9a53f7edf739c62df826a2b80dff78e37ab7aec140964d0255c0fd0d0e096ded45d0d5fa31255f8cbe69b5684d0ba8b026b70a4f65a437fb3a034064460fa60cf92bd2fa1638a719a06fa759474b2305ace6755a92", &(0x7f0000000880)="e0492557a18fc28b46e6d066bb6eaec9d1c776ad963dd18008e95cb2b39e014ac94ce033bf5b8270cbea2555f3cd8cd55fce208735e4ca0e29ddb0e42daf0d445cd501dfd8873d590e398c9d15b847e090a2bc223e1b26705b78d2eacc8e2859c43ad0be3731"}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f00000006c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000700), 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000030a010800000000000000000a0000070900010073797a31000000000900030073797a30000000001c000880040002"], 0x90}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x2, 0x40000000000180, 0x100000000002, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x9, 0x1, 0xfffffffffffffff8, 0x2, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000000206010a00000000000000000000000005000500020000000900020073797a3000000000280004000000feff0c", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x2002c8c4}, 0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 18.70114188s ago: executing program 8 (id=813): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x4000) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000380)={0x7ce6ec34, 0xfffffffe, 0x100, 0x4d, 0x3, 0xfffffff8}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1002810, &(0x7f0000000180)=ANY=[]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) (async) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) sendmmsg$unix(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000280)='grpquota') r3 = creat(&(0x7f00000002c0)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x8000000000005, 0x2, 0x1, 0x5}) (async) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x8000000000005, 0x2, 0x1, 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 18.640771319s ago: executing program 8 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = userfaultfd(0x80001) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x40000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1a5}) r2 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r2, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002540)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0x4}, {0x0, 0x9}}}, 0x24}}, 0x4004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_REGISTER(r1, 0x4010aa0a, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000300)='./file0\x00') mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x8000, &(0x7f0000000400)={'trans=virtio,', {[{@dfltuid={'dfltuid', 0x3d, 0xee01}}]}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) 18.54179005s ago: executing program 8 (id=815): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0x1d) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)='27', 0x2) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000140)='gfs2\x00', 0x10, 0x0) (fail_nth: 13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff6000/0x1000)=nil) 18.237547406s ago: executing program 8 (id=816): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="020000000000000000000000000000000d000000a2fd9b008779c8cdfbfcb3b5529c06ec59fa564c3fa676036d051d2116bd3d5fc5a55da3d527a0280d08a8438a5f8d186d7fa729636c65cce9106ea3d73b1869d37377a7652dcc710e30bc2b57292460ef4ffa17cdea71d60009e6123c76ffdefc21c45395bdea6034aebfc46e9a4cc2dd15ae02b5b76480e88e95924f40898b8885ef932a6518ac51c2facaead62336cb9cb76a9183902217628a154c1fdf6149c335ccd292c9bfe1a4e4cf514d2a136341ccfee1afcd7ebba2ab0a28f1", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="03000000050000000500"/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r5, &(0x7f0000000640)="1ca3fcc912396a58afa22473822741aac7926eace910e4e3d1f2f0fb2f4714abc5785423329ee602b83e8feeccc5094478d9d47330128fa881630fdf29c7d211fdfdd77f934d4567eab4a7"}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="020000000200"/28], 0x50) (async, rerun: 32) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) (async, rerun: 32) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000011c0), 0x8000, 0x0) (rerun: 32) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001240)=[@text64={0x40, &(0x7f0000001280)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000001300)=@arm64={0x7, 0x4, 0x9, '\x00', 0x3ff}) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r1, {0x7, 0x56}}, './file0\x00'}) (async, rerun: 64) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (rerun: 64) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r13, 0x0) (async) r14 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r14, 0xc138fd02, &(0x7f0000000e00)="0400000000000000000000003801") (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)='%pB \x00'}, 0x20) (async) r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000f00), 0x80400, 0x0) preadv(r16, &(0x7f0000000f40)=[{&(0x7f0000000f80)=""/172, 0xac}], 0x1, 0x9d, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xd, 0xf, &(0x7f00000006c0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xf}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @alu={0x4, 0x0, 0x2, 0xa, 0x0, 0x6, 0xffffffffffffffff}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000740)='GPL\x00', 0x7fff, 0xd3, &(0x7f0000000840)=""/211, 0x41000, 0x10, '\x00', r2, @sock_ops=0x3, r0, 0x8, &(0x7f0000000940)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x7, &(0x7f0000001040)=[r6, r8, r12, r13, r14, r15, r16], &(0x7f0000001080)=[{0x4, 0x2, 0x9, 0xb}, {0x5, 0x2, 0x6, 0xa}, {0x2, 0x4, 0xe, 0x4}, {0x0, 0x1, 0x3, 0x2}, {0x0, 0x2, 0xa, 0xb}, {0x5, 0x3, 0x10, 0x7}, {0x5, 0x1, 0x10, 0x9}], 0x10, 0x8}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) 6.883128765s ago: executing program 37 (id=785): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x4c, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000007, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x209d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0xf, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000006c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000700), 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES8=r2], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000030a010800000000000000000a0000070900010073797a31000000000900030073797a30000000001c000880040002"], 0x90}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x2, 0x40000000000180, 0x100000000002, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x9, 0x1, 0xfffffffffffffff8, 0x2, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000000206010a00000000000000000000000005000500020000000900020073797a3000000000280004000000feff0c", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x2002c8c4}, 0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000400)={0x1}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000680)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.235071208s ago: executing program 38 (id=816): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="020000000000000000000000000000000d000000a2fd9b008779c8cdfbfcb3b5529c06ec59fa564c3fa676036d051d2116bd3d5fc5a55da3d527a0280d08a8438a5f8d186d7fa729636c65cce9106ea3d73b1869d37377a7652dcc710e30bc2b57292460ef4ffa17cdea71d60009e6123c76ffdefc21c45395bdea6034aebfc46e9a4cc2dd15ae02b5b76480e88e95924f40898b8885ef932a6518ac51c2facaead62336cb9cb76a9183902217628a154c1fdf6149c335ccd292c9bfe1a4e4cf514d2a136341ccfee1afcd7ebba2ab0a28f1", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="03000000050000000500"/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r5, &(0x7f0000000640)="1ca3fcc912396a58afa22473822741aac7926eace910e4e3d1f2f0fb2f4714abc5785423329ee602b83e8feeccc5094478d9d47330128fa881630fdf29c7d211fdfdd77f934d4567eab4a7"}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="020000000200"/28], 0x50) (async, rerun: 32) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) (async, rerun: 32) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000011c0), 0x8000, 0x0) (rerun: 32) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001240)=[@text64={0x40, &(0x7f0000001280)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000001300)=@arm64={0x7, 0x4, 0x9, '\x00', 0x3ff}) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r1, {0x7, 0x56}}, './file0\x00'}) (async, rerun: 64) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (rerun: 64) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r13, 0x0) (async) r14 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r14, 0xc138fd02, &(0x7f0000000e00)="0400000000000000000000003801") (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)='%pB \x00'}, 0x20) (async) r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000f00), 0x80400, 0x0) preadv(r16, &(0x7f0000000f40)=[{&(0x7f0000000f80)=""/172, 0xac}], 0x1, 0x9d, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xd, 0xf, &(0x7f00000006c0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xf}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @alu={0x4, 0x0, 0x2, 0xa, 0x0, 0x6, 0xffffffffffffffff}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000740)='GPL\x00', 0x7fff, 0xd3, &(0x7f0000000840)=""/211, 0x41000, 0x10, '\x00', r2, @sock_ops=0x3, r0, 0x8, &(0x7f0000000940)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x7, &(0x7f0000001040)=[r6, r8, r12, r13, r14, r15, r16], &(0x7f0000001080)=[{0x4, 0x2, 0x9, 0xb}, {0x5, 0x2, 0x6, 0xa}, {0x2, 0x4, 0xe, 0x4}, {0x0, 0x1, 0x3, 0x2}, {0x0, 0x2, 0xa, 0xb}, {0x5, 0x3, 0x10, 0x7}, {0x5, 0x1, 0x10, 0x9}], 0x10, 0x8}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.55207193s ago: executing program 6 (id=918): syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="01802cadfece120249b6f9e96fc20000030180c200000086dd61fbddf000083aff00000000000000008000ffffac1e0001ff0200"/62], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000004000070126bd700000000000047c00000c00c28008000a00", @ANYRES32=0x0, @ANYBLOB="09604b7de4dee7d6b719620ecc"], 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) (async) r4 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.stat\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@dellinkprop={0x1ac, 0x6d, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x21084, 0x4010}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}]}, @IFLA_AF_SPEC={0x164, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1b, 0x0, 0x0, 0x1}, {0x8, 0x12, 0x0, 0x0, 0x800}, {0x8, 0x13}]}}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x28, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd6}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}]}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x15, 0x0, 0x0, 0xabc}, {0x8, 0x3, 0x0, 0x0, 0xd}, {0x8, 0x1c, 0x0, 0x0, 0x7de1}]}}, @AF_BRIDGE={0x4}, @AF_INET6={0xa8, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'netpci0\x00'}]}, 0x1ac}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@dellinkprop={0x1ac, 0x6d, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x21084, 0x4010}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}]}, @IFLA_AF_SPEC={0x164, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1b, 0x0, 0x0, 0x1}, {0x8, 0x12, 0x0, 0x0, 0x800}, {0x8, 0x13}]}}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x28, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd6}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}]}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x15, 0x0, 0x0, 0xabc}, {0x8, 0x3, 0x0, 0x0, 0xd}, {0x8, 0x1c, 0x0, 0x0, 0x7de1}]}}, @AF_BRIDGE={0x4}, @AF_INET6={0xa8, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'netpci0\x00'}]}, 0x1ac}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@bridge_getlink={0x28, 0x12, 0x100, 0x70bd27, 0x25dfdbfd, {0x7, 0x0, 0x0, r7, 0x40008, 0x4a941}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4008) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@bridge_getlink={0x28, 0x12, 0x100, 0x70bd27, 0x25dfdbfd, {0x7, 0x0, 0x0, r7, 0x40008, 0x4a941}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4008) 1.441134272s ago: executing program 6 (id=919): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000ffffffdd0000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000010c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c000100"], 0xf0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[], 0xf0}}, 0x100000000000000) 1.375750804s ago: executing program 6 (id=921): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="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", 0x143) 1.258539662s ago: executing program 6 (id=924): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000001d00)=@x86={0xcc, 0x6, 0x15, 0x0, 0xff, 0x3, 0x6, 0x29, 0x5, 0x1, 0x5, 0x5, 0x0, 0xdb2, 0x400, 0x79, 0xf9, 0x40, 0x20, '\x00', 0x80, 0xfffffffffffffffc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x178) mount(&(0x7f0000000340)=@filename='mtd0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000400)='./file0\x00') unlink(0x0) 1.177067337s ago: executing program 6 (id=926): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000002c0)=0x1000, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r1) (fail_nth: 6) 936.827799ms ago: executing program 9 (id=880): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r1, &(0x7f0000000080)='27', 0x2) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0x1}) 851.098183ms ago: executing program 9 (id=928): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000480)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @note={0x0, 0x1, 0x2, 0xe, 0x49c3}}], 0x1c) write$sndseq(r0, &(0x7f00000004c0)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='mtd0\x00', 0xc7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000340)=@ethtool_rxfh_indir={0x38}}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x32, {0x0, "488b042500304000488904250030400066ba420066b81d0066ef"}}, @nested_vmlaunch={0x12f, 0x18}], 0x7a}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x2077, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004"], 0x50) ioctl$USBDEVFS_FREE_STREAMS(r6, 0xc0105500, &(0x7f00000002c0)=ANY=[@ANYBLOB="a1"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0xb, 0x1, 0x400000, 0x100000, &(0x7f0000c68000/0x100000)=nil}) mount(&(0x7f00000000c0)=@filename='mtd0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x800000, 0x0) 501.065457ms ago: executing program 4 (id=933): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000001d00)=@x86={0xcc, 0x6, 0x15, 0x0, 0xff, 0x3, 0x6, 0x29, 0x5, 0x1, 0x5, 0x5, 0x0, 0xdb2, 0x400, 0x79, 0xf9, 0x40, 0x20, '\x00', 0x80, 0xfffffffffffffffc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x178) mount(&(0x7f0000000340)=@filename='mtd0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000400)='./file0\x00') unlink(0x0) 500.871038ms ago: executing program 4 (id=934): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={0x0, 0xffffffffffffff2b, r4, 0x0}) close_range(r2, r2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000200)={r5, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffd], [0x1, 0x0, 0x7]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/pm_test\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='core', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/power/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='freeze', 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x67a, 0x80000000006, 0xf3b8, 0x0, 0x1000, 0x3, 0x4002004c4, 0x6, 0x0, 0x1, 0x11, 0x9, 0x3, 0x4, 0x0, 0x2], 0xeeee8000, 0x200400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 339.439945ms ago: executing program 4 (id=935): r0 = socket(0x10, 0x8000f, 0x3) write(r0, &(0x7f00000000c0)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) mremap$dontunmap(&(0x7f00001a7000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f00004fa000/0x4000)=nil) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/scsi_host/host0/state\x00', 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x29e9c934, 0x3, 0x0, 0x1}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0x8}}, 0x62) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00004fd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000, 0x2}) 339.192494ms ago: executing program 4 (id=936): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000001095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x6484c2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000940)={0xe000001a}) pread64(0xffffffffffffffff, &(0x7f0000000980)=""/118, 0x76, 0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000c00), 0x208e24b) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000007c0)="600000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f0000000840)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 249.830565ms ago: executing program 9 (id=937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2b01, 0x0) openat$dm_control(0xffffffffffffff9c, &(0x7f00000008c0), 0x82000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000780)=0xa40, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000800)=0x2, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000840)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000530000ff0200000000000000000000000000014f194e20002b"], 0x65) 249.676122ms ago: executing program 6 (id=938): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x1000, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r1) 160.062565ms ago: executing program 4 (id=939): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$CDROMRESET(r0, 0x5312) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000340)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @note={0x0, 0x1, 0x2, 0xe, 0x49c3}}], 0x1c) write$sndseq(r2, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000140)=""/117, &(0x7f00000001c0)=0x75) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000fc01000000000000000000000000004a9c6c9982b19543b6cf650100000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffff000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000180000000000000020000000000000009004000000000000000000000000000000001000000000044000500fe8000000000000000000000000000aa000004d532000000000000002001000000000000000000000000000200000000020100"/180], 0xfc}}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c200000d0180c200000286dd6000000000103a01fe800000000000000000000000000000ff020000000000003991ea00000000000000018b009078000f0009000000000000401b"], 0x0) 100.051581ms ago: executing program 9 (id=940): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@filename='mtd0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x101c42, 0x0) (fail_nth: 16) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 0s ago: executing program 4 (id=941): syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d000005240600010524020006000606"], 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0xedff) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000740)=ANY=[], 0x0) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): port 2(bridge_slave_1) entered forwarding state [ 107.251169][ T13] hsr_slave_0: left promiscuous mode [ 107.251950][ T13] hsr_slave_1: left promiscuous mode [ 107.252345][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.252357][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.253264][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.253274][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.274073][ T13] veth1_macvtap: left promiscuous mode [ 107.274098][ T13] veth0_macvtap: left promiscuous mode [ 107.274144][ T13] veth1_vlan: left promiscuous mode [ 107.274176][ T13] veth0_vlan: left promiscuous mode [ 107.334422][ T8422] FAULT_INJECTION: forcing a failure. [ 107.334422][ T8422] name failslab, interval 1, probability 0, space 0, times 0 [ 107.334444][ T8422] CPU: 2 UID: 0 PID: 8422 Comm: syz.6.656 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 107.334460][ T8422] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 107.334464][ T8422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.334470][ T8422] Call Trace: [ 107.334490][ T8422] [ 107.334497][ T8422] dump_stack_lvl+0x100/0x190 [ 107.334519][ T8422] should_fail_ex.cold+0x5/0xa [ 107.334537][ T8422] should_failslab+0xc2/0x120 [ 107.334555][ T8422] __kmalloc_cache_noprof+0x91/0x6d0 [ 107.334568][ T8422] ? proc_self_get_link+0x189/0x1f0 [ 107.334595][ T8422] proc_self_get_link+0x189/0x1f0 [ 107.334608][ T8422] pick_link+0xabc/0x13c0 [ 107.334632][ T8422] ? __pfx_proc_self_get_link+0x10/0x10 [ 107.334646][ T8422] step_into_slowpath+0x9ba/0xf90 [ 107.334665][ T8422] ? __pfx_step_into_slowpath+0x10/0x10 [ 107.334683][ T8422] ? lookup_fast+0x2da/0x600 [ 107.334695][ T8422] ? inode_permission+0x377/0x630 [ 107.334710][ T8422] link_path_walk+0xf32/0x1cc0 [ 107.334731][ T8422] path_openat+0x1a7/0x23f0 [ 107.334750][ T8422] ? __pfx_path_openat+0x10/0x10 [ 107.334772][ T8422] do_file_open+0x20e/0x430 [ 107.334790][ T8422] ? __pfx_do_file_open+0x10/0x10 [ 107.334817][ T8422] ? _raw_spin_unlock+0x28/0x50 [ 107.334832][ T8422] ? alloc_fd+0x471/0x7a0 [ 107.334853][ T8422] do_sys_openat2+0x163/0x1d0 [ 107.334864][ T8422] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.334880][ T8422] __x64_sys_openat+0x12d/0x210 [ 107.334891][ T8422] ? __pfx___x64_sys_openat+0x10/0x10 [ 107.334908][ T8422] do_syscall_64+0x123/0x790 [ 107.334920][ T8422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.334946][ T8422] RIP: 0033:0x7ff92e55fd8e [ 107.334958][ T8422] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.334970][ T8422] RSP: 002b:00007ff92f3caec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.334986][ T8422] RAX: ffffffffffffffda RBX: 00007ff92f3cb6c0 RCX: 00007ff92e55fd8e [ 107.334994][ T8422] RDX: 0000000000000002 RSI: 00007ff92f3caf90 RDI: ffffffffffffff9c [ 107.335001][ T8422] RBP: 00007ff92e636b20 R08: 0000000000000000 R09: 0000000000000000 [ 107.335007][ T8422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.335014][ T8422] R13: 00007ff92e826128 R14: 00007ff92e826090 R15: 00007ffced0cd2c8 [ 107.335029][ T8422] [ 107.475212][ T13] team0 (unregistering): Port device team_slave_1 removed [ 107.488311][ T13] team0 (unregistering): Port device team_slave_0 removed [ 107.516686][ T67] Bluetooth: hci1: command tx timeout [ 107.553363][ T8428] FAULT_INJECTION: forcing a failure. [ 107.553363][ T8428] name failslab, interval 1, probability 0, space 0, times 0 [ 107.553415][ T8428] CPU: 1 UID: 0 PID: 8428 Comm: syz.7.660 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 107.553434][ T8428] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 107.553438][ T8428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.553445][ T8428] Call Trace: [ 107.553449][ T8428] [ 107.553454][ T8428] dump_stack_lvl+0x100/0x190 [ 107.553474][ T8428] should_fail_ex.cold+0x5/0xa [ 107.553492][ T8428] should_failslab+0xc2/0x120 [ 107.553515][ T8428] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 107.553534][ T8428] ? nfs_get_tree+0x76c/0x1440 [ 107.553582][ T8428] kmemdup_nul+0x49/0xd0 [ 107.553602][ T8428] nfs_get_tree+0x76c/0x1440 [ 107.553623][ T8428] vfs_get_tree+0x92/0x320 [ 107.553636][ T8428] vfs_cmd_create+0xd7/0x2a0 [ 107.553663][ T8428] __do_sys_fsconfig+0x55a/0xcb0 [ 107.553680][ T8428] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 107.553704][ T8428] do_syscall_64+0x123/0x790 [ 107.553719][ T8428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.553732][ T8428] RIP: 0033:0x7feacb79f559 [ 107.553742][ T8428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.553753][ T8428] RSP: 002b:00007feacc5b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 107.553764][ T8428] RAX: ffffffffffffffda RBX: 00007feacba25fa0 RCX: 00007feacb79f559 [ 107.553772][ T8428] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 107.553779][ T8428] RBP: 00007feacb836b20 R08: 0000000000000000 R09: 0000000000000000 [ 107.553785][ T8428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.553792][ T8428] R13: 00007feacba26038 R14: 00007feacba25fa0 R15: 00007ffe0dcb52c8 [ 107.553808][ T8428] [ 107.598980][ T5492] 8021q: adding VLAN 0 to HW filter on device eth15 [ 107.681597][ T8434] syzkaller0: entered promiscuous mode [ 107.681620][ T8434] syzkaller0: entered allmulticast mode [ 107.738022][ T1045] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 107.761171][ T8431] smpboot: CPU 1 is now offline [ 107.835143][ T42] kauditd_printk_skb: 71 callbacks suppressed [ 107.835169][ T42] audit: type=1400 audit(1793137373.673:1167): avc: denied { write } for pid=8441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.897146][ T1045] usb 9-1: Using ep0 maxpacket: 8 [ 107.897373][ T8450] overlayfs: missing 'workdir' [ 107.898325][ T1045] usb 9-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 107.900465][ T1045] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 107.900481][ T1045] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 107.900492][ T1045] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 107.900504][ T1045] usb 9-1: config 250 has no interface number 0 [ 107.900532][ T1045] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 107.900546][ T1045] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 107.900560][ T1045] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 107.900572][ T1045] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 107.900584][ T1045] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 107.900598][ T1045] usb 9-1: config 250 interface 228 has no altsetting 0 [ 107.901977][ T1045] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 107.901991][ T1045] usb 9-1: Product: syz [ 107.901998][ T1045] usb 9-1: SerialNumber: syz [ 107.902615][ T42] audit: type=1400 audit(1793137373.743:1168): avc: denied { write } for pid=8449 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.909596][ T42] audit: type=1800 audit(1793137373.753:1169): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=190485 res=0 errno=-22 [ 107.915380][ T42] audit: type=1800 audit(1793137373.753:1170): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=190516 res=0 errno=-22 [ 107.918933][ T42] audit: type=1800 audit(1793137373.763:1171): pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=190535 res=0 errno=-22 [ 107.919414][ T42] audit: type=1800 audit(1793137373.763:1172): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=190492 res=0 errno=-22 [ 107.922727][ T1045] hub 9-1:250.228: bad descriptor, ignoring hub [ 107.922742][ T1045] hub 9-1:250.228: probe with driver hub failed with error -5 [ 107.929174][ T42] audit: type=1800 audit(1793137373.763:1173): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=190493 res=0 errno=-22 [ 107.983852][ T5492] 8021q: adding VLAN 0 to HW filter on device eth16 [ 108.004994][ T8269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.029578][ T42] audit: type=1800 audit(1793137373.873:1174): pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=190581 res=0 errno=-22 [ 108.101498][ T42] audit: type=1400 audit(1793137373.933:1175): avc: denied { write } for pid=8462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.119233][ T1045] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 108.133928][ T42] audit: type=1800 audit(1793137373.973:1176): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=190514 res=0 errno=-22 [ 108.231599][ T8269] veth0_vlan: entered promiscuous mode [ 108.235172][ T8269] veth1_vlan: entered promiscuous mode [ 108.250284][ T5492] 8021q: adding VLAN 0 to HW filter on device eth17 [ 108.259806][ T8269] veth0_macvtap: entered promiscuous mode [ 108.262558][ T8269] veth1_macvtap: entered promiscuous mode [ 108.270581][ T8269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.274054][ T8269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.315648][ T8385] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.316363][ T8385] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.316471][ T8385] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.316752][ T8385] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.328927][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.328941][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.353034][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.353050][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.715548][ T24] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 108.738371][ T8424] usb 9-1: reset high-speed USB device number 12 using dummy_hcd [ 108.767397][ T8500] overlayfs: missing 'workdir' [ 108.825919][ T8504] macvlan2: entered promiscuous mode [ 108.825942][ T8504] bridge0: entered promiscuous mode [ 108.857639][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.670'. [ 108.857660][ T8504] netlink: 24 bytes leftover after parsing attributes in process `syz.6.670'. [ 108.886904][ T24] usb 13-1: Using ep0 maxpacket: 32 [ 108.887792][ T24] usb 13-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 108.888843][ T24] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 108.888873][ T24] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 108.888903][ T24] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 108.888924][ T24] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 108.888946][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 108.891084][ T24] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 108.891107][ T24] usb 13-1: Product: syz [ 108.891122][ T24] usb 13-1: Manufacturer: syz [ 108.891133][ T24] usb 13-1: SerialNumber: syz [ 108.895218][ T24] usb 13-1: config 0 descriptor?? [ 108.904081][ T24] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 108.944801][ T8515] FAULT_INJECTION: forcing a failure. [ 108.944801][ T8515] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 108.944860][ T8515] CPU: 0 UID: 0 PID: 8515 Comm: syz.7.674 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 108.944884][ T8515] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 108.944891][ T8515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.944920][ T8515] Call Trace: [ 108.944927][ T8515] [ 108.944936][ T8515] dump_stack_lvl+0x100/0x190 [ 108.944984][ T8515] should_fail_ex.cold+0x5/0xa [ 108.945007][ T8515] ? prepare_alloc_pages+0x16d/0x5b0 [ 108.945032][ T8515] should_fail_alloc_page+0xeb/0x140 [ 108.945058][ T8515] prepare_alloc_pages+0x1f0/0x5b0 [ 108.945075][ T8515] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 108.945093][ T8515] ? stack_trace_save+0x8e/0xc0 [ 108.945113][ T8515] ? __pfx_stack_trace_save+0x10/0x10 [ 108.945127][ T8515] ? stack_depot_save_flags+0x27/0x9f0 [ 108.945157][ T8515] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 108.945171][ T8515] ? kasan_save_stack+0x3f/0x50 [ 108.945183][ T8515] ? kasan_save_stack+0x30/0x50 [ 108.945200][ T8515] ? kasan_save_track+0x14/0x30 [ 108.945212][ T8515] ? __kasan_kmalloc+0xaa/0xb0 [ 108.945224][ T8515] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 108.945252][ T8515] ? mon_bin_open+0x1a8/0x470 [ 108.945277][ T8515] ? chrdev_open+0x234/0x6a0 [ 108.945297][ T8515] ? do_dentry_open+0x674/0x1470 [ 108.945311][ T8515] ? vfs_open_consume+0xcc/0x460 [ 108.945320][ T8515] ? path_openat+0x1547/0x23f0 [ 108.945344][ T8515] ? do_file_open+0x20e/0x430 [ 108.945358][ T8515] ? do_sys_openat2+0x163/0x1d0 [ 108.945367][ T8515] ? __x64_sys_openat+0x12d/0x210 [ 108.945377][ T8515] ? do_syscall_64+0x123/0x790 [ 108.945411][ T8515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.945430][ T8515] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.945457][ T8515] ? policy_nodemask+0xed/0x4f0 [ 108.945474][ T8515] alloc_pages_mpol+0x201/0x560 [ 108.945491][ T8515] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 108.945511][ T8515] alloc_pages_noprof+0x1a/0x160 [ 108.945522][ T8515] get_zeroed_page_noprof+0x18/0xb0 [ 108.945537][ T8515] mon_alloc_buff+0xce/0x1b0 [ 108.945555][ T8515] mon_bin_open+0x207/0x470 [ 108.945572][ T8515] ? __pfx_mon_bin_open+0x10/0x10 [ 108.945589][ T8515] chrdev_open+0x234/0x6a0 [ 108.945605][ T8515] ? __pfx_chrdev_open+0x10/0x10 [ 108.945621][ T8515] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 108.945645][ T8515] do_dentry_open+0x674/0x1470 [ 108.945659][ T8515] ? __pfx_chrdev_open+0x10/0x10 [ 108.945676][ T8515] vfs_open_consume+0xcc/0x460 [ 108.945689][ T8515] path_openat+0x1547/0x23f0 [ 108.945708][ T8515] ? __pfx_path_openat+0x10/0x10 [ 108.945728][ T8515] do_file_open+0x20e/0x430 [ 108.945746][ T8515] ? __pfx_do_file_open+0x10/0x10 [ 108.945772][ T8515] ? _raw_spin_unlock+0x28/0x50 [ 108.945787][ T8515] ? alloc_fd+0x471/0x7a0 [ 108.945807][ T8515] do_sys_openat2+0x163/0x1d0 [ 108.945818][ T8515] ? __pfx_do_sys_openat2+0x10/0x10 [ 108.945828][ T8515] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 108.945846][ T8515] __x64_sys_openat+0x12d/0x210 [ 108.945857][ T8515] ? __pfx___x64_sys_openat+0x10/0x10 [ 108.945874][ T8515] do_syscall_64+0x123/0x790 [ 108.945886][ T8515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.945897][ T8515] RIP: 0033:0x7feacb75fd8e [ 108.945907][ T8515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 108.945918][ T8515] RSP: 002b:00007feacc5b0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.945929][ T8515] RAX: ffffffffffffffda RBX: 00007feacc5b16c0 RCX: 00007feacb75fd8e [ 108.945936][ T8515] RDX: 0000000000000000 RSI: 00007feacc5b0c00 RDI: ffffffffffffff9c [ 108.945943][ T8515] RBP: 00007feacc5b0c00 R08: 0000000000000000 R09: 0000000000000000 [ 108.945949][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 108.945956][ T8515] R13: 00007feacba26038 R14: 00007feacba25fa0 R15: 00007ffe0dcb52c8 [ 108.945970][ T8515] [ 108.997910][ T8518] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 108.997933][ T8518] overlayfs: failed to set xattr on upper [ 108.997937][ T8518] overlayfs: ...falling back to redirect_dir=nofollow. [ 108.997941][ T8518] overlayfs: ...falling back to index=off. [ 108.997944][ T8518] overlayfs: ...falling back to uuid=null. [ 109.111196][ T8424] usb 9-1: failed to restore interface 228 altsetting 255 (error=-71) [ 109.111729][ T41] usb 9-1: USB disconnect, device number 12 [ 109.121333][ T24] ldusb 13-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 109.124090][ T24] usb 13-1: USB disconnect, device number 2 [ 109.124669][ T41] usblp0: removed [ 109.138395][ T24] ldusb 13-1:0.0: LD USB Device #1 now disconnected [ 109.195814][ T67] Bluetooth: hci4: command 0x040f tx timeout [ 109.304886][ T67] Bluetooth: Wrong link type (-71) [ 109.314180][ T67] Bluetooth: Wrong link type (-71) [ 109.595531][ T67] Bluetooth: hci1: command tx timeout [ 109.599188][ T8554] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 109.599203][ T8554] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 109.599434][ T8554] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 109.599445][ T8554] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 109.635552][ T24] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 109.795992][ T24] usb 13-1: Using ep0 maxpacket: 32 [ 109.796735][ T24] usb 13-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 109.797722][ T24] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 109.797750][ T24] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 109.797778][ T24] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 109.797799][ T24] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 109.797819][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 109.802124][ T24] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 109.802205][ T24] usb 13-1: Product: syz [ 109.802220][ T24] usb 13-1: Manufacturer: syz [ 109.802233][ T24] usb 13-1: SerialNumber: syz [ 109.811071][ T24] usb 13-1: config 0 descriptor?? [ 109.813634][ T24] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 109.821553][ T24] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 109.997326][ T8575] MTD: Couldn't look up '/dev/md_syze2': -2 [ 110.003572][ T8575] loop6: detected capacity change from 0 to 8 [ 110.010823][ T8575] Dev loop6: unable to read RDB block 8 [ 110.010857][ T8575] loop6: unable to read partition table [ 110.011352][ T8575] loop6: partition table beyond EOD, truncated [ 110.011385][ T8575] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 110.018741][ T5165] usb 13-1: USB disconnect, device number 3 [ 110.023571][ T5165] ldusb 13-1:0.0: LD USB Device #0 now disconnected [ 110.559226][ T8602] overlayfs: missing 'workdir' [ 110.560848][ T8602] FAULT_INJECTION: forcing a failure. [ 110.560848][ T8602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.560894][ T8602] CPU: 2 UID: 0 PID: 8602 Comm: syz.8.696 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 110.560911][ T8602] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 110.560915][ T8602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.560928][ T8602] Call Trace: [ 110.560933][ T8602] [ 110.560937][ T8602] dump_stack_lvl+0x100/0x190 [ 110.560981][ T8602] should_fail_ex.cold+0x5/0xa [ 110.561006][ T8602] _copy_from_user+0x2e/0xd0 [ 110.561031][ T8602] input_event_from_user+0x123/0x310 [ 110.561056][ T8602] ? __pfx_input_event_from_user+0x10/0x10 [ 110.561073][ T8602] ? __pfx___might_resched+0x10/0x10 [ 110.561091][ T8602] ? input_inject_event+0x1a8/0x390 [ 110.561108][ T8602] evdev_write+0x342/0x610 [ 110.561127][ T8602] ? __pfx_evdev_write+0x10/0x10 [ 110.561162][ T8602] ? bpf_lsm_file_permission+0x9/0x10 [ 110.561183][ T8602] ? security_file_permission+0x76/0x210 [ 110.561202][ T8602] ? rw_verify_area+0xce/0x6d0 [ 110.561223][ T8602] vfs_write+0x2aa/0x1050 [ 110.561237][ T8602] ? __pfx_evdev_write+0x10/0x10 [ 110.561252][ T8602] ? lock_acquire+0x1d1/0x380 [ 110.561273][ T8602] ? __fget_files+0x34/0x3d0 [ 110.561297][ T8602] ? __pfx_vfs_write+0x10/0x10 [ 110.561309][ T8602] ? find_held_lock+0x2b/0x80 [ 110.561322][ T8602] ? __fget_files+0x215/0x3d0 [ 110.561337][ T8602] ? __fget_files+0x215/0x3d0 [ 110.561355][ T8602] ? __fget_files+0x21f/0x3d0 [ 110.561407][ T8602] ksys_write+0x1f8/0x250 [ 110.561428][ T8602] ? __pfx_ksys_write+0x10/0x10 [ 110.561453][ T8602] do_syscall_64+0x123/0x790 [ 110.561472][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.561487][ T8602] RIP: 0033:0x7f9ab8b9f559 [ 110.561497][ T8602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.561507][ T8602] RSP: 002b:00007f9ab9acb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.561518][ T8602] RAX: ffffffffffffffda RBX: 00007f9ab8e25fa0 RCX: 00007f9ab8b9f559 [ 110.561525][ T8602] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 110.561531][ T8602] RBP: 00007f9ab9acb090 R08: 0000000000000000 R09: 0000000000000000 [ 110.561538][ T8602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.561544][ T8602] R13: 00007f9ab8e26038 R14: 00007f9ab8e25fa0 R15: 00007ffdfad42588 [ 110.561559][ T8602] [ 110.818463][ T8615] jffs2: notice: (8615) jffs2_build_xattr_subsystem: complete building xattr subsystem, 22 of xdatum (0 unchecked, 21 orphan) and 46 of xref (4 dead, 41 orphan) found. [ 110.820328][ T8615] FAULT_INJECTION: forcing a failure. [ 110.820328][ T8615] name failslab, interval 1, probability 0, space 0, times 0 [ 110.820357][ T8615] CPU: 3 UID: 0 PID: 8615 Comm: syz.7.701 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 110.820383][ T8615] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 110.820389][ T8615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.820399][ T8615] Call Trace: [ 110.820406][ T8615] [ 110.820414][ T8615] dump_stack_lvl+0x100/0x190 [ 110.820443][ T8615] should_fail_ex.cold+0x5/0xa [ 110.820470][ T8615] should_failslab+0xc2/0x120 [ 110.820511][ T8615] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 110.820542][ T8615] ? jffs2_alloc_inode+0x25/0x50 [ 110.820573][ T8615] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 110.820593][ T8615] jffs2_alloc_inode+0x25/0x50 [ 110.820611][ T8615] alloc_inode+0x68/0x250 [ 110.820632][ T8615] new_inode+0x22/0x1c0 [ 110.820654][ T8615] jffs2_new_inode+0xc5/0xcf0 [ 110.820673][ T8615] ? __pfx_jffs2_new_inode+0x10/0x10 [ 110.820689][ T8615] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 110.820710][ T8615] ? jffs2_create+0x27/0x390 [ 110.820734][ T8615] jffs2_create+0x94/0x390 [ 110.820756][ T8615] ? __pfx_jffs2_create+0x10/0x10 [ 110.820773][ T8615] lookup_open+0xd60/0x1940 [ 110.820805][ T8615] path_openat+0xe75/0x23f0 [ 110.820835][ T8615] ? __pfx_path_openat+0x10/0x10 [ 110.820868][ T8615] do_file_open+0x20e/0x430 [ 110.820893][ T8615] ? __pfx_do_file_open+0x10/0x10 [ 110.820937][ T8615] ? _raw_spin_unlock+0x28/0x50 [ 110.820963][ T8615] ? alloc_fd+0x471/0x7a0 [ 110.820995][ T8615] do_sys_openat2+0x163/0x1d0 [ 110.821012][ T8615] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.821030][ T8615] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.821050][ T8615] ? __fget_files+0x21f/0x3d0 [ 110.821080][ T8615] __x64_sys_openat+0x12d/0x210 [ 110.821098][ T8615] ? __pfx___x64_sys_openat+0x10/0x10 [ 110.821113][ T8615] ? ksys_write+0x1ac/0x250 [ 110.821143][ T8615] do_syscall_64+0x123/0x790 [ 110.821164][ T8615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.821183][ T8615] RIP: 0033:0x7feacb79f559 [ 110.821198][ T8615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.821215][ T8615] RSP: 002b:00007feacc5b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.821231][ T8615] RAX: ffffffffffffffda RBX: 00007feacba25fa0 RCX: 00007feacb79f559 [ 110.821243][ T8615] RDX: 0000000000101c42 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 110.821254][ T8615] RBP: 00007feacc5b1090 R08: 0000000000000000 R09: 0000000000000000 [ 110.821265][ T8615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.821275][ T8615] R13: 00007feacba26038 R14: 00007feacba25fa0 R15: 00007ffe0dcb52c8 [ 110.821301][ T8615] [ 110.902844][ T8621] jffs2: notice: (8621) jffs2_build_xattr_subsystem: complete building xattr subsystem, 22 of xdatum (0 unchecked, 21 orphan) and 46 of xref (4 dead, 41 orphan) found. [ 111.090207][ T8628] jffs2: notice: (8628) jffs2_build_xattr_subsystem: complete building xattr subsystem, 22 of xdatum (0 unchecked, 21 orphan) and 46 of xref (4 dead, 41 orphan) found. [ 111.275716][ T67] Bluetooth: hci4: command 0x040f tx timeout [ 111.317948][ T7474] svc: failed to register nfsdv3 RPC service (errno 5). [ 111.317979][ T7474] failed to unregister tcp with rpcbind [ 111.456546][ T8645] No source specified [ 111.500376][ T8647] FAULT_INJECTION: forcing a failure. [ 111.500376][ T8647] name failslab, interval 1, probability 0, space 0, times 0 [ 111.500400][ T8647] CPU: 0 UID: 0 PID: 8647 Comm: syz.6.713 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 111.500417][ T8647] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 111.500421][ T8647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.500428][ T8647] Call Trace: [ 111.500432][ T8647] [ 111.500436][ T8647] dump_stack_lvl+0x100/0x190 [ 111.500457][ T8647] should_fail_ex.cold+0x5/0xa [ 111.500474][ T8647] should_failslab+0xc2/0x120 [ 111.500491][ T8647] __kmalloc_cache_noprof+0x91/0x6d0 [ 111.500503][ T8647] ? nf_tables_newtable+0xd0a/0x1a90 [ 111.500533][ T8647] nf_tables_newtable+0xd0a/0x1a90 [ 111.500555][ T8647] ? __pfx_nf_tables_newtable+0x10/0x10 [ 111.500573][ T8647] ? net_generic+0x25/0x2a0 [ 111.500594][ T8647] ? __nla_parse+0x40/0x60 [ 111.500615][ T8647] nfnetlink_rcv_batch+0x1410/0x2880 [ 111.500640][ T8647] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 111.500660][ T8647] ? lock_acquire+0x1d1/0x380 [ 111.500674][ T8647] ? avc_has_perm_noaudit+0x56/0x470 [ 111.500694][ T8647] ? avc_has_perm_noaudit+0x145/0x470 [ 111.500722][ T8647] ? __nla_parse+0x40/0x60 [ 111.500738][ T8647] nfnetlink_rcv+0x3bd/0x440 [ 111.500756][ T8647] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 111.500776][ T8647] netlink_unicast+0x668/0x950 [ 111.500799][ T8647] ? __pfx_netlink_unicast+0x10/0x10 [ 111.500816][ T8647] netlink_sendmsg+0x9ac/0x10c0 [ 111.500831][ T8647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.500848][ T8647] ? selinux_socket_sendmsg+0x198/0x2f0 [ 111.500874][ T8647] ? ____sys_sendmsg+0xa99/0xc30 [ 111.500896][ T8647] ____sys_sendmsg+0xa99/0xc30 [ 111.500911][ T8647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.500925][ T8647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.500953][ T8647] ___sys_sendmsg+0x190/0x1e0 [ 111.500971][ T8647] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.500988][ T8647] ? futex_wait+0x11e/0x370 [ 111.501016][ T8647] ? find_held_lock+0x2b/0x80 [ 111.501036][ T8647] __sys_sendmsg+0x160/0x210 [ 111.501048][ T8647] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.501069][ T8647] do_syscall_64+0x123/0x790 [ 111.501083][ T8647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.501095][ T8647] RIP: 0033:0x7ff92e59f559 [ 111.501104][ T8647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.501115][ T8647] RSP: 002b:00007ff92f3ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.501127][ T8647] RAX: ffffffffffffffda RBX: 00007ff92e825fa0 RCX: 00007ff92e59f559 [ 111.501135][ T8647] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 111.501141][ T8647] RBP: 00007ff92e636b20 R08: 0000000000000000 R09: 0000000000000000 [ 111.501148][ T8647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.501154][ T8647] R13: 00007ff92e826038 R14: 00007ff92e825fa0 R15: 00007ffced0cd2c8 [ 111.501168][ T8647] [ 111.674784][ T8658] netlink: 40 bytes leftover after parsing attributes in process `syz.6.717'. [ 111.678251][ T67] Bluetooth: hci1: command tx timeout [ 111.679991][ T8658] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 111.935156][ T8674] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 112.292859][ T8693] FAULT_INJECTION: forcing a failure. [ 112.292859][ T8693] name failslab, interval 1, probability 0, space 0, times 0 [ 112.292945][ T8693] CPU: 0 UID: 0 PID: 8693 Comm: syz.7.730 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 112.292972][ T8693] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 112.292978][ T8693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.292998][ T8693] Call Trace: [ 112.293008][ T8693] [ 112.293015][ T8693] dump_stack_lvl+0x100/0x190 [ 112.293071][ T8693] should_fail_ex.cold+0x5/0xa [ 112.293106][ T8693] should_failslab+0xc2/0x120 [ 112.293141][ T8693] kmem_cache_alloc_noprof+0x92/0x6a0 [ 112.293173][ T8693] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 112.293215][ T8693] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 112.293244][ T8693] ? kvm_msr_allowed+0x2d0/0x450 [ 112.293294][ T8693] kvm_mmu_load+0xe3/0x25b0 [ 112.293326][ T8693] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 112.293355][ T8693] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 112.293410][ T8693] ? __pfx_kvm_mmu_load+0x10/0x10 [ 112.293430][ T8693] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 112.293450][ T8693] ? kvm_check_and_inject_events+0x896/0x1050 [ 112.293482][ T8693] vcpu_run+0x4009/0x60d0 [ 112.293516][ T8693] ? __pfx_vcpu_run+0x10/0x10 [ 112.293536][ T8693] ? kvm_arch_vcpu_load+0x15e/0xcf0 [ 112.293566][ T8693] ? lock_acquire+0x1d1/0x380 [ 112.293595][ T8693] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 112.293621][ T8693] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 112.293655][ T8693] ? __local_bh_enable_ip+0xa5/0x120 [ 112.293687][ T8693] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 112.293709][ T8693] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 112.293739][ T8693] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 112.293761][ T8693] ? lock_acquire+0x1d1/0x380 [ 112.293783][ T8693] ? do_raw_write_lock+0x11e/0x260 [ 112.293808][ T8693] ? find_held_lock+0x2b/0x80 [ 112.293825][ T8693] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 112.293848][ T8693] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 112.293877][ T8693] kvm_vcpu_ioctl+0x735/0x17b0 [ 112.293905][ T8693] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 112.293930][ T8693] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.293966][ T8693] ? do_vfs_ioctl+0x226/0x13e0 [ 112.293997][ T8693] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 112.294017][ T8693] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 112.294046][ T8693] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 112.294068][ T8693] ? __fget_files+0x34/0x3d0 [ 112.294106][ T8693] ? selinux_file_ioctl+0x1e0/0x290 [ 112.294122][ T8693] ? selinux_file_ioctl+0x1e7/0x290 [ 112.294141][ T8693] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 112.294168][ T8693] __x64_sys_ioctl+0x18e/0x210 [ 112.294192][ T8693] do_syscall_64+0x123/0x790 [ 112.294218][ T8693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.294236][ T8693] RIP: 0033:0x7feacb79f559 [ 112.294253][ T8693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.294270][ T8693] RSP: 002b:00007feacc5b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.294291][ T8693] RAX: ffffffffffffffda RBX: 00007feacba25fa0 RCX: 00007feacb79f559 [ 112.294303][ T8693] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 112.294313][ T8693] RBP: 00007feacc5b1090 R08: 0000000000000000 R09: 0000000000000000 [ 112.294324][ T8693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.294334][ T8693] R13: 00007feacba26038 R14: 00007feacba25fa0 R15: 00007ffe0dcb52c8 [ 112.294360][ T8693] [ 112.302031][ T8691] zswap: compressor zs not available [ 112.363838][ T8701] nbd0: detected capacity change from 0 to 1 [ 112.370165][ T5778] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.370193][ T5778] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.370229][ T5778] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.370250][ T5778] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.370272][ T5778] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.370280][ T5778] ldm_validate_partition_table(): Disk read failed. [ 112.370293][ T5778] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.370306][ T5778] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.370320][ T5778] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.370333][ T5778] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.370340][ T5778] Dev nbd0: unable to read RDB block 0 [ 112.370352][ T5778] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.370374][ T5778] nbd0: unable to read partition table [ 112.370471][ T5778] nbd0: partition table beyond EOD, truncated [ 112.370901][ T68] block nbd0: Receive control failed (result -32) [ 112.461239][ T8707] netlink: 56 bytes leftover after parsing attributes in process `syz.8.733'. [ 112.626019][ T8716] trusted_key: encrypted_key: insufficient parameters specified [ 112.626904][ T8716] trusted_key: encrypted_key: insufficient parameters specified [ 112.744416][ T8714] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 112.868471][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 112.975225][ T42] kauditd_printk_skb: 65 callbacks suppressed [ 112.975394][ T42] audit: type=1400 audit(1793137378.813:1240): avc: denied { name_bind } for pid=8739 comm="syz.8.744" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 112.976045][ T8740] netlink: 64 bytes leftover after parsing attributes in process `syz.8.744'. [ 112.980129][ T42] audit: type=1400 audit(1793137378.823:1241): avc: denied { create } for pid=8739 comm="syz.8.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.980572][ T42] audit: type=1400 audit(1793137378.823:1242): avc: denied { bind } for pid=8739 comm="syz.8.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.982041][ T42] audit: type=1400 audit(1793137378.823:1243): avc: denied { listen } for pid=8739 comm="syz.8.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.982228][ T42] audit: type=1400 audit(1793137378.823:1244): avc: denied { accept } for pid=8739 comm="syz.8.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 113.033041][ T42] audit: type=1800 audit(1793137378.873:1245): pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=192084 res=0 errno=-22 [ 113.041240][ T42] audit: type=1400 audit(1793137378.883:1246): avc: denied { cmd } for pid=8739 comm="syz.8.744" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 113.042456][ T8744] ip_tables: iptables: counters copy to user failed while replacing table [ 113.042766][ T8746] ublk_ctrl_add_dev: queue_id is wrong ff7f [ 113.044289][ T8745] syzkaller1: entered promiscuous mode [ 113.044302][ T8745] syzkaller1: entered allmulticast mode [ 113.169387][ T8753] bond1: (slave erspan1): Releasing active interface [ 113.188041][ T8756] jffs2: notice: (8756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 47 of xref (4 dead, 41 orphan) found. [ 113.190902][ T42] audit: type=1400 audit(1793137379.033:1247): avc: denied { search } for pid=8754 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.191015][ T42] audit: type=1400 audit(1793137379.033:1248): avc: denied { search } for pid=8754 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1854 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.191115][ T42] audit: type=1400 audit(1793137379.033:1249): avc: denied { search } for pid=8754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.200662][ T5165] rxe_eth0 speed is unknown, defaulting to 1000 [ 113.258118][ T8764] tipc: Enabling of bearer rejected, failed to enable media [ 113.355598][ T67] Bluetooth: hci4: command 0x040f tx timeout [ 113.493460][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 113.570302][ T6072] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 113.599094][ T8791] device-mapper: table: 248:3: striped: Couldn't parse stripe destination (-ENOENT) [ 113.599127][ T8791] device-mapper: ioctl: error adding target to table [ 113.714575][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.757'. [ 113.715428][ T6072] usb 11-1: Using ep0 maxpacket: 16 [ 113.716460][ T6072] usb 11-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 113.718415][ T6072] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.722764][ T6072] usb 11-1: config 0 descriptor?? [ 113.724181][ T6072] ftdi_sio 11-1:0.0: FTDI USB Serial Device converter detected [ 113.724669][ T6072] usb 11-1: Detected FT2233HP [ 113.755384][ T67] Bluetooth: hci1: command tx timeout [ 113.843356][ T8809] jffs2: notice: (8809) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 47 of xref (4 dead, 41 orphan) found. [ 113.929901][ T6072] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 113.931302][ T6072] usb 11-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 113.936753][ T8819] syzkaller0: entered promiscuous mode [ 113.936765][ T8819] syzkaller0: entered allmulticast mode [ 114.115489][ T8480] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 114.131566][ T6072] usb 11-1: USB disconnect, device number 5 [ 114.143703][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.8.764'. [ 114.143735][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.8.764'. [ 114.158167][ T6072] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 114.158636][ T6072] ftdi_sio 11-1:0.0: device disconnected [ 114.248763][ T8840] netlink: 16 bytes leftover after parsing attributes in process `syz.7.767'. [ 114.268951][ T8480] usb 9-1: Using ep0 maxpacket: 8 [ 114.269522][ T8480] usb 9-1: New USB device found: idVendor=046d, idProduct=c623, bcdDevice=0.00 [ 114.270503][ T8480] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.270528][ T8480] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.270546][ T8480] usb 9-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.270566][ T8480] usb 9-1: config 0 interface 0 has no altsetting 0 [ 114.270591][ T8480] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.272967][ T8480] usb 9-1: config 0 descriptor?? [ 114.306174][ T8844] FAULT_INJECTION: forcing a failure. [ 114.306174][ T8844] name failslab, interval 1, probability 0, space 0, times 0 [ 114.306230][ T8844] CPU: 2 UID: 0 PID: 8844 Comm: syz.7.768 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 114.306257][ T8844] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 114.306264][ T8844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.306285][ T8844] Call Trace: [ 114.306291][ T8844] [ 114.306299][ T8844] dump_stack_lvl+0x100/0x190 [ 114.306352][ T8844] should_fail_ex.cold+0x5/0xa [ 114.306390][ T8844] should_failslab+0xc2/0x120 [ 114.306428][ T8844] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 114.306463][ T8844] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 114.306499][ T8844] kmemdup_nul+0x49/0xd0 [ 114.306536][ T8844] vfs_parse_fs_qstr+0x112/0x1c0 [ 114.306557][ T8844] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 114.306602][ T8844] ? ovl_next_opt+0x143/0x1c0 [ 114.306641][ T8844] ? __pfx_ovl_next_opt+0x10/0x10 [ 114.306667][ T8844] vfs_parse_monolithic_sep+0x195/0x210 [ 114.306692][ T8844] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 114.306715][ T8844] ? alloc_fs_context+0x655/0xf40 [ 114.306740][ T8844] path_mount+0x77f/0x2850 [ 114.306777][ T8844] ? __pfx_path_mount+0x10/0x10 [ 114.306796][ T8844] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.306827][ T8844] ? putname+0xb1/0x110 [ 114.306841][ T8844] ? kmem_cache_free+0x127/0x6c0 [ 114.306868][ T8844] ? __x64_sys_mount+0x293/0x310 [ 114.306887][ T8844] __x64_sys_mount+0x293/0x310 [ 114.306911][ T8844] ? __pfx___x64_sys_mount+0x10/0x10 [ 114.306939][ T8844] do_syscall_64+0x123/0x790 [ 114.306959][ T8844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.306975][ T8844] RIP: 0033:0x7feacb79f559 [ 114.306992][ T8844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.307009][ T8844] RSP: 002b:00007feacc5b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.307027][ T8844] RAX: ffffffffffffffda RBX: 00007feacba25fa0 RCX: 00007feacb79f559 [ 114.307039][ T8844] RDX: 0000200000000780 RSI: 00002000000005c0 RDI: 0000000000000000 [ 114.307050][ T8844] RBP: 00007feacc5b1090 R08: 0000200000000680 R09: 0000000000000000 [ 114.307061][ T8844] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 114.307071][ T8844] R13: 00007feacba26038 R14: 00007feacba25fa0 R15: 00007ffe0dcb52c8 [ 114.307096][ T8844] [ 114.391640][ T8849] jffs2: notice: (8849) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 47 of xref (4 dead, 41 orphan) found. [ 114.651466][ T8865] syzkaller0: entered promiscuous mode [ 114.651485][ T8865] syzkaller0: entered allmulticast mode [ 114.695412][ T8480] input: HID 046d:c623 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:046D:C623.0006/input/input10 [ 114.765542][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.776'. [ 114.765583][ T8871] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 114.771762][ T8480] logitech 0003:046D:C623.0006: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.4-1/input0 [ 114.775769][ T8873] jffs2: notice: (8873) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 47 of xref (4 dead, 41 orphan) found. [ 114.853681][ T8880] jffs2: notice: (8880) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 114.957846][ T8890] FAULT_INJECTION: forcing a failure. [ 114.957846][ T8890] name failslab, interval 1, probability 0, space 0, times 0 [ 114.957871][ T8890] CPU: 3 UID: 0 PID: 8890 Comm: syz.7.783 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 114.957888][ T8890] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 114.957892][ T8890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.957898][ T8890] Call Trace: [ 114.957902][ T8890] [ 114.957906][ T8890] dump_stack_lvl+0x100/0x190 [ 114.957932][ T8890] should_fail_ex.cold+0x5/0xa [ 114.957949][ T8890] should_failslab+0xc2/0x120 [ 114.957965][ T8890] kmem_cache_alloc_noprof+0x92/0x6a0 [ 114.957979][ T8890] ? d_instantiate+0x8a/0xb0 [ 114.957991][ T8890] ? alloc_empty_file_noaccount+0x2b/0xd0 [ 114.958015][ T8890] alloc_empty_file_noaccount+0x2b/0xd0 [ 114.958027][ T8890] alloc_file_pseudo_noaccount+0x17e/0x290 [ 114.958040][ T8890] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 114.958054][ T8890] ? iput+0x35/0x40 [ 114.958068][ T8890] bdev_file_open_by_dev+0x13a/0x210 [ 114.958088][ T8890] setup_bdev_super+0x78/0x770 [ 114.958102][ T8890] get_tree_bdev_flags+0x363/0x620 [ 114.958115][ T8890] ? __pfx_gfs2_fill_super+0x10/0x10 [ 114.958144][ T8890] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 114.958160][ T8890] ? rcu_is_watching+0x13/0xc0 [ 114.958184][ T8890] ? cap_capable+0x107/0x430 [ 114.958216][ T8890] gfs2_get_tree+0x4e/0x280 [ 114.958236][ T8890] vfs_get_tree+0x92/0x320 [ 114.958251][ T8890] path_mount+0x7d0/0x2850 [ 114.958273][ T8890] ? __pfx_path_mount+0x10/0x10 [ 114.958287][ T8890] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.958300][ T8890] ? putname+0xb1/0x110 [ 114.958308][ T8890] ? kmem_cache_free+0x127/0x6c0 [ 114.958324][ T8890] ? __x64_sys_mount+0x293/0x310 [ 114.958335][ T8890] __x64_sys_mount+0x293/0x310 [ 114.958347][ T8890] ? __pfx___x64_sys_mount+0x10/0x10 [ 114.958363][ T8890] do_syscall_64+0x123/0x790 [ 114.958374][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.958386][ T8890] RIP: 0033:0x7feacb79f559 [ 114.958396][ T8890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.958406][ T8890] RSP: 002b:00007feacc5b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.958417][ T8890] RAX: ffffffffffffffda RBX: 00007feacba25fa0 RCX: 00007feacb79f559 [ 114.958424][ T8890] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 114.958430][ T8890] RBP: 00007feacb836b20 R08: 0000000000000000 R09: 0000000000000000 [ 114.958437][ T8890] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 [ 114.958444][ T8890] R13: 00007feacba26038 R14: 00007feacba25fa0 R15: 00007ffe0dcb52c8 [ 114.958459][ T8890] [ 114.958568][ T8890] /dev/loop7: Can't open blockdev [ 115.445798][ T67] Bluetooth: hci4: command 0x040f tx timeout [ 115.690030][ T8900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.690345][ T8900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8900 comm=syz.8.786 [ 115.744134][ T8900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.746806][ T5863] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 115.746841][ T5863] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 115.796110][ T8900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.800459][ T8900] device-mapper: table: 248:6: raid: Cannot understand number of raid devices parameters (-EINVAL) [ 115.800482][ T8900] device-mapper: ioctl: error adding target to table [ 115.865802][ T140] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 115.951429][ T8480] usb 9-1: reset high-speed USB device number 13 using dummy_hcd [ 115.977930][ T140] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 115.982390][ T8906] syzkaller0: entered promiscuous mode [ 115.982403][ T8906] syzkaller0: entered allmulticast mode [ 116.076061][ T8480] usb 9-1: device descriptor read/64, error -32 [ 116.086284][ T140] wlan1: authentication with 08:02:11:00:00:00 timed out [ 116.315528][ T8480] usb 9-1: reset high-speed USB device number 13 using dummy_hcd [ 116.463823][ T8914] jffs2: notice: (8914) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 116.665525][ T6072] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 116.759910][ T8921] netlink: 'syz.4.794': attribute type 10 has an invalid length. [ 116.763264][ T8921] bond0: (slave netdevsim1): Releasing backup interface [ 116.766709][ T8921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.773845][ T8921] team0: Port device netdevsim1 added [ 116.790317][ T8921] smc: net device lo applied user defined pnetid SYZ2 [ 116.819018][ T6072] usb 13-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00 [ 116.822933][ T6072] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.822958][ T6072] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 116.822970][ T6072] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 116.822982][ T6072] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 116.822999][ T6072] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 116.823011][ T6072] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 116.823022][ T6072] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 116.823033][ T6072] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 116.823045][ T6072] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 116.823056][ T6072] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 116.823067][ T6072] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 116.823077][ T6072] usb 13-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 116.827089][ T6072] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.827110][ T6072] usb 13-1: Product: syz [ 116.827122][ T6072] usb 13-1: Manufacturer: syz [ 116.827135][ T6072] usb 13-1: SerialNumber: syz [ 116.833312][ T8912] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 116.833496][ T8912] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 116.833646][ T8912] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 116.833797][ T8912] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 116.833923][ T8912] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 116.834518][ T8912] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 116.839241][ T8912] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 116.839413][ T8912] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 116.843620][ T6072] keyspan 13-1:1.0: Keyspan 2 port adapter converter detected [ 116.844755][ T6072] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 7 [ 116.849231][ T6072] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 5 [ 116.851126][ T6072] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 116.851817][ T6072] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 3 [ 116.851852][ T6072] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 4 [ 116.851893][ T6072] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 6 [ 116.855762][ T6072] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 116.903255][ T8924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8924 comm=syz.4.795 [ 116.995013][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 117.003272][ T8924] bond2 (unregistering): Released all slaves [ 117.072943][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.795'. [ 117.105719][ T8912] overlayfs: fs on 'sys_mnt' does not support file handles, falling back to index=off,nfs_export=off. [ 117.110760][ T4954] usb 9-1: USB disconnect, device number 13 [ 117.246967][ T8931] syzkaller0: entered promiscuous mode [ 117.246990][ T8931] syzkaller0: entered allmulticast mode [ 117.419678][ T50] usb 13-1: USB disconnect, device number 4 [ 117.455386][ T4954] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 117.488545][ T50] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 117.501831][ T50] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 117.505613][ T50] keyspan 13-1:1.0: device disconnected [ 117.607545][ T4954] usb 9-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 117.610358][ T4954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.610381][ T4954] usb 9-1: Product: syz [ 117.610394][ T4954] usb 9-1: Manufacturer: syz [ 117.610406][ T4954] usb 9-1: SerialNumber: syz [ 117.649019][ T8933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.856457][ T4954] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 117.856488][ T4954] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 117.856499][ T4954] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 117.863497][ T4954] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 117.891750][ T4954] usb 9-1: USB disconnect, device number 14 [ 117.994057][ T8936] syz_tun: entered allmulticast mode [ 118.009108][ T8936] dvmrp6: entered allmulticast mode [ 118.010716][ T8936] dvmrp6: left allmulticast mode [ 118.080140][ T8935] syz_tun: left allmulticast mode [ 118.109015][ T8938] jffs2: notice: (8938) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 118.402540][ T42] kauditd_printk_skb: 88 callbacks suppressed [ 118.402584][ T42] audit: type=1800 audit(1793137384.243:1338): pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194216 res=0 errno=-22 [ 118.450208][ T42] audit: type=1800 audit(1793137384.293:1339): pid=8958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.805" name="attach" dev="sysfs" ino=36627 res=0 errno=-13 [ 118.460910][ T8958] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 118.460934][ T8958] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.462389][ T8958] vhci_hcd vhci_hcd.0: Device attached [ 118.470927][ T8959] vhci_hcd: unknown pdu 1 [ 118.476835][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.6.806'. [ 118.491027][ T8385] vhci_hcd vhci_hcd.4: stop threads [ 118.491607][ T8385] vhci_hcd vhci_hcd.4: release socket [ 118.491639][ T8385] vhci_hcd vhci_hcd.4: disconnect device [ 118.554362][ T8965] netlink: 36 bytes leftover after parsing attributes in process `syz.6.807'. [ 118.570448][ T42] audit: type=1400 audit(1793137384.413:1340): avc: denied { write } for pid=8963 comm="syz.6.807" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 118.632744][ T8971] jffs2: notice: (8971) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 118.699481][ T42] audit: type=1400 audit(1793137384.543:1341): avc: denied { write } for pid=8973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.773784][ T42] audit: type=1400 audit(1793137384.613:1342): avc: denied { write } for pid=8981 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.364568][ T8998] netlink: 16 bytes leftover after parsing attributes in process `syz.8.814'. [ 119.409468][ T9000] FAULT_INJECTION: forcing a failure. [ 119.409468][ T9000] name failslab, interval 1, probability 0, space 0, times 0 [ 119.409502][ T9000] CPU: 3 UID: 0 PID: 9000 Comm: syz.8.815 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 119.409528][ T9000] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 119.409536][ T9000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.409547][ T9000] Call Trace: [ 119.409553][ T9000] [ 119.409560][ T9000] dump_stack_lvl+0x100/0x190 [ 119.409593][ T9000] should_fail_ex.cold+0x5/0xa [ 119.409622][ T9000] should_failslab+0xc2/0x120 [ 119.409647][ T9000] __kmalloc_noprof+0xfc/0x840 [ 119.409671][ T9000] ? tomoyo_encode2+0xfb/0x3c0 [ 119.409727][ T9000] tomoyo_encode2+0xfb/0x3c0 [ 119.409751][ T9000] tomoyo_encode+0x29/0x50 [ 119.409769][ T9000] tomoyo_realpath_from_path+0x18c/0x690 [ 119.409796][ T9000] tomoyo_mount_acl+0x334/0x8b0 [ 119.409812][ T9000] ? is_bpf_text_address+0x8a/0x1a0 [ 119.409842][ T9000] ? is_bpf_text_address+0x8a/0x1a0 [ 119.409863][ T9000] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 119.409889][ T9000] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 119.409905][ T9000] ? kernel_text_address+0x8d/0x100 [ 119.409935][ T9000] ? unwind_get_return_address+0x59/0xa0 [ 119.409973][ T9000] ? arch_stack_walk+0xa6/0xf0 [ 119.410010][ T9000] ? __lock_acquire+0x5c0/0x1f40 [ 119.410056][ T9000] ? tomoyo_mount_permission+0x1f6/0x460 [ 119.410077][ T9000] ? tomoyo_domain+0xb2/0x150 [ 119.410098][ T9000] ? tomoyo_profile+0x47/0x60 [ 119.410122][ T9000] tomoyo_mount_permission+0x214/0x460 [ 119.410140][ T9000] ? tomoyo_mount_permission+0x1f6/0x460 [ 119.410160][ T9000] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 119.410195][ T9000] security_sb_mount+0xdd/0x270 [ 119.410224][ T9000] path_mount+0x158/0x2850 [ 119.410249][ T9000] ? __pfx_path_mount+0x10/0x10 [ 119.410268][ T9000] ? lockdep_hardirqs_on+0x7d/0x110 [ 119.410289][ T9000] ? putname+0xb1/0x110 [ 119.410305][ T9000] ? kmem_cache_free+0x127/0x6c0 [ 119.410332][ T9000] ? __x64_sys_mount+0x293/0x310 [ 119.410350][ T9000] __x64_sys_mount+0x293/0x310 [ 119.410371][ T9000] ? __pfx___x64_sys_mount+0x10/0x10 [ 119.410399][ T9000] do_syscall_64+0x123/0x790 [ 119.410420][ T9000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.410444][ T9000] RIP: 0033:0x7f9ab8b9f559 [ 119.410460][ T9000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.410477][ T9000] RSP: 002b:00007f9ab9acb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 119.410495][ T9000] RAX: ffffffffffffffda RBX: 00007f9ab8e25fa0 RCX: 00007f9ab8b9f559 [ 119.410507][ T9000] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 119.410518][ T9000] RBP: 00007f9ab9acb090 R08: 0000000000000000 R09: 0000000000000000 [ 119.410529][ T9000] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 119.410539][ T9000] R13: 00007f9ab8e26038 R14: 00007f9ab8e25fa0 R15: 00007ffdfad42588 [ 119.410565][ T9000] [ 119.410682][ T9000] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.790255][ T42] audit: type=1400 audit(1793137385.633:1343): avc: denied { write } for pid=9003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.949851][ T42] audit: type=1400 audit(1793137385.793:1344): avc: denied { write } for pid=9008 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.022592][ T9011] jffs2: notice: (9011) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 120.023704][ T9013] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 120.024150][ T42] audit: type=1400 audit(1793137385.863:1345): avc: denied { relabelto } for pid=9012 comm="syz.6.819" name="115" dev="tmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 120.025731][ T42] audit: type=1400 audit(1793137385.863:1346): avc: denied { associate } for pid=9012 comm="syz.6.819" name="115" dev="tmpfs" ino=648 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 120.078983][ T42] audit: type=1400 audit(1793137385.923:1347): avc: denied { write } for pid=7474 comm="syz-executor" name="115" dev="tmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 120.421603][ T9030] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.271320][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 121.271350][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 121.505737][ T8480] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 121.657364][ T8480] usb 9-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 121.658872][ T8480] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 121.658896][ T8480] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 121.668427][ T8480] usb 9-1: string descriptor 0 read error: -22 [ 121.668532][ T8480] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.677256][ T8480] etas_es58x 9-1:1.0: Starting (null) (null) (Serial Number (null)) [ 121.677405][ T8480] etas_es58x 9-1:1.0: could not retrieve the product info string [ 121.965722][ T50] usb 9-1: USB disconnect, device number 15 [ 121.966937][ T50] etas_es58x 9-1:1.0: Disconnecting (null) (null) [ 122.504524][ T9066] MTRR 1 not used [ 122.597227][ T9069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13338 sclass=netlink_route_socket pid=9069 comm=syz.4.828 [ 122.612681][ T9069] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 122.814107][ T9073] jffs2: notice: (9073) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 123.019756][ T9081] FAULT_INJECTION: forcing a failure. [ 123.019756][ T9081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.022321][ T9081] CPU: 3 UID: 0 PID: 9081 Comm: syz.6.831 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 123.022340][ T9081] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 123.022345][ T9081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.022370][ T9081] Call Trace: [ 123.022377][ T9081] [ 123.022385][ T9081] dump_stack_lvl+0x100/0x190 [ 123.022441][ T9081] should_fail_ex.cold+0x5/0xa [ 123.022481][ T9081] _copy_to_user+0x32/0xd0 [ 123.022521][ T9081] generic_map_lookup_batch+0x5c5/0xd10 [ 123.022568][ T9081] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 123.022599][ T9081] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 123.022625][ T9081] bpf_map_do_batch+0x5b2/0x6d0 [ 123.022647][ T9081] ? bpf_lsm_bpf+0x9/0x10 [ 123.022681][ T9081] __sys_bpf+0x228a/0x4b60 [ 123.022712][ T9081] ? __pfx___sys_bpf+0x10/0x10 [ 123.022734][ T9081] ? find_held_lock+0x2b/0x80 [ 123.022755][ T9081] ? get_pid_task+0xfc/0x250 [ 123.022778][ T9081] ? get_pid_task+0xfc/0x250 [ 123.022798][ T9081] ? find_held_lock+0x2b/0x80 [ 123.022811][ T9081] ? rcu_read_lock_any_held+0x6a/0x90 [ 123.022829][ T9081] ? find_held_lock+0x2b/0x80 [ 123.022839][ T9081] ? ksys_write+0x190/0x250 [ 123.022858][ T9081] ? ksys_write+0x190/0x250 [ 123.022871][ T9081] ? lock_acquire+0x1d1/0x380 [ 123.022894][ T9081] ? fput+0x7c/0x100 [ 123.022903][ T9081] ? ksys_write+0x1ac/0x250 [ 123.022918][ T9081] ? __x64_sys_bpf+0xce/0x140 [ 123.022933][ T9081] __x64_sys_bpf+0xce/0x140 [ 123.022948][ T9081] ? do_syscall_64+0xae/0x790 [ 123.022964][ T9081] do_syscall_64+0x123/0x790 [ 123.022976][ T9081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.022987][ T9081] RIP: 0033:0x7ff92e59f559 [ 123.023002][ T9081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.023013][ T9081] RSP: 002b:00007ff92f3ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.023024][ T9081] RAX: ffffffffffffffda RBX: 00007ff92e825fa0 RCX: 00007ff92e59f559 [ 123.023031][ T9081] RDX: 0000000000000038 RSI: 0000200000000400 RDI: 0000000000000018 [ 123.023038][ T9081] RBP: 00007ff92f3ec090 R08: 0000000000000000 R09: 0000000000000000 [ 123.023044][ T9081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.023050][ T9081] R13: 00007ff92e826038 R14: 00007ff92e825fa0 R15: 00007ffced0cd2c8 [ 123.023065][ T9081] [ 123.211243][ T9089] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 123.211267][ T9089] overlayfs: failed to set xattr on upper [ 123.211274][ T9089] overlayfs: ...falling back to redirect_dir=nofollow. [ 123.211281][ T9089] overlayfs: ...falling back to index=off. [ 123.211287][ T9089] overlayfs: ...falling back to uuid=null. [ 123.428727][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 123.428758][ T42] audit: type=1400 audit(1793137389.273:1383): avc: denied { write } for pid=9098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.434153][ T9101] jffs2: notice: (9101) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 123.446102][ T9105] netlink: 'syz.6.837': attribute type 1 has an invalid length. [ 123.499209][ T42] audit: type=1400 audit(1793137389.343:1384): avc: denied { write } for pid=9113 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.523635][ T9116] FAULT_INJECTION: forcing a failure. [ 123.523635][ T9116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.523657][ T9116] CPU: 3 UID: 0 PID: 9116 Comm: syz.4.839 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 123.523673][ T9116] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 123.523678][ T9116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.523684][ T9116] Call Trace: [ 123.523688][ T9116] [ 123.523692][ T9116] dump_stack_lvl+0x100/0x190 [ 123.523712][ T9116] should_fail_ex.cold+0x5/0xa [ 123.523729][ T9116] _copy_from_iter+0x1f4/0x16c0 [ 123.523744][ T9116] ? ieee802154_header_create+0x3bf/0x5e0 [ 123.523761][ T9116] ? __pfx__copy_from_iter+0x10/0x10 [ 123.523781][ T9116] dgram_sendmsg+0x98f/0xf50 [ 123.523793][ T9116] ? __pfx_dgram_sendmsg+0x10/0x10 [ 123.523807][ T9116] ? selinux_socket_sendmsg+0x198/0x2f0 [ 123.523839][ T9116] __sys_sendto+0x492/0x4e0 [ 123.523860][ T9116] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 123.523878][ T9116] ? __pfx___sys_sendto+0x10/0x10 [ 123.523891][ T9116] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 123.523921][ T9116] __x64_sys_sendto+0xe0/0x1c0 [ 123.523932][ T9116] ? do_syscall_64+0xae/0x790 [ 123.523943][ T9116] ? lockdep_hardirqs_on+0x7d/0x110 [ 123.523953][ T9116] do_syscall_64+0x123/0x790 [ 123.523964][ T9116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.523976][ T9116] RIP: 0033:0x7f9e7975fd8e [ 123.523986][ T9116] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 123.524000][ T9116] RSP: 002b:00007f9e7a72fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 123.524015][ T9116] RAX: ffffffffffffffda RBX: 00007f9e7a7316c0 RCX: 00007f9e7975fd8e [ 123.524025][ T9116] RDX: 0000000000000020 RSI: 00007f9e7a730000 RDI: 0000000000000005 [ 123.524035][ T9116] RBP: 0000000000000000 R08: 00007f9e7a72ff04 R09: 000000000000000c [ 123.524043][ T9116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 123.524053][ T9116] R13: 00007f9e7a72ff58 R14: 00007f9e7a730000 R15: 0000000000000000 [ 123.524076][ T9116] [ 123.641708][ T42] audit: type=1400 audit(1793137389.483:1385): avc: denied { write } for pid=9119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.681532][ T42] audit: type=1800 audit(1793137389.523:1386): pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195139 res=0 errno=-22 [ 123.723404][ T42] audit: type=1400 audit(1793137389.563:1387): avc: denied { write } for pid=9123 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.851750][ T42] audit: type=1400 audit(1793137389.693:1388): avc: denied { write } for pid=9125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.916921][ T42] audit: type=1400 audit(1793137389.763:1389): avc: denied { write } for pid=9130 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.918907][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.842'. [ 123.956857][ T42] audit: type=1400 audit(1793137389.803:1390): avc: denied { ioctl } for pid=9131 comm="syz.4.842" path="socket:[36097]" dev="sockfs" ino=36097 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 124.356039][ T9136] tun0: tun_chr_ioctl cmd 1074025675 [ 124.356054][ T9136] tun0: persist disabled [ 124.778852][ T42] audit: type=1400 audit(1793137390.623:1391): avc: denied { audit_write } for pid=9144 comm="syz.6.846" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 124.789706][ T42] audit: type=1107 audit(1793137390.633:1392): pid=9144 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 124.833788][ T9147] netlink: 'syz.4.847': attribute type 10 has an invalid length. [ 124.849791][ T9147] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 125.055527][ T41] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 125.215370][ T41] usb 11-1: Using ep0 maxpacket: 16 [ 125.216277][ T41] usb 11-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 125.217445][ T41] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 125.217468][ T41] usb 11-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.217594][ T41] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 125.217617][ T41] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 125.217639][ T41] usb 11-1: config 0 interface 0 has no altsetting 0 [ 125.219872][ T41] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.219891][ T41] usb 11-1: Product: syz [ 125.219903][ T41] usb 11-1: Manufacturer: syz [ 125.219915][ T41] usb 11-1: SerialNumber: syz [ 125.225929][ T41] usb 11-1: config 0 descriptor?? [ 125.228124][ T9145] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 125.432814][ T9145] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 125.437456][ T41] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input11 [ 125.764582][ T9145] jffs2: notice: (9145) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 125.780678][ T5165] usb 11-1: USB disconnect, device number 6 [ 125.929518][ T9158] FAULT_INJECTION: forcing a failure. [ 125.929518][ T9158] name failslab, interval 1, probability 0, space 0, times 0 [ 125.929565][ T9158] CPU: 3 UID: 0 PID: 9158 Comm: syz.4.850 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 125.929581][ T9158] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 125.929586][ T9158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.929603][ T9158] Call Trace: [ 125.929607][ T9158] [ 125.929612][ T9158] dump_stack_lvl+0x100/0x190 [ 125.929648][ T9158] should_fail_ex.cold+0x5/0xa [ 125.929681][ T9158] should_failslab+0xc2/0x120 [ 125.929709][ T9158] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 125.929738][ T9158] ? jffs2_alloc_inode+0x25/0x50 [ 125.929767][ T9158] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 125.929787][ T9158] jffs2_alloc_inode+0x25/0x50 [ 125.929805][ T9158] alloc_inode+0x68/0x250 [ 125.929840][ T9158] new_inode+0x22/0x1c0 [ 125.929862][ T9158] jffs2_new_inode+0xc5/0xcf0 [ 125.929881][ T9158] ? __pfx_jffs2_new_inode+0x10/0x10 [ 125.929896][ T9158] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 125.929913][ T9158] ? jffs2_create+0x27/0x390 [ 125.929928][ T9158] jffs2_create+0x94/0x390 [ 125.929941][ T9158] ? __pfx_jffs2_create+0x10/0x10 [ 125.929952][ T9158] lookup_open+0xd60/0x1940 [ 125.929987][ T9158] path_openat+0xe75/0x23f0 [ 125.930013][ T9158] ? __pfx_path_openat+0x10/0x10 [ 125.930048][ T9158] do_file_open+0x20e/0x430 [ 125.930076][ T9158] ? __pfx_do_file_open+0x10/0x10 [ 125.930117][ T9158] ? _raw_spin_unlock+0x28/0x50 [ 125.930145][ T9158] ? alloc_fd+0x471/0x7a0 [ 125.930178][ T9158] do_sys_openat2+0x163/0x1d0 [ 125.930214][ T9158] ? __pfx_do_sys_openat2+0x10/0x10 [ 125.930233][ T9158] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 125.930254][ T9158] ? __fget_files+0x21f/0x3d0 [ 125.930285][ T9158] __x64_sys_openat+0x12d/0x210 [ 125.930304][ T9158] ? __pfx___x64_sys_openat+0x10/0x10 [ 125.930322][ T9158] ? ksys_write+0x1ac/0x250 [ 125.930354][ T9158] do_syscall_64+0x123/0x790 [ 125.930375][ T9158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.930395][ T9158] RIP: 0033:0x7f9e7979f559 [ 125.930412][ T9158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.930429][ T9158] RSP: 002b:00007f9e7a731028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 125.930447][ T9158] RAX: ffffffffffffffda RBX: 00007f9e79a25fa0 RCX: 00007f9e7979f559 [ 125.930458][ T9158] RDX: 0000000000101c42 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 125.930470][ T9158] RBP: 00007f9e7a731090 R08: 0000000000000000 R09: 0000000000000000 [ 125.930486][ T9158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.930498][ T9158] R13: 00007f9e79a26038 R14: 00007f9e79a25fa0 R15: 00007ffca10e0fe8 [ 125.930520][ T9158] [ 126.371776][ T9164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.503462][ T9175] jffs2: notice: (9175) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 126.517621][ T9175] FAULT_INJECTION: forcing a failure. [ 126.517621][ T9175] name failslab, interval 1, probability 0, space 0, times 0 [ 126.517644][ T9175] CPU: 2 UID: 0 PID: 9175 Comm: syz.4.855 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 126.517661][ T9175] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 126.517665][ T9175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.517672][ T9175] Call Trace: [ 126.517677][ T9175] [ 126.517682][ T9175] dump_stack_lvl+0x100/0x190 [ 126.517703][ T9175] should_fail_ex.cold+0x5/0xa [ 126.517722][ T9175] should_failslab+0xc2/0x120 [ 126.517738][ T9175] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 126.517753][ T9175] ? sidtab_sid2str_get+0x84/0x670 [ 126.517775][ T9175] ? sidtab_sid2str_get+0x17a/0x670 [ 126.517790][ T9175] kmemdup_noprof+0x29/0x60 [ 126.517815][ T9175] sidtab_sid2str_get+0x17a/0x670 [ 126.517830][ T9175] security_sid_to_context_core+0x373/0x700 [ 126.517846][ T9175] avc_audit_post_callback+0x109/0x910 [ 126.517871][ T9175] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 126.517885][ T9175] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 126.517898][ T9175] ? skb_put+0x138/0x180 [ 126.517924][ T9175] ? audit_log_n_string+0x2ac/0x5b0 [ 126.517949][ T9175] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 126.517962][ T9175] common_lsm_audit+0x23f/0x2b0 [ 126.517975][ T9175] ? __pfx_common_lsm_audit+0x10/0x10 [ 126.517987][ T9175] ? lockdep_hardirqs_on+0x7d/0x110 [ 126.518000][ T9175] ? find_held_lock+0x2b/0x80 [ 126.518018][ T9175] ? tomoyo_path_number_perm+0x28f/0x580 [ 126.518037][ T9175] slow_avc_audit+0x186/0x210 [ 126.518051][ T9175] ? __pfx_slow_avc_audit+0x10/0x10 [ 126.518066][ T9175] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 126.518082][ T9175] ? register_lock_class+0x3f/0x7b0 [ 126.518101][ T9175] audit_inode_permission+0x1df/0x2b0 [ 126.518116][ T9175] ? __pfx_audit_inode_permission+0x10/0x10 [ 126.518133][ T9175] selinux_inode_permission+0x7e3/0x1110 [ 126.518155][ T9175] ? __pfx_selinux_inode_permission+0x10/0x10 [ 126.518174][ T9175] ? make_vfsgid+0xf1/0x140 [ 126.518198][ T9175] security_inode_permission+0xe4/0x280 [ 126.518217][ T9175] inode_permission+0x36f/0x630 [ 126.518229][ T9175] ? bpf_lsm_path_mknod+0x9/0x10 [ 126.518249][ T9175] may_o_create+0x296/0x3a0 [ 126.518263][ T9175] lookup_open+0x105c/0x1940 [ 126.518282][ T9175] path_openat+0xe75/0x23f0 [ 126.518301][ T9175] ? __pfx_path_openat+0x10/0x10 [ 126.518322][ T9175] do_file_open+0x20e/0x430 [ 126.518339][ T9175] ? __pfx_do_file_open+0x10/0x10 [ 126.518380][ T9175] ? _raw_spin_unlock+0x28/0x50 [ 126.518396][ T9175] ? alloc_fd+0x471/0x7a0 [ 126.518417][ T9175] do_sys_openat2+0x163/0x1d0 [ 126.518428][ T9175] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.518439][ T9175] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 126.518451][ T9175] ? __fget_files+0x21f/0x3d0 [ 126.518469][ T9175] __x64_sys_openat+0x12d/0x210 [ 126.518480][ T9175] ? __pfx___x64_sys_openat+0x10/0x10 [ 126.518491][ T9175] ? ksys_write+0x1ac/0x250 [ 126.518510][ T9175] do_syscall_64+0x123/0x790 [ 126.518522][ T9175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.518533][ T9175] RIP: 0033:0x7f9e7979f559 [ 126.518543][ T9175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.518554][ T9175] RSP: 002b:00007f9e7a731028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 126.518565][ T9175] RAX: ffffffffffffffda RBX: 00007f9e79a25fa0 RCX: 00007f9e7979f559 [ 126.518572][ T9175] RDX: 0000000000101c42 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 126.518579][ T9175] RBP: 00007f9e7a731090 R08: 0000000000000000 R09: 0000000000000000 [ 126.518585][ T9175] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000002 [ 126.518591][ T9175] R13: 00007f9e79a26038 R14: 00007f9e79a25fa0 R15: 00007ffca10e0fe8 [ 126.518607][ T9175] [ 126.680812][ T9178] overlayfs: conflicting lowerdir path [ 126.810178][ T9183] jffs2: notice: (9183) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 126.987849][ T9189] netlink: 'syz.4.860': attribute type 1 has an invalid length. [ 126.991118][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 126.991137][ T9192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.860'. [ 127.065438][ T9189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.173332][ T9199] netlink: 'syz.6.863': attribute type 11 has an invalid length. [ 127.202498][ T9198] device-mapper: integrity: The superblock was changed while the device was suspended [ 127.202525][ T9198] device-mapper: integrity: Error on superblock check: -22 [ 127.234507][ T9199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.539889][ T9208] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 127.539889][ T9208] Please contact the netfilter-devel mailing list or update your nftables rules. [ 127.749998][ T9214] zswap: compressor zs not available [ 127.824324][ T9219] jffs2: notice: (9219) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 127.891861][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.870'. [ 129.085472][ T50] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 129.245411][ T50] usb 11-1: Using ep0 maxpacket: 8 [ 129.245903][ T50] usb 11-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 129.246731][ T50] usb 11-1: config index 0 descriptor too short (expected 5924, got 36) [ 129.246744][ T50] usb 11-1: config 250 has an invalid interface number: 228 but max is -1 [ 129.246754][ T50] usb 11-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 129.246764][ T50] usb 11-1: config 250 has no interface number 0 [ 129.246793][ T50] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 129.246806][ T50] usb 11-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 129.246818][ T50] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.246829][ T50] usb 11-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 129.246840][ T50] usb 11-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 129.246853][ T50] usb 11-1: config 250 interface 228 has no altsetting 0 [ 129.248064][ T50] usb 11-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 129.248081][ T50] usb 11-1: Product: syz [ 129.248089][ T50] usb 11-1: SerialNumber: syz [ 129.251452][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 129.251468][ T42] audit: type=1800 audit(1793137395.093:1441): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196088 res=0 errno=-22 [ 129.253313][ T42] audit: type=1800 audit(1793137395.093:1442): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=196119 res=0 errno=-22 [ 129.253958][ T42] audit: type=1800 audit(1793137395.093:1443): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=196095 res=0 errno=-22 [ 129.254614][ T42] audit: type=1800 audit(1793137395.093:1444): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=196096 res=0 errno=-22 [ 129.255333][ T50] hub 11-1:250.228: bad descriptor, ignoring hub [ 129.255346][ T50] hub 11-1:250.228: probe with driver hub failed with error -5 [ 129.476122][ T50] usblp 11-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 129.479951][ T42] audit: type=1800 audit(1793137395.323:1445): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=196117 res=0 errno=-22 [ 129.479990][ T42] audit: type=1800 audit(1793137395.323:1446): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=196097 res=0 errno=-22 [ 129.483918][ T42] audit: type=1800 audit(1793137395.323:1447): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=196118 res=0 errno=-22 [ 129.495748][ T50] usb 11-1: USB disconnect, device number 7 [ 129.502417][ T50] usblp0: removed [ 129.676916][ T9232] netlink: 32 bytes leftover after parsing attributes in process `syz.6.872'. [ 129.915348][ T50] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 130.045649][ T50] usb 11-1: device descriptor read/64, error -71 [ 130.285377][ T50] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 130.415450][ T50] usb 11-1: device descriptor read/64, error -71 [ 130.525797][ T50] usb usb11-port1: attempt power cycle [ 130.865718][ T50] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 130.886669][ T50] usb 11-1: device descriptor read/8, error -71 [ 131.125379][ T50] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 131.128773][ T42] audit: type=1400 audit(1793137396.973:1448): avc: denied { connect } for pid=9253 comm="syz.4.879" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.131696][ T42] audit: type=1800 audit(1793137396.973:1449): pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196304 res=0 errno=-22 [ 131.139835][ T42] audit: type=1800 audit(1793137396.983:1450): pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196316 res=0 errno=-22 [ 131.148205][ T50] usb 11-1: device descriptor read/8, error -71 [ 131.164253][ T9255] netlink: 'syz.4.879': attribute type 10 has an invalid length. [ 131.174931][ T9255] team0: Port device netdevsim1 removed [ 131.199430][ T9255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.203068][ T9255] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 131.255667][ T50] usb usb11-port1: unable to enumerate USB device [ 131.307129][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.309406][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.315449][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.332934][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.341615][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.418055][ T9263] jffs2: notice: (9263) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 131.574209][ T8385] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.634737][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 131.638185][ T9273] IPv6: sit1: Disabled Multicast RS [ 131.640135][ T9273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9273 comm=syz.4.883 [ 131.640438][ T9273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.883'. [ 131.679334][ T8385] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.720644][ T9258] rxe_eth0 speed is unknown, defaulting to 1000 [ 131.750803][ T8385] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.766457][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'. [ 131.769673][ T9276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.884'. [ 131.811112][ T8385] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.972907][ T9282] Bluetooth: MGMT ver 1.23 [ 131.993061][ T9282] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=9282 comm=syz.6.886 [ 132.220278][ T8385] bridge_slave_1: left allmulticast mode [ 132.220300][ T8385] bridge_slave_1: left promiscuous mode [ 132.220508][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.250389][ T8385] bridge_slave_0: left allmulticast mode [ 132.250414][ T8385] bridge_slave_0: left promiscuous mode [ 132.250603][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.501557][ T8385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.504360][ T8385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.512703][ T8385] bond0 (unregistering): Released all slaves [ 132.520712][ T9294] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 132.520735][ T9294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.533105][ T5492] 8021q: adding VLAN 0 to HW filter on device eth18 [ 132.641830][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.658426][ T9301] jffs2: notice: (9301) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 132.975134][ T5492] 8021q: adding VLAN 0 to HW filter on device eth19 [ 132.978740][ T9258] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.979319][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.979395][ T9258] bridge_slave_0: entered allmulticast mode [ 132.991141][ T9258] bridge_slave_0: entered promiscuous mode [ 133.001143][ T9258] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.001188][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.001253][ T9258] bridge_slave_1: entered allmulticast mode [ 133.015186][ T9258] bridge_slave_1: entered promiscuous mode [ 133.016332][ T9314] loop0: detected capacity change from 0 to 3904 [ 133.129586][ T9314] loop0: [ 133.144780][ T9258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.153365][ T9258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.279158][ T9258] team0: Port device team_slave_0 added [ 133.293348][ T9258] team0: Port device team_slave_1 added [ 133.293530][ T9320] bridge0: port 3(veth0) entered blocking state [ 133.293576][ T9320] bridge0: port 3(veth0) entered disabled state [ 133.293655][ T9320] veth0: entered allmulticast mode [ 133.295134][ T9320] veth0: entered promiscuous mode [ 133.299230][ T9320] bridge0: port 3(veth0) entered blocking state [ 133.299325][ T9320] bridge0: port 3(veth0) entered forwarding state [ 133.320232][ T8385] hsr_slave_0: left promiscuous mode [ 133.320665][ T8385] hsr_slave_1: left promiscuous mode [ 133.321126][ T8385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.321138][ T8385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.321643][ T8385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.321653][ T8385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.331801][ T8385] veth1_macvtap: left promiscuous mode [ 133.331837][ T8385] veth0_macvtap: left promiscuous mode [ 133.331887][ T8385] veth1_vlan: left promiscuous mode [ 133.331917][ T8385] veth0_vlan: left promiscuous mode [ 133.416639][ T9321] FAULT_INJECTION: forcing a failure. [ 133.416639][ T9321] name failslab, interval 1, probability 0, space 0, times 0 [ 133.416682][ T9321] CPU: 2 UID: 0 PID: 9321 Comm: syz.4.894 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 133.416700][ T9321] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 133.416705][ T9321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.416720][ T9321] Call Trace: [ 133.416724][ T9321] [ 133.416730][ T9321] dump_stack_lvl+0x100/0x190 [ 133.416776][ T9321] should_fail_ex.cold+0x5/0xa [ 133.416812][ T9321] should_failslab+0xc2/0x120 [ 133.416843][ T9321] __kmalloc_noprof+0xfc/0x840 [ 133.416862][ T9321] ? rcu_is_watching+0x13/0xc0 [ 133.416882][ T9321] ? tomoyo_realpath_from_path+0xb6/0x690 [ 133.416906][ T9321] tomoyo_realpath_from_path+0xb6/0x690 [ 133.416922][ T9321] tomoyo_check_open_permission+0x2af/0x3c0 [ 133.416941][ T9321] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 133.416964][ T9321] ? hook_file_open+0x245/0x8e0 [ 133.416978][ T9321] ? avc_has_perm_noaudit+0x11e/0x470 [ 133.417008][ T9321] ? __pfx_selinux_inode_permission+0x10/0x10 [ 133.417029][ T9321] tomoyo_file_open+0x6b/0x90 [ 133.417043][ T9321] security_file_open+0xb5/0x1e0 [ 133.417055][ T9321] do_dentry_open+0x552/0x1470 [ 133.417079][ T9321] vfs_open_consume+0xcc/0x460 [ 133.417091][ T9321] path_openat+0x1547/0x23f0 [ 133.417119][ T9321] ? __pfx_path_openat+0x10/0x10 [ 133.417140][ T9321] do_file_open+0x20e/0x430 [ 133.417158][ T9321] ? __pfx_do_file_open+0x10/0x10 [ 133.417185][ T9321] ? _raw_spin_unlock+0x28/0x50 [ 133.417208][ T9321] ? alloc_fd+0x471/0x7a0 [ 133.417229][ T9321] do_sys_openat2+0x163/0x1d0 [ 133.417239][ T9321] ? __pfx_do_sys_openat2+0x10/0x10 [ 133.417251][ T9321] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.417289][ T9321] __x64_sys_openat+0x12d/0x210 [ 133.417304][ T9321] ? __pfx___x64_sys_openat+0x10/0x10 [ 133.417321][ T9321] do_syscall_64+0x123/0x790 [ 133.417334][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.417347][ T9321] RIP: 0033:0x7f9e7979f559 [ 133.417358][ T9321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.417374][ T9321] RSP: 002b:00007f9e7a731028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 133.417386][ T9321] RAX: ffffffffffffffda RBX: 00007f9e79a25fa0 RCX: 00007f9e7979f559 [ 133.417393][ T9321] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 133.417400][ T9321] RBP: 00007f9e79836b20 R08: 0000000000000000 R09: 0000000000000000 [ 133.417407][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.417414][ T9321] R13: 00007f9e79a26038 R14: 00007f9e79a25fa0 R15: 00007ffca10e0fe8 [ 133.417430][ T9321] [ 133.417435][ T9321] ERROR: Out of memory at tomoyo_realpath_from_path. [ 133.435793][ T67] Bluetooth: hci0: command tx timeout [ 133.705061][ T8385] team0 (unregistering): Port device team_slave_1 removed [ 133.713657][ T9331] jffs2: notice: (9331) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 133.722903][ T8385] team0 (unregistering): Port device team_slave_0 removed [ 133.843499][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.843513][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.843526][ T9258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.849494][ T9336] FAULT_INJECTION: forcing a failure. [ 133.849494][ T9336] name failslab, interval 1, probability 0, space 0, times 0 [ 133.849516][ T9336] CPU: 3 UID: 0 PID: 9336 Comm: syz.4.897 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 133.849533][ T9336] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 133.849537][ T9336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.849543][ T9336] Call Trace: [ 133.849548][ T9336] [ 133.849552][ T9336] dump_stack_lvl+0x100/0x190 [ 133.849572][ T9336] should_fail_ex.cold+0x5/0xa [ 133.849589][ T9336] should_failslab+0xc2/0x120 [ 133.849605][ T9336] __kmalloc_noprof+0xfc/0x840 [ 133.849618][ T9336] ? tomoyo_encode2+0xfb/0x3c0 [ 133.849634][ T9336] tomoyo_encode2+0xfb/0x3c0 [ 133.849647][ T9336] tomoyo_encode+0x29/0x50 [ 133.849658][ T9336] tomoyo_realpath_from_path+0x18c/0x690 [ 133.849674][ T9336] tomoyo_path_number_perm+0x23c/0x580 [ 133.849690][ T9336] ? tomoyo_path_number_perm+0x22e/0x580 [ 133.849707][ T9336] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 133.849729][ T9336] ? __lock_acquire+0x5c0/0x1f40 [ 133.849764][ T9336] ? __fget_files+0x34/0x3d0 [ 133.849780][ T9336] ? find_held_lock+0x2b/0x80 [ 133.849790][ T9336] ? hook_file_ioctl_common+0x140/0x440 [ 133.849826][ T9336] ? __fget_files+0x21f/0x3d0 [ 133.849845][ T9336] security_file_ioctl+0xd3/0x230 [ 133.849864][ T9336] __x64_sys_ioctl+0xb7/0x210 [ 133.849879][ T9336] do_syscall_64+0x123/0x790 [ 133.849891][ T9336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.849903][ T9336] RIP: 0033:0x7f9e7979f559 [ 133.849913][ T9336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.849924][ T9336] RSP: 002b:00007f9e7a731028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.849935][ T9336] RAX: ffffffffffffffda RBX: 00007f9e79a25fa0 RCX: 00007f9e7979f559 [ 133.849942][ T9336] RDX: 0000200000002340 RSI: 0000000000002271 RDI: 0000000000000003 [ 133.849948][ T9336] RBP: 00007f9e7a731090 R08: 0000000000000000 R09: 0000000000000000 [ 133.849955][ T9336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.849961][ T9336] R13: 00007f9e79a26038 R14: 00007f9e79a25fa0 R15: 00007ffca10e0fe8 [ 133.849976][ T9336] [ 133.850027][ T9336] ERROR: Out of memory at tomoyo_realpath_from_path. [ 133.850299][ T5492] 8021q: adding VLAN 0 to HW filter on device eth20 [ 133.851567][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.851578][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.851599][ T9258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.928911][ T9258] hsr_slave_0: entered promiscuous mode [ 133.939829][ T9258] hsr_slave_1: entered promiscuous mode [ 133.942622][ T9258] debugfs: 'hsr0' already exists in 'hsr' [ 133.942637][ T9258] Cannot create hsr debugfs directory [ 134.205400][ T5492] 8021q: adding VLAN 0 to HW filter on device eth21 [ 134.211879][ T8385] IPVS: stop unused estimator thread 0... [ 134.237157][ T9346] syzkaller0: entered promiscuous mode [ 134.237181][ T9346] syzkaller0: entered allmulticast mode [ 134.267360][ T9339] io-wq is not configured for unbound workers [ 134.280126][ T9258] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 134.298827][ T9258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.299392][ T9258] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 134.302924][ T9258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.342722][ T9258] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 134.350864][ T9258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.357672][ T9258] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 134.371411][ T9258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.497002][ T9258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.518959][ T9258] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.524521][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.524610][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.532608][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.532694][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.928548][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 134.928566][ T42] audit: type=1800 audit(1793137400.773:1488): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206245 res=0 errno=-22 [ 134.933640][ T42] audit: type=1800 audit(1793137400.773:1489): pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206256 res=0 errno=-22 [ 134.938183][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 134.940377][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 134.953342][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 134.966500][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 134.967587][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 134.990947][ T42] audit: type=1800 audit(1793137400.833:1490): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206275 res=0 errno=-22 [ 135.005062][ T42] audit: type=1800 audit(1793137400.843:1491): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206286 res=0 errno=-22 [ 135.012553][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.900'. [ 135.027190][ T42] audit: type=1800 audit(1793137400.873:1492): pid=9373 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.900" name="quirks" dev="sysfs" ino=63650 res=0 errno=-22 [ 135.027455][ T9371] usbcore.quirks: string doesn't fit in 127 chars. [ 135.107126][ T9258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.151300][ T9390] jffs2: notice: (9390) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 135.262781][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.280858][ T42] audit: type=1800 audit(1793137401.123:1493): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.904" name="compressor" dev="sysfs" ino=59416 res=0 errno=-22 [ 135.403898][ T9415] FAULT_INJECTION: forcing a failure. [ 135.403898][ T9415] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 135.403933][ T9415] CPU: 3 UID: 0 PID: 9415 Comm: syz.4.906 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 135.403960][ T9415] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 135.403968][ T9415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.403977][ T9415] Call Trace: [ 135.403986][ T9415] [ 135.403994][ T9415] dump_stack_lvl+0x100/0x190 [ 135.404025][ T9415] should_fail_ex.cold+0x5/0xa [ 135.404049][ T9415] ? prepare_alloc_pages+0x16d/0x5b0 [ 135.404076][ T9415] should_fail_alloc_page+0xeb/0x140 [ 135.404104][ T9415] prepare_alloc_pages+0x1f0/0x5b0 [ 135.404133][ T9415] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 135.404164][ T9415] ? stack_trace_save+0x8e/0xc0 [ 135.404187][ T9415] ? __pfx_stack_trace_save+0x10/0x10 [ 135.404208][ T9415] ? stack_depot_save_flags+0x27/0x9f0 [ 135.404262][ T9415] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 135.404285][ T9415] ? kasan_save_stack+0x3f/0x50 [ 135.404306][ T9415] ? kasan_save_stack+0x30/0x50 [ 135.404327][ T9415] ? kasan_save_track+0x14/0x30 [ 135.404349][ T9415] ? __kasan_kmalloc+0xaa/0xb0 [ 135.404370][ T9415] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 135.404386][ T9415] ? mon_bin_open+0x1a8/0x470 [ 135.404428][ T9415] ? chrdev_open+0x234/0x6a0 [ 135.404452][ T9415] ? do_dentry_open+0x674/0x1470 [ 135.404474][ T9415] ? vfs_open_consume+0xcc/0x460 [ 135.404490][ T9415] ? path_openat+0x1547/0x23f0 [ 135.404514][ T9415] ? do_file_open+0x20e/0x430 [ 135.404537][ T9415] ? do_sys_openat2+0x163/0x1d0 [ 135.404552][ T9415] ? __x64_sys_openat+0x12d/0x210 [ 135.404568][ T9415] ? do_syscall_64+0x123/0x790 [ 135.404585][ T9415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.404618][ T9415] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.404660][ T9415] ? policy_nodemask+0xed/0x4f0 [ 135.404687][ T9415] alloc_pages_mpol+0x201/0x560 [ 135.404714][ T9415] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 135.404746][ T9415] alloc_pages_noprof+0x1a/0x160 [ 135.404767][ T9415] get_zeroed_page_noprof+0x18/0xb0 [ 135.404809][ T9415] mon_alloc_buff+0xce/0x1b0 [ 135.404839][ T9415] mon_bin_open+0x207/0x470 [ 135.404865][ T9415] ? __pfx_mon_bin_open+0x10/0x10 [ 135.404892][ T9415] chrdev_open+0x234/0x6a0 [ 135.404917][ T9415] ? __pfx_chrdev_open+0x10/0x10 [ 135.404944][ T9415] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 135.404984][ T9415] do_dentry_open+0x674/0x1470 [ 135.405006][ T9415] ? __pfx_chrdev_open+0x10/0x10 [ 135.405035][ T9415] vfs_open_consume+0xcc/0x460 [ 135.405057][ T9415] path_openat+0x1547/0x23f0 [ 135.405089][ T9415] ? __pfx_path_openat+0x10/0x10 [ 135.405137][ T9415] do_file_open+0x20e/0x430 [ 135.405169][ T9415] ? __pfx_do_file_open+0x10/0x10 [ 135.405212][ T9415] ? _raw_spin_unlock+0x28/0x50 [ 135.405237][ T9415] ? alloc_fd+0x471/0x7a0 [ 135.405297][ T9415] do_sys_openat2+0x163/0x1d0 [ 135.405315][ T9415] ? __pfx_do_sys_openat2+0x10/0x10 [ 135.405329][ T9415] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 135.405361][ T9415] __x64_sys_openat+0x12d/0x210 [ 135.405380][ T9415] ? __pfx___x64_sys_openat+0x10/0x10 [ 135.405408][ T9415] do_syscall_64+0x123/0x790 [ 135.405429][ T9415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.405449][ T9415] RIP: 0033:0x7f9e7975fd8e [ 135.405465][ T9415] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 135.405482][ T9415] RSP: 002b:00007f9e7a730b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.405500][ T9415] RAX: ffffffffffffffda RBX: 00007f9e7a7316c0 RCX: 00007f9e7975fd8e [ 135.405512][ T9415] RDX: 0000000000000000 RSI: 00007f9e7a730c00 RDI: ffffffffffffff9c [ 135.405525][ T9415] RBP: 00007f9e7a730c00 R08: 0000000000000000 R09: 0000000000000000 [ 135.405535][ T9415] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 135.405546][ T9415] R13: 00007f9e79a26038 R14: 00007f9e79a25fa0 R15: 00007ffca10e0fe8 [ 135.405571][ T9415] [ 135.427398][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.446049][ T9375] rxe_eth0 speed is unknown, defaulting to 1000 [ 135.492572][ T9419] jffs2: notice: (9419) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 135.515459][ T67] Bluetooth: hci0: command tx timeout [ 135.610474][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.625886][ T9258] veth0_vlan: entered promiscuous mode [ 135.688284][ T9258] veth1_vlan: entered promiscuous mode [ 135.722226][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.758108][ T9427] jffs2: notice: (9427) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 135.772238][ T9258] veth0_macvtap: entered promiscuous mode [ 135.795941][ T9258] veth1_macvtap: entered promiscuous mode [ 135.856319][ T42] audit: type=1800 audit(1793137401.693:1494): pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=210886 res=0 errno=-22 [ 135.856840][ T42] audit: type=1800 audit(1793137401.713:1495): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=210891 res=0 errno=-22 [ 135.866952][ T42] audit: type=1800 audit(1793137401.713:1496): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=210895 res=0 errno=-22 [ 135.867000][ T42] audit: type=1800 audit(1793137401.713:1497): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=210894 res=0 errno=-22 [ 135.868523][ T9258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.909607][ T9435] FAULT_INJECTION: forcing a failure. [ 135.909607][ T9435] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 135.909629][ T9435] CPU: 2 UID: 0 PID: 9435 Comm: syz.6.912 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 135.909645][ T9435] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 135.909649][ T9435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.909656][ T9435] Call Trace: [ 135.909660][ T9435] [ 135.909665][ T9435] dump_stack_lvl+0x100/0x190 [ 135.909686][ T9435] should_fail_ex.cold+0x5/0xa [ 135.909701][ T9435] ? prepare_alloc_pages+0x16d/0x5b0 [ 135.909718][ T9435] should_fail_alloc_page+0xeb/0x140 [ 135.909734][ T9435] prepare_alloc_pages+0x1f0/0x5b0 [ 135.909752][ T9435] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 135.909768][ T9435] ? __lock_acquire+0x5c0/0x1f40 [ 135.909785][ T9435] ? lock_acquire+0x1d1/0x380 [ 135.909798][ T9435] ? unwind_next_frame+0xbd/0x2090 [ 135.909830][ T9435] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 135.909845][ T9435] ? is_bpf_text_address+0x25/0x1a0 [ 135.909876][ T9435] ? find_held_lock+0x2b/0x80 [ 135.909892][ T9435] ? is_bpf_text_address+0x8a/0x1a0 [ 135.909910][ T9435] ? is_bpf_text_address+0x8a/0x1a0 [ 135.909926][ T9435] ? bpf_ksym_find+0x128/0x1c0 [ 135.909941][ T9435] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 135.909964][ T9435] ? is_bpf_text_address+0x94/0x1a0 [ 135.909985][ T9435] ? unwind_get_return_address+0x59/0xa0 [ 135.910010][ T9435] ? arch_stack_walk+0xa6/0xf0 [ 135.910047][ T9435] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.910073][ T9435] ? policy_nodemask+0xed/0x4f0 [ 135.910100][ T9435] alloc_pages_mpol+0x201/0x560 [ 135.910119][ T9435] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 135.910135][ T9435] ? __lock_acquire+0x5c0/0x1f40 [ 135.910152][ T9435] folio_alloc_mpol_noprof+0x36/0x260 [ 135.910165][ T9435] vma_alloc_folio_noprof+0xed/0x1d0 [ 135.910176][ T9435] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 135.910191][ T9435] do_anonymous_page+0xac9/0x2050 [ 135.910212][ T9435] ? __pfx_do_anonymous_page+0x10/0x10 [ 135.910227][ T9435] ? rcu_read_unlock+0x2d/0xb0 [ 135.910244][ T9435] ? rcu_read_unlock+0x2d/0xb0 [ 135.910264][ T9435] __handle_mm_fault+0x1ff3/0x2f60 [ 135.910374][ T9435] ? __pfx___handle_mm_fault+0x10/0x10 [ 135.910390][ T9435] ? __pfx_mt_find+0x10/0x10 [ 135.910412][ T9435] ? find_vma+0xbf/0x140 [ 135.910424][ T9435] ? __pfx_find_vma+0x10/0x10 [ 135.910437][ T9435] handle_mm_fault+0x363/0xa20 [ 135.910457][ T9435] do_user_addr_fault+0x745/0x12f0 [ 135.910477][ T9435] exc_page_fault+0x6f/0xd0 [ 135.910499][ T9435] asm_exc_page_fault+0x26/0x30 [ 135.910510][ T9435] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 135.910533][ T9435] Code: 89 ee 48 89 ef e8 91 a9 d6 fc 4d 85 ff 75 26 e8 a7 af d6 fc 89 de 4c 89 e7 e8 fd ca 4f fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 81 af d6 fc 48 89 d8 5b 5d 41 [ 135.910544][ T9435] RSP: 0018:ffffc9000774f9c8 EFLAGS: 00050297 [ 135.910555][ T9435] RAX: 0000000000000001 RBX: 0000000000000200 RCX: 0000000000000100 [ 135.910562][ T9435] RDX: 0000000000000001 RSI: ffff8880363ac104 RDI: 0000200000001000 [ 135.910568][ T9435] RBP: 0000200000000f00 R08: 0000000000000000 R09: ffffed1006c75840 [ 135.910575][ T9435] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880363ac004 [ 135.910582][ T9435] R13: 0000200000001100 R14: 00007ffffffff000 R15: 0000000000000000 [ 135.910597][ T9435] ? _copy_to_user+0x93/0xd0 [ 135.910611][ T9435] generic_map_lookup_batch+0x5c5/0xd10 [ 135.910632][ T9435] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 135.910651][ T9435] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 135.910666][ T9435] bpf_map_do_batch+0x5b2/0x6d0 [ 135.910678][ T9435] ? bpf_lsm_bpf+0x9/0x10 [ 135.910706][ T9435] __sys_bpf+0x228a/0x4b60 [ 135.910734][ T9435] ? __pfx___sys_bpf+0x10/0x10 [ 135.910754][ T9435] ? find_held_lock+0x2b/0x80 [ 135.910773][ T9435] ? get_pid_task+0xfc/0x250 [ 135.910807][ T9435] ? get_pid_task+0xfc/0x250 [ 135.910837][ T9435] ? find_held_lock+0x2b/0x80 [ 135.910859][ T9435] ? rcu_read_lock_any_held+0x6a/0x90 [ 135.910879][ T9435] ? find_held_lock+0x2b/0x80 [ 135.910894][ T9435] ? ksys_write+0x190/0x250 [ 135.910914][ T9435] ? ksys_write+0x190/0x250 [ 135.910935][ T9435] ? lock_acquire+0x1d1/0x380 [ 135.910975][ T9435] ? fput+0x7c/0x100 [ 135.910990][ T9435] ? ksys_write+0x1ac/0x250 [ 135.911015][ T9435] ? __x64_sys_bpf+0xce/0x140 [ 135.911039][ T9435] __x64_sys_bpf+0xce/0x140 [ 135.911065][ T9435] ? do_syscall_64+0xae/0x790 [ 135.911071][ T9258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.911084][ T9435] do_syscall_64+0x123/0x790 [ 135.911105][ T9435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.911124][ T9435] RIP: 0033:0x7ff92e59f559 [ 135.911159][ T9435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.911175][ T9435] RSP: 002b:00007ff92f3ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.911192][ T9435] RAX: ffffffffffffffda RBX: 00007ff92e825fa0 RCX: 00007ff92e59f559 [ 135.911204][ T9435] RDX: 0000000000000038 RSI: 0000200000000400 RDI: 0000000000000018 [ 135.911216][ T9435] RBP: 00007ff92f3ec090 R08: 0000000000000000 R09: 0000000000000000 [ 135.911227][ T9435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.911238][ T9435] R13: 00007ff92e826038 R14: 00007ff92e825fa0 R15: 00007ffced0cd2c8 [ 135.911265][ T9435] [ 136.055423][ T5825] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.055452][ T5825] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.055471][ T5825] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.055490][ T5825] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.132627][ T9439] overlay: Unknown parameter 'fsname' [ 136.180112][ T9441] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 136.212835][ T13] bridge_slave_1: left allmulticast mode [ 136.212859][ T13] bridge_slave_1: left promiscuous mode [ 136.213059][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.226684][ T13] bridge_slave_0: left allmulticast mode [ 136.226702][ T13] bridge_slave_0: left promiscuous mode [ 136.226817][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.318993][ T9451] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 136.319009][ T9451] overlayfs: failed to set xattr on upper [ 136.319013][ T9451] overlayfs: ...falling back to redirect_dir=nofollow. [ 136.319017][ T9451] overlayfs: ...falling back to index=off. [ 136.319021][ T9451] overlayfs: ...falling back to uuid=null. [ 136.353772][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.362096][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.363587][ T13] bond0 (unregistering): Released all slaves [ 136.371048][ T9454] jffs2: notice: (9454) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 136.385491][ T9375] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.385573][ T9375] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.385674][ T9375] bridge_slave_0: entered allmulticast mode [ 136.386943][ T9375] bridge_slave_0: entered promiscuous mode [ 136.395577][ T9375] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.395657][ T9375] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.395762][ T9375] bridge_slave_1: entered allmulticast mode [ 136.397988][ T9375] bridge_slave_1: entered promiscuous mode [ 136.443435][ T9457] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 136.501588][ T9375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.529937][ T9375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.554657][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.554680][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.582444][ T9462] jffs2: notice: (9462) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 136.612039][ T9375] team0: Port device team_slave_0 added [ 136.664925][ T9375] team0: Port device team_slave_1 added [ 136.674358][ T9470] FAULT_INJECTION: forcing a failure. [ 136.674358][ T9470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.674390][ T9470] CPU: 2 UID: 0 PID: 9470 Comm: syz.4.922 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 136.674415][ T9470] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 136.674422][ T9470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.674434][ T9470] Call Trace: [ 136.674440][ T9470] [ 136.674448][ T9470] dump_stack_lvl+0x100/0x190 [ 136.674478][ T9470] should_fail_ex.cold+0x5/0xa [ 136.674506][ T9470] _copy_from_user+0x2e/0xd0 [ 136.674528][ T9470] memdup_user+0x6b/0xe0 [ 136.674571][ T9470] strndup_user+0x78/0xe0 [ 136.674597][ T9470] __x64_sys_mount+0x136/0x310 [ 136.674618][ T9470] ? __pfx___x64_sys_mount+0x10/0x10 [ 136.674645][ T9470] do_syscall_64+0x123/0x790 [ 136.674666][ T9470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.674684][ T9470] RIP: 0033:0x7f9e7979f559 [ 136.674699][ T9470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.674716][ T9470] RSP: 002b:00007f9e7a731028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 136.674733][ T9470] RAX: ffffffffffffffda RBX: 00007f9e79a25fa0 RCX: 00007f9e7979f559 [ 136.674745][ T9470] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00002000000000c0 [ 136.674756][ T9470] RBP: 00007f9e7a731090 R08: 0000000000000000 R09: 0000000000000000 [ 136.674767][ T9470] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000001 [ 136.674777][ T9470] R13: 00007f9e79a26038 R14: 00007f9e79a25fa0 R15: 00007ffca10e0fe8 [ 136.674801][ T9470] [ 136.749155][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.749176][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.766100][ T9475] jffs2: notice: (9475) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 136.773470][ T9375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.773485][ T9375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.773507][ T9375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.788324][ T9375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.788344][ T9375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.788368][ T9375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.877394][ T9479] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 136.877394][ T9479] [ 136.879585][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 136.879620][ T9479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.925'. [ 136.907077][ T9479] geneve2: entered promiscuous mode [ 136.907101][ T9479] geneve2: entered allmulticast mode [ 136.952670][ T9375] hsr_slave_0: entered promiscuous mode [ 136.953644][ T9375] hsr_slave_1: entered promiscuous mode [ 136.958199][ T9375] debugfs: 'hsr0' already exists in 'hsr' [ 136.958220][ T9375] Cannot create hsr debugfs directory [ 137.009095][ T5492] 8021q: adding VLAN 0 to HW filter on device eth22 [ 137.045504][ T67] Bluetooth: hci4: command tx timeout [ 137.194963][ T13] hsr_slave_0: left promiscuous mode [ 137.197777][ T13] hsr_slave_1: left promiscuous mode [ 137.198573][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.198593][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.201355][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.201371][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.211993][ T13] veth1_macvtap: left promiscuous mode [ 137.212027][ T13] veth0_macvtap: left promiscuous mode [ 137.212110][ T13] veth1_vlan: left promiscuous mode [ 137.212165][ T13] veth0_vlan: left promiscuous mode [ 137.303705][ T9498] usb usb1: usbfs: process 9498 (syz.9.928) did not claim interface 0 before use [ 137.375695][ T9506] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 137.375708][ T9506] overlayfs: missing 'lowerdir' [ 137.477046][ T13] team0 (unregistering): Port device team_slave_1 removed [ 137.489117][ T9511] jffs2: notice: (9511) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 137.491024][ T13] team0 (unregistering): Port device team_slave_0 removed [ 137.543486][ T9514] PM: suspend entry (s2idle) [ 137.543502][ T9514] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 137.543511][ T9514] PM: suspend exit [ 137.594454][ T5492] 8021q: adding VLAN 0 to HW filter on device eth23 [ 137.600832][ T67] Bluetooth: hci0: command tx timeout [ 137.913376][ T9530] netlink: 68 bytes leftover after parsing attributes in process `syz.4.939'. [ 137.915136][ T5492] 8021q: adding VLAN 0 to HW filter on device eth24 [ 137.941438][ T9533] jffs2: notice: (9533) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 21 orphan) and 48 of xref (4 dead, 41 orphan) found. [ 137.948448][ T9533] FAULT ** replaying previous printk message ** [ 137.948448][ T9533] FAULT_INJECTION: forcing a failure. [ 137.948448][ T9533] name failslab, interval 1, probability 0, space 0, times 0 [ 137.948477][ T9533] CPU: 0 UID: 0 PID: 9533 Comm: syz.9.940 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 137.948499][ T9533] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 137.948506][ T9533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.948515][ T9533] Call Trace: [ 137.948521][ T9533] [ 137.948528][ T9533] dump_stack_lvl+0x100/0x190 [ 137.948560][ T9533] should_fail_ex.cold+0x5/0xa [ 137.948585][ T9533] should_failslab+0xc2/0x120 [ 137.948610][ T9533] kmem_cache_alloc_noprof+0x92/0x6a0 [ 137.948634][ T9533] ? jffs2_do_new_inode+0x24/0x520 [ 137.948681][ T9533] jffs2_do_new_inode+0x24/0x520 [ 137.948707][ T9533] jffs2_new_inode+0x577/0xcf0 [ 137.948726][ T9533] ? __pfx_jffs2_new_inode+0x10/0x10 [ 137.948741][ T9533] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 137.948762][ T9533] ? jffs2_create+0x27/0x390 [ 137.948787][ T9533] jffs2_create+0x94/0x390 [ 137.948810][ T9533] ? __pfx_jffs2_create+0x10/0x10 [ 137.948828][ T9533] lookup_open+0xd60/0x1940 [ 137.948861][ T9533] path_openat+0xe75/0x23f0 [ 137.948893][ T9533] ? __pfx_path_openat+0x10/0x10 [ 137.948923][ T9533] do_file_open+0x20e/0x430 [ 137.948952][ T9533] ? __pfx_do_file_open+0x10/0x10 [ 137.948996][ T9533] ? _raw_spin_unlock+0x28/0x50 [ 137.949022][ T9533] ? alloc_fd+0x471/0x7a0 [ 137.949056][ T9533] do_sys_openat2+0x163/0x1d0 [ 137.949075][ T9533] ? __pfx_do_sys_openat2+0x10/0x10 [ 137.949094][ T9533] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.949114][ T9533] ? __fget_files+0x21f/0x3d0 [ 137.949145][ T9533] __x64_sys_openat+0x12d/0x210 [ 137.949165][ T9533] ? __pfx___x64_sys_openat+0x10/0x10 [ 137.949181][ T9533] ? ksys_write+0x1ac/0x250 [ 137.949214][ T9533] do_syscall_64+0x123/0x790 [ 137.949235][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.949280][ T9533] RIP: 0033:0x7fbf24d9f559 [ 137.949296][ T9533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.949313][ T9533] RSP: 002b:00007fbf25b91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.949339][ T9533] RAX: ffffffffffffffda RBX: 00007fbf25025fa0 RCX: 00007fbf24d9f559 [ 137.949351][ T9533] RDX: 0000000000101c42 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 137.949362][ T9533] RBP: 00007fbf25b91090 R08: 0000000000000000 R09: 0000000000000000 [ 137.949373][ T9533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.949383][ T9533] R13: 00007fbf25026038 R14: 00007fbf25025fa0 R15: 00007ffe644dbe68 [ 137.949407][ T9533] [ 137.949467][ T9533] ================================================================== [ 137.949487][ T9533] BUG: KASAN: slab-use-after-free in jffs2_xattr_delete_inode+0x112/0x130 [ 137.949520][ T9533] Read of size 4 at addr ffff888037cf7d28 by task syz.9.940/9533 [ 137.949533][ T9533] [ 137.949543][ T9533] CPU: 0 UID: 0 PID: 9533 Comm: syz.9.940 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 137.949569][ T9533] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 137.949576][ T9533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.949587][ T9533] Call Trace: [ 137.949593][ T9533] [ 137.949599][ T9533] dump_stack_lvl+0x100/0x190 [ 137.949625][ T9533] print_report+0x13d/0x4b0 [ 137.949666][ T9533] ? __virt_addr_valid+0x239/0x430 [ 137.949689][ T9533] ? jffs2_xattr_delete_inode+0x112/0x130 [ 137.949710][ T9533] kasan_report+0xdf/0x1c0 [ 137.949736][ T9533] ? jffs2_xattr_delete_inode+0x112/0x130 [ 137.949762][ T9533] jffs2_xattr_delete_inode+0x112/0x130 [ 137.949785][ T9533] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 137.949801][ T9533] jffs2_do_clear_inode+0x50/0x470 [ 137.949826][ T9533] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 137.949842][ T9533] evict+0x3c2/0xad0 [ 137.949861][ T9533] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 137.949892][ T9533] ? __pfx_evict+0x10/0x10 [ 137.949910][ T9533] ? lock_acquire+0x1d1/0x380 [ 137.949933][ T9533] ? iput.part.0+0x981/0x1050 [ 137.949954][ T9533] iput.part.0+0x989/0x1050 [ 137.949976][ T9533] iput+0x30/0x40 [ 137.949994][ T9533] jffs2_new_inode+0xa99/0xcf0 [ 137.950012][ T9533] ? __pfx_jffs2_new_inode+0x10/0x10 [ 137.950028][ T9533] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 137.950049][ T9533] ? jffs2_create+0x27/0x390 [ 137.950069][ T9533] jffs2_create+0x94/0x390 [ 137.950089][ T9533] ? __pfx_jffs2_create+0x10/0x10 [ 137.950106][ T9533] lookup_open+0xd60/0x1940 [ 137.950130][ T9533] path_openat+0xe75/0x23f0 [ 137.950157][ T9533] ? __pfx_path_openat+0x10/0x10 [ 137.950182][ T9533] do_file_open+0x20e/0x430 [ 137.950200][ T9533] ? __pfx_do_file_open+0x10/0x10 [ 137.950220][ T9533] ? _raw_spin_unlock+0x28/0x50 [ 137.950234][ T9533] ? alloc_fd+0x471/0x7a0 [ 137.950252][ T9533] do_sys_openat2+0x163/0x1d0 [ 137.950262][ T9533] ? __pfx_do_sys_openat2+0x10/0x10 [ 137.950272][ T9533] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.950283][ T9533] ? __fget_files+0x21f/0x3d0 [ 137.950299][ T9533] __x64_sys_openat+0x12d/0x210 [ 137.950310][ T9533] ? __pfx___x64_sys_openat+0x10/0x10 [ 137.950319][ T9533] ? ksys_write+0x1ac/0x250 [ 137.950339][ T9533] do_syscall_64+0x123/0x790 [ 137.950350][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.950361][ T9533] RIP: 0033:0x7fbf24d9f559 [ 137.950369][ T9533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.950379][ T9533] RSP: 002b:00007fbf25b91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.950389][ T9533] RAX: ffffffffffffffda RBX: 00007fbf25025fa0 RCX: 00007fbf24d9f559 [ 137.950397][ T9533] RDX: 0000000000101c42 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 137.950403][ T9533] RBP: 00007fbf25b91090 R08: 0000000000000000 R09: 0000000000000000 [ 137.950410][ T9533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.950417][ T9533] R13: 00007fbf25026038 R14: 00007fbf25025fa0 R15: 00007ffe644dbe68 [ 137.950427][ T9533] [ 137.950431][ T9533] [ 137.950433][ T9533] Allocated by task 9462: [ 137.950439][ T9533] kasan_save_stack+0x30/0x50 [ 137.950452][ T9533] kasan_save_track+0x14/0x30 [ 137.950465][ T9533] __kasan_slab_alloc+0x89/0x90 [ 137.950478][ T9533] kmem_cache_alloc_noprof+0x269/0x6a0 [ 137.950490][ T9533] jffs2_scan_make_ino_cache+0x86/0x180 [ 137.950505][ T9533] jffs2_sum_scan_sumnode+0x62c/0x1e30 [ 137.950521][ T9533] jffs2_scan_medium+0x17d1/0x59b0 [ 137.950536][ T9533] jffs2_do_mount_fs+0x8a0/0x22f0 [ 137.950551][ T9533] jffs2_do_fill_super+0x3d4/0xa50 [ 137.950560][ T9533] jffs2_fill_super+0x283/0x370 [ 137.950569][ T9533] mtd_get_sb+0x2f0/0x4d0 [ 137.950593][ T9533] get_tree_mtd+0x6f9/0x8a0 [ 137.950607][ T9533] vfs_get_tree+0x92/0x320 [ 137.950616][ T9533] path_mount+0x7d0/0x2850 [ 137.950626][ T9533] __x64_sys_mount+0x293/0x310 [ 137.950636][ T9533] do_syscall_64+0x123/0x790 [ 137.950645][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.950655][ T9533] [ 137.950657][ T9533] Freed by task 6654: [ 137.950662][ T9533] kasan_save_stack+0x30/0x50 [ 137.950674][ T9533] kasan_save_track+0x14/0x30 [ 137.950686][ T9533] kasan_save_free_info+0x3b/0x70 [ 137.950696][ T9533] __kasan_slab_free+0x5f/0x80 [ 137.950708][ T9533] kmem_cache_free+0x127/0x6c0 [ 137.950718][ T9533] jffs2_free_ino_caches+0xf7/0x1c0 [ 137.950729][ T9533] jffs2_put_super+0x68/0x1b0 [ 137.950739][ T9533] generic_shutdown_super+0x167/0x360 [ 137.950749][ T9533] kill_mtd_super+0x1d/0x80 [ 137.950764][ T9533] jffs2_kill_sb+0x7c/0xb0 [ 137.950772][ T9533] deactivate_locked_super+0xbd/0x130 [ 137.950784][ T9533] deactivate_super+0xea/0x110 [ 137.950795][ T9533] cleanup_mnt+0xb7/0x160 [ 137.950806][ T9533] task_work_run+0x150/0x240 [ 137.950816][ T9533] exit_to_user_mode_loop+0x1d8/0x700 [ 137.950833][ T9533] do_syscall_64+0x661/0x790 [ 137.950842][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.950851][ T9533] [ 137.950854][ T9533] The buggy address belongs to the object at ffff888037cf7d00 [ 137.950854][ T9533] which belongs to the cache jffs2_inode_cache of size 48 [ 137.950862][ T9533] The buggy address is located 40 bytes inside of [ 137.950862][ T9533] freed 48-byte region [ffff888037cf7d00, ffff888037cf7d30) [ 137.950871][ T9533] [ 137.950875][ T9533] The buggy address belongs to the physical page: [ 137.950880][ T9533] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37cf7 [ 137.950890][ T9533] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 137.950899][ T9533] page_type: f5(slab) [ 137.950908][ T9533] raw: 00fff00000000000 ffff888024025540 dead000000000100 dead000000000122 [ 137.950918][ T9533] raw: 0000000000000000 0000000200400040 00000000f5000000 0000000000000000 [ 137.950926][ T9533] page dumped because: kasan: bad access detected [ 137.950934][ T9533] page_owner tracks the page as allocated [ 137.950939][ T9533] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7444, tgid 7443 (syz.5.418), ts 83177727076 [ 137.950965][ T9533] post_alloc_hook+0xfd/0x120 [ 137.950991][ T9533] get_page_from_freelist+0x1113/0x35e0 [ 137.951004][ T9533] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 137.951014][ T9533] new_slab+0xb1/0x6d0 [ 137.951023][ T9533] refill_objects+0xe3/0x410 [ 137.951032][ T9533] __pcs_replace_empty_main+0x35e/0x650 [ 137.951042][ T9533] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 137.951053][ T9533] jffs2_scan_make_ino_cache+0x86/0x180 [ 137.951068][ T9533] jffs2_scan_medium+0x4baa/0x59b0 [ 137.951083][ T9533] jffs2_do_mount_fs+0x8a0/0x22f0 [ 137.951098][ T9533] jffs2_do_fill_super+0x3d4/0xa50 [ 137.951107][ T9533] jffs2_fill_super+0x283/0x370 [ 137.951117][ T9533] mtd_get_sb+0x2f0/0x4d0 [ 137.951131][ T9533] get_tree_mtd+0x6f9/0x8a0 [ 137.951145][ T9533] vfs_get_tree+0x92/0x320 [ 137.951154][ T9533] path_mount+0x7d0/0x2850 [ 137.951164][ T9533] page last free pid 0 tgid 0 ts 83026176539 stack trace: [ 137.951171][ T9533] __free_frozen_pages+0x7b4/0x1110 [ 137.951186][ T9533] tlb_remove_table_rcu+0x2cf/0x380 [ 137.951200][ T9533] rcu_core+0x5f0/0x1220 [ 137.951215][ T9533] handle_softirqs+0x216/0xa20 [ 137.951225][ T9533] __irq_exit_rcu+0x178/0x220 [ 137.951234][ T9533] irq_exit_rcu+0x9/0x30 [ 137.951243][ T9533] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 137.951259][ T9533] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 137.951270][ T9533] [ 137.951272][ T9533] Memory state around the buggy address: [ 137.951277][ T9533] ffff888037cf7c00: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 137.951284][ T9533] ffff888037cf7c80: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 137.951291][ T9533] >ffff888037cf7d00: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 137.951296][ T9533] ^ [ 137.951302][ T9533] ffff888037cf7d80: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 137.951309][ T9533] ffff888037cf7e00: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 137.951314][ T9533] ================================================================== [ 137.951321][ T9533] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 138.317714][ T9533] CPU: 0 UID: 0 PID: 9533 Comm: syz.9.940 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 138.322118][ T9533] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 138.324530][ T9533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.328743][ T9533] Call Trace: [ 138.330200][ T9533] [ 138.331477][ T9533] dump_stack_lvl+0x100/0x190 [ 138.333508][ T9533] vpanic+0x553/0x970 [ 138.335249][ T9533] ? __pfx_vpanic+0x10/0x10 [ 138.336959][ T9533] ? __pfx_vprintk_emit+0x10/0x10 [ 138.338671][ T9533] ? jffs2_xattr_delete_inode+0x112/0x130 [ 138.340547][ T9533] panic+0xd1/0xe0 [ 138.341918][ T9533] ? __pfx_panic+0x10/0x10 [ 138.343789][ T9533] ? jffs2_xattr_delete_inode+0x112/0x130 [ 138.346207][ T9533] check_panic_on_warn.cold+0x19/0x34 [ 138.348199][ T9533] end_report.part.0+0x3a/0x90 [ 138.349906][ T9533] kasan_report.cold+0xe/0x18 [ 138.351434][ T9533] ? jffs2_xattr_delete_inode+0x112/0x130 [ 138.353517][ T9533] jffs2_xattr_delete_inode+0x112/0x130 [ 138.355738][ T9533] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 138.358046][ T9533] jffs2_do_clear_inode+0x50/0x470 [ 138.360161][ T9533] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 138.361904][ T9533] evict+0x3c2/0xad0 [ 138.363130][ T9533] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 138.365669][ T9533] ? __pfx_evict+0x10/0x10 [ 138.367564][ T9533] ? lock_acquire+0x1d1/0x380 [ 138.369306][ T9533] ? iput.part.0+0x981/0x1050 [ 138.370817][ T9533] iput.part.0+0x989/0x1050 [ 138.372309][ T9533] iput+0x30/0x40 [ 138.373480][ T9533] jffs2_new_inode+0xa99/0xcf0 [ 138.375000][ T9533] ? __pfx_jffs2_new_inode+0x10/0x10 [ 138.376703][ T9533] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 138.378585][ T9533] ? jffs2_create+0x27/0x390 [ 138.380049][ T9533] jffs2_create+0x94/0x390 [ 138.381467][ T9533] ? __pfx_jffs2_create+0x10/0x10 [ 138.383425][ T9533] lookup_open+0xd60/0x1940 [ 138.385463][ T9533] path_openat+0xe75/0x23f0 [ 138.387371][ T9533] ? __pfx_path_openat+0x10/0x10 [ 138.389553][ T9533] do_file_open+0x20e/0x430 [ 138.391477][ T9533] ? __pfx_do_file_open+0x10/0x10 [ 138.393713][ T9533] ? _raw_spin_unlock+0x28/0x50 [ 138.395893][ T9533] ? alloc_fd+0x471/0x7a0 [ 138.397804][ T9533] do_sys_openat2+0x163/0x1d0 [ 138.399783][ T9533] ? __pfx_do_sys_openat2+0x10/0x10 [ 138.402095][ T9533] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.404633][ T9533] ? __fget_files+0x21f/0x3d0 [ 138.406712][ T9533] __x64_sys_openat+0x12d/0x210 [ 138.408532][ T9533] ? __pfx___x64_sys_openat+0x10/0x10 [ 138.410269][ T9533] ? ksys_write+0x1ac/0x250 [ 138.411698][ T9533] do_syscall_64+0x123/0x790 [ 138.413155][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.415023][ T9533] RIP: 0033:0x7fbf24d9f559 [ 138.416541][ T9533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.424349][ T9533] RSP: 002b:00007fbf25b91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.427816][ T9533] RAX: ffffffffffffffda RBX: 00007fbf25025fa0 RCX: 00007fbf24d9f559 [ 138.430677][ T9533] RDX: 0000000000101c42 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 138.433132][ T9533] RBP: 00007fbf25b91090 R08: 0000000000000000 R09: 0000000000000000 [ 138.435916][ T9533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.439279][ T9533] R13: 00007fbf25026038 R14: 00007fbf25025fa0 R15: 00007ffe644dbe68 [ 138.442461][ T9533] [ 138.444410][ T9533] Kernel Offset: disabled [ 138.446079][ T9533] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:43:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85bf56c5 RDI=ffffffff9cf2f280 RBP=ffffffff9cf2f240 RSP=ffffc9000799eee0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000079 R14=0000000000000008 R15=ffffc9000799f1f8 RIP=ffffffff85bf56ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbf25b916c0 ffffffff 00c00000 GS =0000 ffff8880d4498000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe011aebe0 CR3=00000000574d4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001fffffc Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf25b91050 0000003000000010 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe644dc356 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe644dc356 00007ffe644dc35c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf24e3714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf24e37184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf24e372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf24e37176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73697664616d2065 74616c75706f7000 757a253d657a6973 2070253d72747000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 564c534144480540 51444950554a5500 505f0018405f4c56 0555001857515500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf24ff95f8 00007fbf24ff95c8 00007fbf24ff9600 00007fbf24ff95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 000000000000024c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff888020692580 RSI=ffffffff81b83e9e RDI=ffff888020692580 RBP=0000000000000001 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000 RIP=ffffffff81b83e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4598000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000fd96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca10e14d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca10e14d6 00007ffca10e14dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e7983714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e79837184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e798372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e79837176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000342e63 64755f796d6d7564 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865000a64657275 6769666e6f63203a 7463656e6e6f635f 6273755f7a797300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40000a41405750 424c434b4a46051f 5146404b4b4a465f 4756505f5f5c5600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e799f95f8 00007f9e799f95c8 00007f9e799f9600 00007f9e799f95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000003 RCX=ffffffff82019635 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc90000157cd8 RSP=ffffc90000157bb8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a334120 R12=ffff88806a23dac0 R13=ffffed100d447b59 R14=ffff88806a23dac8 R15=0000000000000001 RIP=ffffffff820e25b0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4698000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9e7a55da08 CR3=000000002c682000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f73d500351f61c3 8ed7150a53409cd5 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dad9fa6da5ae6218 034e20ea29bfb4b4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 de162c9939db6968 fe868eed3ce2f6cc ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 366d175aa579d7f3 4859a77c26110891 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ba00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 54de233554e07e42 1e0000003c000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 54e01ff654eaf350 f600800154eb8cf1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000181bdc2000000 96000000a2000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4400000000000000 54eb0372ea000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c3ea6ddbe2083651 6889adbe796d812e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4992f5d35c01107a 3ab7e464e1d3ad7f ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff92e7f9600 00007ff92e7f95e0 00007ff92e7f95e8 00007ff92e7f9618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff92e7f95f8 00007ff92e7f95c8 00007ff92e7f9600 00007ff92e7f95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000c780b RBX=ffff8880206fa580 RCX=ffffffff8bea6325 RDX=0000000000000001 RSI=ffffffff8e61da07 RDI=ffffffff8c831380 RBP=ffffed10040df4b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d466825 R10=ffff88806a33412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bea47bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4798000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9e79a27dac CR3=0000000026c56000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 676e697a65657266 5f666c65732e7265 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffced0cd7b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffced0cd7b6 00007ffced0cd7bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff92e63714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff92e637184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff92e6372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff92e637176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000