last executing test programs: 6m24.319383187s ago: executing program 3 (id=214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x48090) 6m24.310488708s ago: executing program 3 (id=216): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000340)=@phonet={0x23, 0x1, 0x8}, 0x80, 0x0}, 0x0) 6m24.23627921s ago: executing program 3 (id=218): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000600)={&(0x7f0000000500)}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000180)=0x1000, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xfffff5d4}}, './file0\x00'}) ioctl$TIOCSTI(r4, 0x5412, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101000006000000"], 0x60}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="5500000020007fafb73ea30e1d5fa124c6a305a356812d13b2a4a2719302000000030b43026c26040000000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100fbe4e583de0dd7d83104000000fda542e718f94b929ade02dc2d9f5aa55782ee58", 0x55}], 0x200000000000008c}, 0x20048000) 6m23.133932282s ago: executing program 3 (id=222): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000190000)={0x0, 0x0, &(0x7f0000190040)={&(0x7f0000180000)=ANY=[@ANYBLOB="300e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000e80d08001c0001000000000000000000000000000000000000000000e2"], 0xe30}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) link(0x0, 0x0) open(&(0x7f0000000100)='./proc\x00', 0x2c2140, 0x22) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x20, 0x41, 0x107, 0xfffffffa, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 6m22.93901766s ago: executing program 3 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) r1 = socket(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd6c, 0x25dfdbfe, {{0x12}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r2, r2) write(r0, &(0x7f00000002c0)='tcp 2', 0x5) 6m21.617599275s ago: executing program 3 (id=229): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) mkdir(&(0x7f0000000080)='./cgroup/../file0\x00', 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x2, 0x36, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001300), 0x42, 0x0) read$FUSE(r3, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f0000000480)={0x18, 0x0, r4, {0x7}}, 0x18) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) syz_fuse_handle_req(r3, &(0x7f0000002100)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0xfffffffffffffffe, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x404, r5, &(0x7f0000000180)=']', 0x1, 0x2, 0x0, 0x0, r5}]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='+r'], 0x1e) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000d00)={'syz_tun\x00', 0x1003}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000500)={0x0, 'syz_tun\x00', {0x1}}) 6m6.18148591s ago: executing program 32 (id=229): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) mkdir(&(0x7f0000000080)='./cgroup/../file0\x00', 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x2, 0x36, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001300), 0x42, 0x0) read$FUSE(r3, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f0000000480)={0x18, 0x0, r4, {0x7}}, 0x18) syz_fuse_handle_req(r3, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339bc2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebc631d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c0100000000000000a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) syz_fuse_handle_req(r3, &(0x7f0000002100)="6be00ff09321e32a7e0f1d45fb750f1ec1e15be572a7d646754b1e1cea02c1a06d0d9b86514e6d2afce29df5f1c8c9d7fe087f7116a341c9cbd7e536063d42367f79ccea05e0fcf72d19ca8c65612a23cc447ab5982f306298cdfc40a20a86edfb26c58e1491cae8751acfc1a22867f2c866f123215209101ec37c2734d97fb4612d3fcefd3a3c824ace75498471f1e35363631e29cc05b89e0f7c26948edbe418596cbc3c686d37d24c4e049f35e99d6b6de3470b342a4fd59bf1012aa8d0238f32d7f7702e0c293dcf71b3d4b2dc6c6527b070c12a5ae65027998d74526c4ad93283708c59afc157dd299b378f85e159970e6d3a248022714873dd40b54f4418012650d564b568730769a5f27fd458d5f535672fddbd105e2423a85bfdfda463d3cd154ea1185276b3c400ccc39953ef1af942faeff3095d9cdd9bc03374408464d4f85ab3c1fd2965b5e0fbd95a396baf089d5792b3ecc98c536c19b4d3cdf8cb499072f3491f0cf76b5f42ea959c5366ab26f2b7e2539e999d41d6bc583ba13a3f59fc4d3b37eb96374ffc22d53e79198778092656323188c7a052e0d9587a6b80cafa69a0ad770d514e5c9edc0b8556732c04549cc9f4d14299e75514d80b6e026a0f8daea3ff396aff507f89bf2ca4c48d0413f6a37c8ef193dbe07ab52e7487f4e115caa83153f729d4659f51e27939429c41a5e5152eb48e109e81baa49ebf076bb13ebdd031a0c077b18c0db18a085d5b3262cb50649b4e8fecf6b306a0430a8f89e2ff7fda3ca48fb8e2b1aad0999072f20c98466cc868970e53d6860b8fc76fa3b40eb40ab92863469346d5a6860c0297dfa94d908f1168ba2ac5197a9f9cbf3abc32fce7d14ee228d395ae53b1bc374939be6b2a135661048a02aaeeedfc755fe1df353b8e8e0aa093574321ab55fc3d16060ed0cd3e8c3f5954b7ad048d58061e834cfb142d027c03a69df52118f92acc387a734df458e28cd8324ae588bdcf3c12e4c492e4c14e47dc3efc9123bc189dcc677b619fd8cf34ebed6b73c2c740964072f1d87505ccc4ce189293b0c1e6cd68b8ad7a8cb8b049b8aa4f3675ab09787732643353c4f93cec2787e5ca3b96011459c133cb6947d51c408981798b675b9f9bc2186f016b585bdbb6100434e97033261967b1f6fc02bbe32e4125e922b364757008fff71df0ac6e9479caebefc5255727e8f9deb38bac48fcf65b70b7ff53b1b73682903d1300ba4fe2cf7a7c4b1a561f902d4bdfcc37697c68ff5e4f9bb0722f2be019fa57791da330e8ec69683e7b12d64ec27fe017bb18190609be3a406cc4b1c818e778c404c0e35b1f0cf2e8109f672ee2d649fb71e686930c434ad92fe5ff0300007fdf3fdd71d7409f23daab810569a01a8ae9167e558e71f84f88639ecb5ec1ae0eae0474e37ce81d73c7c93a912a56de243e39995c8d1a6194457509fbd62b94bcce0f1e7b3aca47d36c4874fd1aa8d8d1475a2af2f457ea39004dc3c1834bf20701c00416858c810bd72e8c55f4507c2187d062abf119fe91a1871e423c16964de5351c70dd668f08c99329fe189d78d7944a2e9ce47b2aad9657f8e860ab6bc03c365059528dd28350b85806c56e87f019a0fe5a71595c7ccbf493c41fe52e907708020cdaf26be8e21d3a97c2ef6dd1de85ac6a9f8ba0771d48353b399555c5b6be41241c9de86888d0fcd5198343ad913fa35da296dc3eeecfe2ee4a56b56bf84e23a3bddc4601b504433b339468f029cd2dd9e637217e5816391010093471cd0ac2d352cb88ff5e5930dd589d1b03c5f408023c8207a1bfc2de6794a65985c1345ab256b8e7990fb8c3fe54b9b76dee19f4a7380a0659b730db58bf69efb51044eb4eaf0df5b7a07baf629a537fdef46c33c6dec622c27dc806025bc0144a3a1a64136cd8e7674a4e01aafaec604ef8356b921be7df063a2ec67dc312d964ff1c30f8d77b7c3e06588ac351a8818701c5b7c9e4b9e9721e12d0bc0731c7e2ccd0b1028e5ac990a3e45c44ba1ce8ea73a54927f6fda6cf5e52253a8ee0df194073fe76568f51c6cf45312f1aec20010db2b59d95d39c3b1a40067e6657964368e12173d71fe2f7950e5f0f3a2923ecd474b623010d77f674e52f23552eece20dccfe15c64fa05ffa6bec88d28fea4b2de624c8dd1106c86b220af9f53f15e00785d764224975efb15f290c4a6af055f7a8baeebe9903c0c9f48b53dc423997adcb8acbe7d82de105383644f9d9f3d8cc8f9a79bfa75c7e1a3f470d2448612ee26950b0affc39e98bb75a30583ae55383d376f22dce6c2cdc544ad8d68fa82e5d16b0a65c63ba4c4fae2ce1269ce321be2a0f2550c2b47c8cca190d0e44af824705dc3d5565c4c0a1ab68c50d83534fb32e7ba31c8dec6a17c127985a516ace1f9016278e85056f6288513ed706b873646e0fe3f1803ce71dc72d91da85ad5d385e0b072b6857ecf36746cceced48b0e4663b92cc349baeec28d27ff568ba9bf4d68191166cf65a13af7cf213c2ffca68b9379ea167c7bda82fa7261e2754a00a6f0b4065c57a8f9868f8247d39eca71faae27afbff8864bf934e746300d5e9a31a4b78ca059bb9c40d30bfe745336264daa57002085686f73f48474e2d4bc1e38e62ed4547a6bbd74b1d9fab3f4b2622eb6c8d32b79ef9ab691fefd7b1bfa787de85ccaa14687be5a0529f928dfd974752bde8b063bc717d2a07eb4a1651f465aa78be32457955f83b2cb4608e22a4ef7bccba0378274289a7adc38521cd8d691741e87b03f536b9196c2284baa062038a22320e6d8c3f9e29051450b16bb7909566e75e6ebe423fa88b7f395c0dae22f027efc014db76ffc4244dfeb4d014809569caed95c43f92486c8d9cde522d403efe788fbc3b54ac39e90bd2f2dc3f3d66308d2df22d9602da5ec2133f296252bf0da014020194cf9ee65e7b137c5488401eba99def61e721fa3889d86ecaa5d5a3e4c8642fc0f9ef43186edd427402f63f06bbfa26850f2e4c71bd6387978a8085740fe4b1012dde14413dfc12052acf9508fd6a8a64f59d5756a59c806b64f42cc4466aed5327071f32fe2cb24aa62d21da4c1de44c2aab46f01c53eef1d83002437668fc494953f4951fcc1bc050e402b7cb73d61b3fae4d806fe6b745160df0a6fb6e830d18b04f142b22de9fe78b4307f95c9badbeeca0a2cb134d229e19fbab6a913ea4a0c59b59ac4e9de55b4fe2d7d5585d57c21678931d151038442fc388557da00dc01bae0c7df06ac72be56668cfd942c9edcfe77c1128a6640ad4d4a210d69d94b5e306b3848c09c61c05ec638096ceff5fc156bd34cc3c461bbc4d3ea0eabeabf46459f98f15821e181dfec54b87c9c10bf1ae64449ed9e90fa660191d38760117f9a0ae6422ad983e8b348bc0579dba87ad505c24ccb683ffd8f734b8e5f0c65e3a749d86a2fb1aad19abb96490167993fa130db74152d8984084220ad17653c01f3fbbd2e1000d3ace6ed697f0d4a9bdfb2dff49148e8def07acd5e3355370d1c19d3afb7bd12fc30e6acb4841f641672dda483d0afc53150369ce1e2523b3706f5b65542032838d45a5dedfc2369e385390d1628e78dced081b931f67dc75e23cf2b0f529fde6c9c84e4b3894c11b9f56ddc65827f68b0fde08875fa8ad3cac7e212c7727d41f6d51434a890ccac19f3e9b0a594556fbf51e84e874de4e28a3b60e569871dd844f6248ec180b3741f2ab3d23b76448562207f577b10f4d14949a926b837252cdcf62af32e83001d63ebde5c1d266c8d2b43f5545dbf070eaa47613481d6c920f1801b490d2a847d7e85872fe75f56d90f050fe741d94511058d71271daf9c565ced757402c315685820c80ed1f6a889a8db0326ecb58f1f287d24c5beb5b19b94d8400aa406daa591e292832c78be74613ffc2a12635951d487650c864ef55927036edb5ec02614e5eb75f67b933220ac39f891c37cc0b7fe23ce8b0ad8e5ec9c0efbfd706f5730c142fbd5297ac7f03f4ca6f49b9cba1e9cbee6b08e936c7ee1642e5f1e3eb566c294d10fc4fb45a7239590cbdebb7a16b972a983748e73aa23be7f66a30c22610456445234bb8ba11b412eaae69b808f76d90b7bb14223b644b8860c550f3c92ae47c06a38429d66da2a414c01985d4b7c935717a4dec2cd4e89092d5dc9aefd0ac0b23481459a2adcb654063743b667c3c3241f203f81385aeef164a0be7655d02074b6710b4e2c50c3ee0747892327e8f22aaf51fccf2b715b24c02c6690389afe83e6128a1ef199234c8c9803124089382c6bed5b296945fcfa937313caf39176b741809c7c7fde30468e8875266315d9e733258b9305cd92276211d0c75c97b103c31c52c0c4dd17dc5931c5a7644ddb15ab8de78cc32125f85b78ba00d09079626a813e589dce18010f427079ec6cb74a2752c7247e7b7df37dc701245e9cf37fbfac5b1c427ba477b15c21d48084d38253a4d49af73d9f25e23333ac3a84e4b671fd31abd4b32441fb07dfe30659915a88ddb684933bee5ee9dccd45763f6544fdacfa4d821f36d7907a42ab9db72b231cbc9e1ddf2000441586eab8d59277955f9665c5e358da456d759490bf9f79462ced96372b237ab61d8b48a78612c64f48d5bd89fb6e67b0818033743b7ffb3305bcdbab0f71b46d5ab61d8190c5106813ca4435386e55e43c6cb925cf81039ed5f11df2d96c53a448519ede7e83dee8b82acd143ce0d1b91318a0f0efdabb77c178cdee559c1d2181600b6b3847e05f41234c5bee021d4f0bbed10cd557f686e8b9769780a13df35fd069855fd8e2aec5bb84e8d0b7740fb7fa88b823826b7e8a979148b95177a2e720b45296c280a9abce6bc5d943e394c07eed5148f86a94450569af8c38e184603abc46a59b2ba01e84225da828ccb93ca557e4ffe9e8e8b98c1fa471409f9d7b9d9da4b0f4fb7d58d7474039204faa2ab1067a2eaf9df247a2ba1b099cdfe79a7db1273e0660e37f6e8afc125564c6b8b5e893231a6addf326988bd78578950e4b2f317ffb322fb44a570587c6c6baa59d6d844454e92f89534c7d902760b984fae30ff5eff5b90fe03f49429c5a5becd275c5c670ae8d39b5faf986970492e579a8d98aed5da2894c96bf8779e9aaba84724bf471734b4d9d4db6a0ebfcb1c31f88c59d4b0f38078435f575b0e7cc7cd5f6cc9a39bf16d3514e89b562ded72187c1e550d4852e9bdc585525d02ed1d3adc819a072d82c37935b2fe6ff3c3f0c7b7fbee2c25ad515835d067ea53af1c6d0b4a9b35de653f2e5a8a1d9261c49813ecab580f368a79515a8621f16b750fa9d711d2884764e222c723e7dd94532de5d5d40fe12660fef784d8ecf2ededbef7a61b881cf61e8c035f31d3801b34ea385fb5fd3895e6789ed741aab0e5d091050f7cde8aa1f4feb53683626870adc4190554316bcea49c6ee182fd66a6ccd2e198ba2ae6f3621a6a6186a6cbd5378e6347afbd88cbff663f73ff568ed47861219eee3598520625f64f7a6303be64361d705021104d9871592d28524f5cf391e7d445746a0e9e42924760e62c955301e1ab3744f79217841a1668a6a871bf2efc278b0bf0b4b46a769caadf243f1af31df19006080d11a4f84ee4932034f48fdde875415d949438e8c1bdea8bb9899c230561482960cac0e77ce78584e35d3430af7ed37ec71f33f265d62b397b99f71aeef08e0a92e221d8ef14c82616d06b1ccafa63969a7ab145928d9c7b1b23e16acc00754ac707f6ce3939b4604baf0f3fa69fa48bb7218f3a992e65a4aabd8a6adf4a7c1e32877273393a1567632348d480a84f3b4ae31eb810a22ccb652064be040c9a90e52b59031a22abfd1840b2ecec89d16426ab31dfb83177ae08255d1424a6ddf8bb5d5adb66a7e6cf7f68be0ce5b4a56fa3463da621062ac85af5334018c3a473c5af9c5686eb9abbd24420293df7ae5fd075b2d3b9aec226e1a016c989b029d1daed5933d285227dbedab33a32b0d71d4cb1fb79c3a8e342fb4126785a3259f241150c7c381918f8f88146fb8fcf14d42ace0fd5c0084db3726575b04ef47c2bd1a0ccf977c8232e1688d4d39c88f7ab8d565b578bed84bbfa17982308a9269933ebd2f7260a67e01a3790fca5673643aff626514846dc1634e3c2fbdb0eaedb163072d9c0bb2fc129aa57618ca1d2b37324aa49972117b9ca81092eb89089659c39eaa380fd950aa914181ac98c1990af713eb834fdb2b731f2791292e9b2774aaf3a091152e25d7ea92a6c80f3217fedba12816ec910677d3381b361272074143fb51f391e6cd1953dd6cbfa33ba97e5d019fddd3da76fe350b767c8eb706a5f46a536c3103da6af42c1a5a7cf488be7f0d3a8ae4598d0d1f4f8339a63c124a5ce1b18a225f840368d390acddeac589093a753ed2e45ae4bfa62f222d4c6a6fbaee8163e76a0bf6291619d3b4af530d03c1769a456ec52491996c6739290f4cd325e9a3c1f0db9b079e5809859f6bb2d6cc494a500862179b65aa65ded80971e60dd9338dddbbf736924626aae8d65fa4a32e8affbf49b5b20c546520aac759594fd996e5f573e8a359dc4192c2723e05d7f8d212d78a03e9a7ee41b3ed6d098964f77e1e96e0e6641222fa247757998d9e9d33787079d1b0913f9b6fd0163f7603d4bbb7430738ab618026ba0526b5722f7c5b155e9c20209ebdac884d4afc34ee32420892acfa0a63d93e1aa4fa71581166d783abe45cbfc66f65c75b803d932dc3a40851508499001dde84fd3646ae3743c1edcfe433579cd41ce625262082cea3e4f87ea17f26c2390e9c134972cbe8291c500ad925f896aeb4d652cc01e397ff9eec6c4ab32432f61f90ad6f24fc2f24c47d039e90cbdbdf97ea2c0b1ea6562c1ab651e46adab86814e14e9196366e6da5f16c743baa0d31a1b14200451df59b639dbf0ec8976e31b41462268a66d3fb55b0fb344a587890d92d7df87244b517276d6cef787cecdff92e2293d0d2e51228bba0ba3ba9e57483147727a90ab99b07498a1a9c46cd32e0af493e4c092e515ee9541c678c3566092e62a14a566e225741102071811d3306cb229b8c08da4119a565f9a37c06a983ceef668e7e97df595bdfbb43b0350fc823bcb53630508b3e7a42ff2ad5a8bbe83811c35b78578fa4842122ac76be6e7cd68a9d3ec8c6a3b83edc1f545a1f2a74ce5212f02ba85e104c0e1d21e4f77a7a6a0253fee2d486f65abc1d15e483b7fa87633e1c02e6f5aecdb779dd63af36c457905b2d4bf2c19cd4a4d2475245c45f3ef767654be5c17aa9b3e20f8019d356324baf677e4604e736c2a8b289874accbcb2ba300f063fae2c7d447f9a60daa87592275e501cbe880e7b46230659a7d62fc069ba7bbbbb71cd5ece453a692e2a3620cc8ccab581f4619963b1823c401b84092580dfcba08f63c14cef7963bf6af2d550e2fd43dc2ce1a5079e9018fe1a6ade4496b17f31dba644022c1bec7f7a345f2f02fe4eae1fcf5fb377fbf33c4774843cdbf1357741b0a9be5b403345db08d6ce70e4c5a18cd8725364b4096b69863964dc596cc115105043f6d80603873494c177b886299ca479d1c12a3547ff136a203282df0bcda49100de02b368ea5124385a03280d15319c5a5dd5e150b6eb19c969ca5f3c3368bdceef985c1ee957d5a61b3b9eb1c25e40b280fcec638726f78747dc2944e052c184cde480a6db7a2cd7b75f34cabcb2ca0e105b7af8c5d480b1cdb47d3675daf2e621db6e6e8924c157a028e860adde429979536c0ae06d3665e98166181eb47061fb20b4f0547daa938c54db21518a980ca5670a3dede7eb479497156b4998d11e838b6f112d3dfeae167bc3a8ed7c617fac11907094f25b0939bb9956f7aaeafbfa452ed4ec91b2d1450a43946096cd104a90a73d733da92125de061de39cf8e3d582e80f368b22c66cb69b86677a0af3bffc828ad1769a223f0f98e0857b60bc82f739fd6bbbc9a150830e1e850fa3bbd587bd9ca0fc157fb0b292cc91365348d01c435e2641885891306e177a108712290ec2d1ed3c6ac6d1c49aaffed07b6196787667cd8a7af66a1b631f9e9c6fd668509b7a2e3fb848d99e54e298742ca771bf913e50552faefdc0761a0b1aac3a38669fcead818c26a385ea630960c151199226c23d2b1c9ee42f864d4fe05d22eb826a80ad0738daa292938a4dcfcf18a60642b2b27f0e4998b0569e79c5dff424dd324641eea7b929d13735754b4ba6ba1540bba6b4bee8d3ee3c8eb8900e9c7e36854958f5b632b111abd2f722e2bc8aae4f112f488d8c1e68ba32fe88a39773ed81027a14cfb877ece8772dab7d360fab7cfdbe31a69d218ebdb7b0e42fd8b775348171f0f8a59386fa4fce2fcefefc09cc99a477cb856376541ea5048ab8fdda87ace560a565b2fef28327ca537eea30114a0581fee17e58ed375377a23d8ccbbf757a38aaac794a2630c42f9d4ed91cb886cb5277134b02ab691434ce897c5310472a691f99785cfda982c8e99bd2958589258228a7624137acc14a13414d06f6aee835b3637a0e7367a010652a076b2945fbdadeef39d65d503c18dddf7320fe07873331dcfd16e7cc786cac00d0934cbc6b024547e11132e413b7e5c4f926202128dd1aa76a39065a4228f109bc3327dac7028843868c32fc5d902e882494eb3cf81a90212434d404cbcfa72722e3ffae4079c2e6333a94d5f38e2a2948a01c10ef1a3adf58bae5b5629be02a1de64a201223c23eafd61a5be59c40188fa3463fd64e98f0646a9338bb9ee85f3ae5eabe370727121b4d8559fd32be127a6dbae3c1a0a43ef1173973b3b3332434c6c92b3144d9fb308768ac4067eb72d597b85882e0d228c6dece3da0677d9fa6c0b13788b3c2b0c9e67377ba0ada12aa956672c58f48fa6cfdf0357d3cacaabac46dc438632b1e7edd2e120310e7cd7aa2e55884b422b88e8eb9f5c468c04f9f045f4e5db6e12e9d7330f3e625a7e4676f61f93ef729e8cdcc743c44d409ff5720e85d4d447cfed7f187563ba04add8b27b4d5e1ffdd2bd61a167fcb2da8d58e67479ebc076329d27bd24ecaabc4cb05552a409ce732ecb86a6f0a213e35e53f895bc3c4ae020ece95499d4670375f61a32fa215c956734f5aa8127ec859cac7dfb5768864dbb7591f9d91c05e365c4dbbe864d207bf9eff04c4b3047b68cebef76a7915673dc5ccafceea57e38beb9a69473a1b2ae96c812ad737db0f66e87ca2305dcf4d66369e1afd74412a207a7a2d6d97982e1874afbb6a9b420d88c542bcdf6cf3c471c7535a3444ad20793876793ae8fce30fa468a50ef241a15ec0ea3229b1aafcc76eba39f8cd2a93f23ca2b04c8ab87c4f5a8a9a1db2bbcfc17a7aedf9877b669f8c2a05783586581656064dcfd19200a8f60c4a582766a0ca5148b56cafafc0ef1601336b5398a90d1bf68c6ecfd1ede4613fb9474bba76ac945f51129543e22f14fdea4e83c206032f0b5faa83a1de556d48d5f08bc53879f492897df7a59e0ddd00825706a2ac507e5fb31bad911885ffeb2d2368616786593f4c6a28de95edf2d993dab8412fa5b16eda075a934f46967fb1643085370da9d1e5895a5ddd6898429c85bdd41b28f58cc3e106ab683ecba03253b8122a8a5b6064eca49ebf4133c2351468cd01200332fca0a00c980262de8dcde7f7e145aefe3fa56b2dd6de3f2bd1514f5a2d143457a28bac927c248d4d89779835a83398fd54e7d53d7b2d1940fd12d7bc96e16b0fe15fbf16c3600b891b3bf6723303d01a73120734be1f27d43b5d5c374d6e44f42e0df163d2797da5bb292fbc58f8ac2056dbcb85b31c81d56fad2d70625b1304c04a508d6ccbfce072279358cb065a50f4bdf8c81ddd2d5ecf2b2c2b1015051b465e5ff682c9e3f8160123334b82dfe5a751d8b5f441587bbe7bed1325338cae6a8c06101081a55d499efbf77714e43ac99ecc08965e152bc84faba1bd966f4c01879f24b451b8f3ebae04852de5efd441396a6a871f97ea3dc413174886d71748c8beac5e5d403887e818e335cfdffa9d76b5074a5dcf12ad7725cb83cde0174679c0961643606a03082c5ec01590d687ff5bf9f8b2c3a84bfdb9c25622adc66aeb7f0355efddd4ab9954e5455c2428ee4e5383888ab466bd5fe817eb6b794a555c0eea446287cce32d9efd960e58771ddfb8ee2b4133b79d8953c2ae959a5d6ce09448d50da61bf22268fd32dcd501fd47c6b72cf8f50159a7aeec6e220ca81fc64ff97014ea77b6f791ccf6625eba88f60d1fe699cb16636a9acc4067786c537623c699568112c2093663bfba92ddc1ffcfe93f247f90accc6002faa61f43e54c3fab5e04a6ea1c5415e31ab129f8c9f82c3e3191513a4af151b1d6ab45a2f0eeca83f0870bc40da6257b9ea1c6238171a754995137d4123f2a4888e73db901f70a044ee0dd8176defd5dd82d9fc5a1a0d79effaf86fdf0b88eabc338c353f5fb040fe34db18211b20f8a3e4589b212e913665506488f21c88f5aec85eb694134a557c95d9a6ab9efc089e5c9848e591e3387cc11ca66fb03ca713513b98ebc2f35befcf64792ef44411e0f75ee4da42dcadfffdf9eecb761bd5e89183881103c5019e1ef3f3d80ba27fb0e1897e925d4122fdf3b3b568cc8795adf98643e86409226f2c5ed87cf481ffcd6e21a2bf0bff07a98bed3be5328118c3cb43c05f1b740242b0855f71400dd155c888b627615488025f81fcc6f5628efaf081489683c6d259c33b591edf4c9a4bfc54802c93ffbba4baf2a5030af8882b7d53eae80720e36a15c6c210658cdffa162630ba5d0217fbbf44879a04d41c58befb8a271abf4460a2d768be38d22f832e3cfad91b90f1b576924c8cbda71bbe89c85c239fa02f69c25e5422c977d97a54954fd16b85970db963db2b132b057a0282aef92614a9148e2a1a1edfa5ec46ae8d662dabae8f8141ea30dfddac44573ff52c3f93d82b0245b03c6db05b540e614cc9e3f702467054d688a92dcc9123f71a064cc52730fc5ee94b2746c80688521cc1cdb0f9455d4875f4af4afdc67d2e389361e1328edad7594d4bc9beec8b935aa3e5e98652c934d14fd16da50d685717303186da715778856da54666448d648d32becd2d63a6503ac21e56317903d15465ac4d3765f7a05420811307f71c1dc55ce5a4cd21130487cb0065397785da5094d27fae505996c1d404399797ff61d40f2ed63fca51db673197cd158a6e9b9ee93bb37df8bbaf92f47493c81c65439d359d578244a7f83629f4323a182e68526d674f4b6b64908350253520a4e564fae27df523e9218ff84f55a7ca622fc2e46615edec9cc45c5a1b4c00c64038afdb165ad0ca3d8b66cea248e6a60a1c6d27e0dd2e5c7eec49fb8227a5266aedbc4fff982ffda402190548fb63fdeb67b3fb0894b11312d64e9f227cc4b614b3679f978e0f1b6bb7aaeb2461cd28a94b73dd55eef1d5a98d72b9d8750b2dfe3a3cec044e13a8700", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0xfffffffffffffffe, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x404, r5, &(0x7f0000000180)=']', 0x1, 0x2, 0x0, 0x0, r5}]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='+r'], 0x1e) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000d00)={'syz_tun\x00', 0x1003}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000500)={0x0, 'syz_tun\x00', {0x1}}) 3m57.576438932s ago: executing program 0 (id=1106): syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r0 = creat(&(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1ac) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', 0x0, 0x0, 0x0, 0x0) close(r4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', 0x0) r6 = io_uring_setup(0x37b0, &(0x7f00000003c0)={0x0, 0xf93a, 0x10000, 0x11, 0x27, 0x0, r0}) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r6, 0x17, &(0x7f0000000300)={0x0}, 0x1) 3m56.437602853s ago: executing program 0 (id=1121): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB="df92172938664857", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x174, 0x0, 0x9}]}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x143080, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc018aec0, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1}) write$FUSE_STATFS(r0, &(0x7f0000000200)={0x60, 0x0, r1, {{0xaf, 0x100, 0x6, 0xd1, 0xa0, 0x0, 0xffffffff, 0x9}}}, 0x60) ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f0000000300)={0x80}) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x80000009, 0xffffffff8888f9b5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4809ca8e114c6e67, 0x80000001}}, 0x50) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r10, 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x40, 0xff, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 3m55.951243918s ago: executing program 0 (id=1125): sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x2e88, &(0x7f0000000300)={0x0, 0xfffffffe, 0x2, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000030700000a14000000060a030400000000000000000a000005140000001100010000000000000000000100000aeae5cf3f6cb792e90a09981231c96a2c8691d2bf7d08239cf9b527b0ecd015be5fa68f556d2d27b36ed20482e633a78d99bdd8983cd730d70c42a11143703d0d9badddde7541b2e61a759cd5d795556f98fc9e3dc30b49e48a461e56a3"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r6 = getpid() mount(0x0, 0x0, &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') sched_setscheduler(r6, 0x2, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r6, &(0x7f0000000140)={0x38}, 0x38, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) lseek(r0, 0x851, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r8) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x20, r9, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) 3m55.556256194s ago: executing program 0 (id=1126): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) chdir(&(0x7f0000000100)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0', [{}, {0x20, 'syz\x00'}, {0x20, 'c\x83use?\x00\x00\x00\x00\x00\x00\x10\x99\x00\x00\x00\x00\x00\x00\x00\x00'}], 0xa, "83b3710d0a9a1919fa41a13af9f72c167f45d62005dbd8be92e47ac4676701531ed2c5d484bf3008dae13d96db424b9cf3ed955210a0f72087a0ce184c7574cfe74a5c75086ffb16a584a785c5bd72193b00a35876aec2c68ae42c971fbe2d90d717246fb85baf6fe11836b028798b25205e3925a3fade7b74f44979c7981c474044c8e1ff1a1b5929254200e1d74c389b4e635a150b1bbf06e77141db0ad289edee2a90bee9b29429bf242e91585b59872324dcf3b8772bf680b4531d1aca9f323ee7b8b8d754b906a504f27a5b3721149a48511baf1e2201637ed6fd7a060e02a9142f1f25ed53"}, 0x110) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/sched/preempt\x00', 0x2, 0x0) write(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 3m55.478087283s ago: executing program 0 (id=1127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x68a, 0x22) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) 3m54.988088604s ago: executing program 0 (id=1132): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000300)) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000fc0)={0x750, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x720, 0x8, 0x0, 0x1, [{0x418, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3f0, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x6}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2b8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x270, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x750}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) 3m54.952347049s ago: executing program 33 (id=1132): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000300)) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000fc0)={0x750, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x720, 0x8, 0x0, 0x1, [{0x418, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3f0, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x6}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2b8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x270, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x750}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) 2m11.072404618s ago: executing program 2 (id=1999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f00000004c0)={0x1a, 0x338, 0x1, 0x5, 0x70, 0xc, @random="9623fc4d3750"}, 0x10) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$fb(r3, &(0x7f0000000100)="732f64bd01d8958d", 0x8) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x19b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000440)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="38002394ca4d2114733624010072198de6fd6e357beeddb9a1570a4b6f120a59a29f5255f73cd050930227b51a74d064ec9fce432ae92633c9e977b5e53a7544e204819b1d52e0fe76a04eda63812f7f5cbeb1c02c0b2922f27acb", @ANYRES16=r12, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800050004000000"], 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) r13 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r13, 0x10c000) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, r8, 0x1, 0x20000002, 0x25dfdc01, {{}, {@val={0x8, 0x3, r10}, @void}}, [@key_params]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448c1}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44440}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r8, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x7b}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x84f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044}, 0x40010) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a0102000000000000000000000003090002007c797a320000000009000100730803aeaf000000"], 0x2c}}, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x11, 0x3, @tid=0xffffffffffffffff}, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 2m10.732840528s ago: executing program 2 (id=2001): r0 = syz_io_uring_setup(0x2b81, &(0x7f0000000400)={0x0, 0x7930, 0x10000, 0x3, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xf26, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000180)={0x13, 0x10, 0x7, {0x0, r5, 0x2}}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140500000000000000000000000000000a00ffffa0c6444f829e9257f564b66fe9fbb629d9a710e6e26367069545eb16022afeeddd32f97a5b99287dd8720f4a61927a0a1ca69dde138a3035ee1cd8ca5efcdba5c7205e65bfcd9a55dd970a89cbbbfabb246163856f5abbf4c5f1fbbbe0cc27adaadb92f674a78b81c6cd3dc416809bfea5d2392ba2489a6770af13558d2c27c5817948c48661e96cd2fa8d4d461f042f31a9c77392b395995eaf4c4fe38e0127"], 0x14}}, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x48, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'vxcan1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080d5}, 0x4000000) write$tun(r7, &(0x7f0000000c40)=ANY=[@ANYBLOB="000000f5645a96b2001406fffe800050d700000000000000000000aa00000000000000000000ffff0a0101024e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5008000690780003"], 0x40) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_READ_MULTISHOT={0x31, 0x3c, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x18, 0x0, {0x1, 0x0, 0x8, '\x00', &(0x7f00000006c0)={0x2, 0x2, 0x0, 0x0, 0x4}, 0x1}}) write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) r12 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r13, &(0x7f0000000000)='3', 0x4e) ioctl$BTRFS_IOC_SCRUB(r13, 0xc400941b, &(0x7f0000000700)={0x0, 0x6, 0x3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000b00)={r14, 0x3, 0x1, [0xff, 0xf, 0x100000001, 0xf, 0x4], [0x1, 0x5, 0x2, 0x1, 0x7fffffff, 0x280, 0x3d, 0x800, 0x9, 0x4, 0xa, 0xcce, 0x9, 0x7, 0x34740000000000, 0x3, 0x100000001, 0x6, 0x2, 0x1, 0x81, 0xf, 0xfff, 0x31, 0x5, 0x6, 0x800, 0x0, 0x96c3, 0x2, 0x3ff, 0x9, 0xfffffffffffffff9, 0x1, 0xfe, 0x7, 0x7fffffffffffffff, 0x61a, 0x7ff, 0xfe1c, 0x1, 0x1, 0x12, 0x8001, 0x100000000, 0x9, 0x6, 0xffff, 0x8, 0x80000000, 0x6, 0x4a, 0x0, 0x1600000000000, 0x1600, 0xffffffff, 0x3, 0x650d, 0xfffffffffffffff9, 0x80000001, 0xffff, 0x100000000, 0x3, 0x2, 0x6, 0x4, 0x1, 0x9, 0x4, 0x6, 0x600000, 0x0, 0x8, 0x8, 0x5, 0x3, 0x8, 0x7, 0x9, 0x7ff, 0x9, 0x9, 0x8, 0xf4, 0xffffffffffffadd7, 0x1fc, 0x5, 0x0, 0xa, 0x80, 0x5, 0xb91, 0x7, 0x4, 0x4, 0x8000000000000000, 0x80000001, 0x6, 0xe, 0xdbf, 0x3, 0x8, 0xffffffffffffff01, 0x4, 0x7, 0xb4b0, 0x6, 0x3, 0xb, 0x3, 0xe01, 0xb2f7, 0xc22, 0x475, 0x8, 0x1, 0x3, 0x100, 0x3, 0x7, 0x401]}) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 2m10.696291936s ago: executing program 2 (id=2002): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x335e, 0x200, 0x4, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x802, 0x38e, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x8}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = openat$fuse(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000a80)={0x2020}, 0x2020) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) setresgid(0x0, 0xee01, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r9, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x400000000000222, 0x0, 0x0) write$bt_hci(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="01230409000000000000fa0105"], 0xd) syz_ublk_setup_queues(r7, r5, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x3, 0x4a}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe8a8, 0x4, 0x80002100, 0x10000002, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11df, 0x0, 0xfffffffc, 0x36d}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x20, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x400, 0xffffffff, 0x24e, 0x0, r8}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r11, &(0x7f0000004300)=[{{&(0x7f0000000240)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_ttl={{0x18, 0x0, 0x2, 0xfffff8d3}}], 0x18}}], 0x1, 0x800) r12 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r12, 0xc0406441, &(0x7f0000000280)={0x1, 0x0, 0xbdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000000680)="b3254bb51aa29379420eca4c42378eee17ab62ba67beb56703db7c8383f1d3d7c223574615523c08cf875679ac780c214bd0e9b49d7aeeb810bba7b802be89073ef3f64632d26dc4386b4a91fcf33c87501139a5fb5ad9d89ee3573e509f6fbc27c43a78d34ef9915723dbd91ba0ffe7205e09ee45c2d113da3c0c06921e86bca78e436a10fdeb5493f92b2feabb6924cb732603d3ceca2f5349946b4aa016c62419616379a144a6b3e2bb3532e25cf90245e054dea2fa619c38", 0xba}, {&(0x7f0000000740)="53601c44e288edaa265e839df787f0a1cae325ec6d5ded0acf312a3bfaa8f457d94a7d1ae59d167ead6d9a9f118991fb84e53d85", 0x34}, {&(0x7f0000002ac0)="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", 0xff}, {&(0x7f0000002bc0)="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", 0x1000}, {&(0x7f0000003bc0)="82b2b862a2562a43dd82b56d13f5dec74d8af10f97ef05af42cc3a7802b004c34019cf997be5b19fc00f1fc78424a68b025d0d42e6e6579859791bdd19f949f253a9f1c8603b4b3bcc121c408e04526d0f4fdbc258e9208888ace88fd3d59151d6d7b8145a970c0f0953e80e9b76ab69ee80ab864b72fdfc76a5db165c57187123afed23d6cf6c46383d8fea8eb7988ae474f989d775ef4d86b920cbbefc41be6b2acbf844cdf6962936f94f822cd6fc3fb88ccf140f614d3319960a015ba447de2b58", 0xc3}, {&(0x7f0000003cc0)="7c3df0806115ae3dbde71767e4ebcdc909b57ec449039cb80ac6439e42358792eaf85ccab6a18106bd920102eafee9b30213b0fb6540450db7b7bb9ef4923ab80295dd8d036614b7b3ab6ffcc01f89392c40b3c0eca38b37327d84c49c58273b0b5f0915fc1fd6f74019ac4bfd3a47c64232d061a5111f432d857292b75010b281894434b46c26f5a7893fa4b46106bac9ceb6540a34ebbd506f", 0x9a}], 0x6}, 0x4) r14 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r14, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r14, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r15, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r15, 0x540a, 0x0) ioctl$int_in(r15, 0x5452, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81e8943c, &(0x7f0000000180)) 2m10.596691213s ago: executing program 2 (id=2003): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) (fail_nth: 1) 2m10.476496265s ago: executing program 2 (id=2004): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3b}]}, 0x24}}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = inotify_init() r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007c0500000603000003000000faffffff05010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) syz_usb_connect$midi(0x1, 0x2b, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002000000088c0d0c004000010203010902", @ANYRES8=r2, @ANYRES8=r1], 0x0) write$UHID_INPUT2(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='\f\x00\x00\x002\x00c'], 0x38) close_range(r1, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xffffffffffeffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x18d001, 0x20) writev(r5, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) fstatat64(0xffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x400) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 2m10.218195767s ago: executing program 2 (id=2009): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) close(r0) (fail_nth: 1) 2m10.154089614s ago: executing program 34 (id=2009): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) close(r0) (fail_nth: 1) 2m2.65798414s ago: executing program 6 (id=2086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x4, 0x1, 0x2, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r4, 0x0}) openat$sw_sync_info(0xffffff9c, &(0x7f0000000240), 0x690000, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={r4, r5, 0x1, 0x0, 0xd4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000019100)={r2, r5, 0xe, 0x6, 0x1}) write$cgroup_int(r1, &(0x7f0000000040)=0x8000000001cb, 0x12) r6 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x101501, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000019140)='net/ip6_mr_vif\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x8) r8 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x180000) setsockopt$TIPC_MCAST_BROADCAST(r8, 0x10f, 0x85) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000019080), &(0x7f00000190c0)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000000000008000100080000000c00018008000100050000002d0002"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r9) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a700000001a0a0104000000000000000002000000440004"], 0x98}, 0x1, 0x0, 0x0, 0x20048800}, 0x4048800) 2m1.751751027s ago: executing program 6 (id=2094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021880000000c0a01030000000000000000070000010900020073797a31000000000900010073797a30000000005c0003805800008008000340"], 0x10c}}, 0x0) (fail_nth: 1) 2m1.668163649s ago: executing program 6 (id=2095): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f0000000480)=""/244, 0xf4) inotify_add_watch(r3, &(0x7f0000000340)='./file0\x00', 0xa5570b14fb01caa5) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec000000290007002abd700000000000fe80000000000000000000000000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a00020070000000"], 0xec}}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x7f, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f00000001c0)={0x1, 0x0, {0x9, 0x8, 0x2010, 0x7, 0x3, 0x3, 0x1, 0x6}}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$nl_route_sched(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@gettaction={0x14, 0x32, 0x20, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008851) io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0x0, 0x8, 0x0, 0x43, 0x1000006, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', "15f50559", "0725eade", '\'q6O', ["aabe8400002224475793e8a7", "7f36ed000001000000e1d1e8", "fa0700f22b42a3023be516d1", "00fc3c51b1ad7e2b0cf63991"]}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x70bd27, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20044080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 2m1.588414432s ago: executing program 6 (id=2096): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='e:my_r!ad_msr1 _sr/', 0x13) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r2 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x66, 0x0) listen(r0, 0xd) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) splice(r4, &(0x7f00000000c0)=0x7ffffffffffffffc, r5, 0x0, 0x5, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x220d50e942fb7415, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1000, {[@fastopen={0x1e, 0x8, "31c77bfa4cd0"}]}}}}}}}}, 0x0) 2m1.356474043s ago: executing program 6 (id=2099): syz_open_dev$mtd(&(0x7f0000000100), 0x2048a99fbd, 0x1cf201) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) r0 = mq_open(&(0x7f0000000080)='(&+\x00', 0x40, 0x0, &(0x7f0000000240)={0x0, 0x10005, 0x7, 0x4800}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130"], 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r4 = socket$nl_generic(0x11, 0x3, 0x10) (async) syz_emit_ethernet(0x2a, 0x0, 0x0) (async) syz_clone3(&(0x7f00000019c0)={0x4000000, &(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000340), {0x22}, &(0x7f0000000380)=""/147, 0x93, &(0x7f0000000680)=""/4096, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) (async) add_key$keyring(&(0x7f0000000600), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) sendmsg(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) pipe(&(0x7f0000000140)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x304}, "94846e24fae1383c", "159201fa13452c7fd3b37a7ebe5bab19", "948fb918", "8623d0a75e7c33bb"}, 0x28) 2m1.10012609s ago: executing program 6 (id=2102): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 2m0.971762561s ago: executing program 35 (id=2102): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 1m37.898257397s ago: executing program 5 (id=2288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x8ab43, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0af02500000017ff2000dd"], 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a51000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003cf000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x1, 0x2}]}, @union]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x1}, 0x28) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x982}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f00000001c0)={0x16, 0x1, 0xde}) 1m36.846061829s ago: executing program 5 (id=2292): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000002c0)={0x2, 0x1, 0xfff7fffd, 0x2, 0x0, 0x0, 0x7}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket(0x28, 0x5, 0x0) setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket(0x8, 0x5, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5b, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x2, 0x1000, 0x0, 0x81, 0x7, 0x3}) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) setuid(0xee00) 1m36.333300916s ago: executing program 5 (id=2294): socketpair(0x28, 0x1, 0x10001, &(0x7f0000000240)={0xffffffffffffffff}) listen(r0, 0x8) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x501200, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m36.289394683s ago: executing program 5 (id=2297): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) renameat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000180)='./file1\x00') 1m36.147339504s ago: executing program 5 (id=2298): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xff, '\x00', 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='oom_score_adj < -', 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x58, 0x27, 0x8, 0x70bd25, 0x25dfdbfe, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4044094) 1m35.747893148s ago: executing program 5 (id=2302): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e0500000603000003000000fcffffff05010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1}}]}}]}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c00ff80670020"], 0xc) 1m35.676613522s ago: executing program 36 (id=2302): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e0500000603000003000000fcffffff05010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1}}]}}]}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c00ff80670020"], 0xc) 22.839340911s ago: executing program 4 (id=2986): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) io_setup(0x3, &(0x7f0000000180)) getpid() (async) r0 = getpid() syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0xa, 0x100000005, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r3, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003300)='C', 0x1}], 0x1}}], 0x1, 0x20000081) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001022ffff27bd9600eedbdf2500000000a508a66b1088162796dabdff70461384638604d367abdd836e13eaec9c659bf8945b1569ae28a36427f735d5664da668c45d3670b7194f640876c8a134325cfa069444d7674475fb3166cffda5fffc7f1867ade7d94daa683b726cc208ae6bab6668116d510e41eaff599ba6e449951126bb47b26c8a00"/149, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001022ffff27bd9600eedbdf2500000000a508a66b1088162796dabdff70461384638604d367abdd836e13eaec9c659bf8945b1569ae28a36427f735d5664da668c45d3670b7194f640876c8a134325cfa069444d7674475fb3166cffda5fffc7f1867ade7d94daa683b726cc208ae6bab6668116d510e41eaff599ba6e449951126bb47b26c8a00"/149, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r7) (async) fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/filehandle\x00', 0x2, 0x0) write(r8, &(0x7f0000000200)="2a1f2e2f6578706f72745f6469722033320a", 0x12) syz_pidfd_open(r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x89f9a000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x89f9a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_gettime(0x0, &(0x7f0000000040)) (async) clock_gettime(0x0, &(0x7f0000000040)) syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) 22.613215116s ago: executing program 4 (id=2987): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x6, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0x1000, 0x0, 0xfff, 0x10, 0x4, 0x0, 0x0, 0x8, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.508725913s ago: executing program 4 (id=2990): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25057c0000080001800400dd808c000380850004"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r3, 0x3, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x240080d0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x1f) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18fb69835d039acee64181749040cb000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) r9 = syz_open_pts(r6, 0x101400) sendfile(r5, r9, &(0x7f0000000300)=0x6, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000000)={@private=0xa010101, @loopback}, 0xc) r11 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r11, 0x80045500, &(0x7f0000000000)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) 22.049244064s ago: executing program 4 (id=2995): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) membarrier(0x10, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x11, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000007b000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000a70000009500"/32], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000c40)=@x86={0xff, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x80, 0xa, 0x0, 0x9, 0x7, '\x00', 0xfd}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000680)={0x2, 0x0, @ioapic={0xdddd0000, 0x2, 0x5, 0x4, 0x0, [{0x4, 0x85, 0x7, '\x00', 0x7}, {0x2, 0x80, 0x7, '\x00', 0x8}, {0x6c, 0x8, 0x6, '\x00', 0xff}, {0xf2, 0x2, 0x10, '\x00', 0x9}, {0x9, 0x1, 0x0, '\x00', 0x2}, {0x5, 0x1, 0x7, '\x00', 0x1}, {0xf0, 0x7, 0xf7, '\x00', 0xf3}, {0x0, 0xe, 0x3d, '\x00', 0x5}, {0x80, 0x34, 0x8, '\x00', 0x9}, {0x99, 0x0, 0x2, '\x00', 0x1}, {0xbe, 0x1, 0x4, '\x00', 0x6}, {0x8, 0x5, 0xe, '\x00', 0x7f}, {0xa6, 0x0, 0x11, '\x00', 0x18}, {0x9, 0x8, 0x0, '\x00', 0x2}, {0x4, 0x4d, 0x9, '\x00', 0x1}, {0x9, 0x0, 0x9, '\x00', 0x2}, {0x5, 0x8, 0xa5}, {0xb0, 0x7, 0x80, '\x00', 0x2}, {0x0, 0x0, 0x5, '\x00', 0x7f}, {0x1, 0x3, 0xe5, '\x00', 0x2}, {0xe, 0x2, 0x7, '\x00', 0x6}, {0x0, 0xfe, 0xc, '\x00', 0x1}, {0x6, 0x11, 0x5}, {0x5, 0x9, 0x1, '\x00', 0x8}]}}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f00000004c0)) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x40) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000140)) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82187202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x465c4dc6}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x90}, 0x1, 0x0, 0x0, 0x400c0}, 0x4084) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2b5, 0x28c, 0x5, 0x20000000}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe4) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) 21.448340698s ago: executing program 4 (id=2999): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x1, 0x0) fanotify_init(0x0, 0x1000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0x7, @mcast1, 0x6}, {0xa, 0x4e21, 0x1, @remote}, 0x8000, {[0x8001, 0x9, 0x80000001, 0x1ffc0, 0x7e, 0x2003, 0x1, 0x7]}}, 0x5c) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1, &(0x7f0000000080)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r3 = openat$autofs(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0xffffffa0, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 21.367986863s ago: executing program 4 (id=3002): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)={0x0, 0x2, 0xbe}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x6, 0x7}, 0xff, {0x0, 0x7f}, 0x0, 0x2}) syz_open_dev$evdev(&(0x7f0000000080), 0xffffffff, 0x101000) 7.591021206s ago: executing program 7 (id=3076): mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./dev/sda\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x420003, 0x159) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x26) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000011c0)=0x3fffffd) r2 = socket(0x2a, 0x80000, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) write(r4, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r3, &(0x7f0000000780)=""/221, 0xfdef) (fail_nth: 14) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfd', @ANYRESHEX=r4]) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0xfbff, 0x0, 0x61f, 0x3}, 0x10) 7.161059353s ago: executing program 7 (id=3078): mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./dev/sda\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x420003, 0x159) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x26) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000011c0)=0x3fffffd) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x3d3a, 0x4) sendto$inet(r4, &(0x7f0000000300)="01", 0x1, 0x4040, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0xa6b4, 0x4, 0x1, 0x270}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2116, 0x40, 0x2, 0x30d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc192, 0x1, 0x2, 0x3c6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcfde, 0x200, 0x2, 0x322}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa9fa, 0x10, 0x0, 0x241}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f00000022c0)={0x2e, 0x33, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x3, 0xe47, 0x0, &(0x7f00000012c0)=@buf_1k="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"}}, &(0x7f0000002340)) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x68) r7 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r5, &(0x7f00000023c0)={0x2e, 0x10, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002380)=@new_dev={0x4, 0x77f, 0x0, 0x0, 0x1000, 0xffffffff, r7, 0x0, 0x11}}}, &(0x7f0000002440)) recvmmsg(r4, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x2100, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e23, @empty}, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)='team0\x00', 0xb, 0x8000, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x3) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x20040, 0x40, 0xe}, 0x18) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 6.329350171s ago: executing program 37 (id=3002): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)={0x0, 0x2, 0xbe}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x6, 0x7}, 0xff, {0x0, 0x7f}, 0x0, 0x2}) syz_open_dev$evdev(&(0x7f0000000080), 0xffffffff, 0x101000) 6.181124612s ago: executing program 7 (id=3086): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x700, 0x0, 0x0, 0x2}, 0x48) 6.180482762s ago: executing program 7 (id=3088): syz_usb_connect(0x3, 0x2d, &(0x7f0000002640)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000080), 0x389c010, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0x10}}, {@context={'context', 0x3d, 'system_u'}}]}}) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000180)) r5 = dup(r4) openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f00000001c0)={0x4}) write$UHID_INPUT(r5, &(0x7f0000001600)={0xf, {"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", 0x1000}}, 0x1006) 3.1175391s ago: executing program 7 (id=3105): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc369a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setpriority(0x2, 0x0, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x400c8d1}, 0x40448d5) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8, @ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f000039e000/0x1000)=nil, 0x1000, 0x7000007) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0xbd31, 0x40000) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000001140)=[0xfffffffc, 0xfff]) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYRES16=r2], 0x0) r4 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r5, 0x4008c002, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201010200000040ef17ee6040000102030109022400010109b0070904000d010301030c09210500080122ab04090581030004030902810674cd133899f15bd44d3c0514c31fe93d51efc6caffa0b857e3d9dc1238b4f81999"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xfffffffffffffcaf, 0x0}]}) r7 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="37eaef7040c6bad8ae8bfb598ebf7ebd974e4d66c79f3f140ca49fb3ab7329a85679fbd04809b44ae6109809a8cd117997c6acc2295ac5aea745a9ca82c9"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_connect(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYRES8=r6, @ANYRESDEC=r4, @ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r8, &(0x7f00000001c0)="37effcedd1e9f4f3245968f2607d00"/26, 0x1a) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000140)=[0x9, 0x7]) write$char_usb(r8, &(0x7f0000000bc0)="be", 0x1) syz_usb_disconnect(r7) 1.777323016s ago: executing program 1 (id=3120): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80", 0xc}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 1.485090216s ago: executing program 1 (id=3121): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @timestamp, @mss={0x2, 0x101}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0x8, 0x3}], 0x6) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno', 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendto$inet(r0, &(0x7f0000000240)="c9273f", 0x3, 0x4044880, 0x0, 0x0) 910.588782ms ago: executing program 8 (id=3127): r0 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7, 0xffff}}, './file0\x00'}) ioctl$BLKGETSIZE64(r1, 0x80041272, &(0x7f0000000140)) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000001440)={0x2020}, 0x2020) (async) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000100)=0xe) 907.650406ms ago: executing program 8 (id=3128): unshare(0x68040200) socket$packet(0x11, 0x3, 0x300) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100"], 0x160}}, 0x0) 631.081357ms ago: executing program 1 (id=3129): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x100, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) close(r2) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r3, &(0x7f00000001c0), 0x0, 0x6, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x8c) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) ioctl$DVD_WRITE_STRUCT(r0, 0x2284, &(0x7f0000000f80)=@manufact={0x4, 0x1, 0x800, "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"}) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x80008c, 0x0) (fail_nth: 2) 541.012014ms ago: executing program 9 (id=3130): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) listen(r1, 0x50) 538.214415ms ago: executing program 9 (id=3131): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x74, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) 431.292974ms ago: executing program 9 (id=3132): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000b44000/0x1000)=nil}) write$rfkill(r1, &(0x7f00000000c0)={0xf42d, 0x7, 0x1}, 0x8) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) write(r3, &(0x7f0000000200), 0xfffffffffffffe0a) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000040)={0x0, "f8f44fa604e0937938b160bc0f359ebf496ac2d64cd825060102dda9631d379f"}) 285.051389ms ago: executing program 1 (id=3133): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x16, 0x29, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6de11987424c9e63ec5f1671fdf94432fc1baaef8657a8c9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd9783374801f053e1d8e3bc51d63c8e68da624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000008c00000f75eec70c0de10b5d8c536e5b5ce39ab8f02fe1268abbb5b8b2b0d8848a", 0x0, 0x0, 0x800006}, 0x3b) 283.159057ms ago: executing program 8 (id=3134): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3d, 0x0, 0x1}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x34}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000200)={0x6, 0x7, 0x5, 0x400000000000000c, 0x0, 0x6, 0x401, 0x6}, 0x0, &(0x7f0000000280)={0x9, 0x8000000000000000, 0x7ffffffffffffffc, 0x4, 0x0, 0x5, 0x7, 0x5}, &(0x7f0000000340), 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047454, &(0x7f00000000c0)=0x400000) 200.003431ms ago: executing program 1 (id=3135): write(0xffffffffffffffff, &(0x7f0000000000)="152cd0ec850e58ad90e52f460204026004dc656f1eed5100037b1a0a47919a251689cc2d601741e8567cde26d0692ac9bc036ab11901", 0x36) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) ioctl$TIOCEXCL(r0, 0x540c) (async) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000004c0)={0x119, 0x16, &(0x7f00000000c0)}) ioctl$TCSBRK(r0, 0x5409, 0x7) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x8f, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_buf(r0, 0x0, 0x27, &(0x7f0000000540)=""/30, &(0x7f0000000580)=0x1e) (async) renameat2(r1, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0/file0\x00', 0x1) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r0, 0x35, 0x0, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (rerun: 32) ioctl$NILFS_IOCTL_GET_BDESCS(0xffffffffffffffff, 0xc0186e87, &(0x7f0000000800)={&(0x7f0000000780)=[{0x7, 0x4, 0x0, 0xff, 0x7}, {0xffffffffffffffff, 0x2, 0x5, 0x8, 0x6}, {0x7fffffffffffffff, 0xd, 0x2, 0x4, 0x6}], 0x3, 0x28, 0xc, 0x7}) (async) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000840)={0x2, 0xc, 0xcf0, 0x10, 0x7ff}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82187201, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40002}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, r5, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2c}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3b9}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x4054) (async, rerun: 32) r6 = openat$udambuf(0xffffff9c, &(0x7f0000000c40), 0x2) (rerun: 32) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82187202, &(0x7f0000000c80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$XFS_IOC_SWAPEXT(r3, 0xc0a4586d, &(0x7f0000000ec0)={0x0, r1, r1, 0x1ff, 0x7ff, '\x00', {0x0, 0x17, 0x7, 0x9, 0xe6aa, 0x7, 0xa, 0xd24f, {0x4, 0x81e1}, {0xfffffff5, 0x4}, {0x1a, 0x4}, 0x7, 0x9c2, 0x1, 0xff, 0xb4d3c72a, 0x7, 0x2, 0x8001, 0x7, 0x8, '\x00', 0xa8000000, 0x7, 0x3a6a, 0x6}}) (async) r7 = open_tree(r1, &(0x7f0000000f80)='./file0\x00', 0x1000) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000fc0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x4000}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000001000)={'wpan3\x00'}) (async, rerun: 32) ioctl$PPPIOCGIDLE32(r7, 0x8008743f, &(0x7f0000001040)) (async, rerun: 32) epoll_wait(r1, &(0x7f0000001080)=[{}, {}, {}], 0x3, 0xb74e) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000010c0), &(0x7f0000001100)='./file0\x00', 0x8, 0x3) 197.973303ms ago: executing program 8 (id=3136): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x40800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1261}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r1) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0xc804) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x3e4, 0xffffffff, 0xe4, 0x0, 0x254, 0xfeffffff, 0xffffffff, 0x31c, 0x31c, 0x31c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'rose0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x130, 0x170, 0x0, {}, [@common=@srh1={{0x8c}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, @local, [0xff000000, 0xff000000, 0x0, 0x100], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x440) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount(&(0x7f0000000500)=@loop={'/dev/loop', 0x0}, &(0x7f0000000600)='./file0\x00', &(0x7f0000000700)='ocfs2\x00', 0x0, &(0x7f0000000800)='heartbeat=none\x00') syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') semctl$SETVAL(0x0, 0x1, 0x10, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff, 0x7fff0003}]}) close_range(r5, r5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x208200, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB='max=00000000000000000000004,stats=global,max=00000000p00000000000007,stats=global,subj_role=xfrm0\x00,dont_hash,subj_role=!,obj_user=$,$}+%\\!,fsname=$,,rootcontext=unconfined_u,obj_user=,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fsuuid=2]024d91-66f3-4e0c-8fb6-bae1dd59,\x00']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 197.707635ms ago: executing program 9 (id=3137): keyctl$get_keyring_id(0x0, 0x0, 0xff) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xe4, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0xa8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x800, 0x8001, 0x5, 0x0, 0x8001, 0x4, 0x2, 0x4dc]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x10, 0x1000, 0x7, 0x9, 0x6, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x3, 0x8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x9, 0x1, 0x3, 0xffff]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x25, 0x7f, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0xe5}}, @ht={0x2d, 0x1a, {0x20, 0x2, 0x5, 0x0, {0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x1, 0xe}}]}, @NL80211_ATTR_IE={0x27, 0x2a, [@peer_mgmt={0x75, 0x8, {0x0, 0x400, @val=0x8, @val=0x2f, @void}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x28}}, @mesh_chsw={0x76, 0x6, {0xb, 0x0, 0x2f, 0x2}}, @cf={0x4, 0x6, {0x40, 0x3, 0x8, 0x8}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x2, 0xb9, 0x2, 0xfff7, 0x5, 0x401, 0xa]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x2, 0x6]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8446}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0xe4}}, 0x40010) 178.981328ms ago: executing program 1 (id=3138): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000400)="26eba9fdb4cbab48929e1af15134c49ce9ee243b9b00000000000100", 0x1c}, {&(0x7f0000000500)="3f3732363db4a3da08b041c2a8ef7f5d89131ad1614b7ec774dc12bded9134ee45c8480c14df87bc03d2c5c1cf5ecf906cefe9152b97d314b9c26f0ab7007e42b4976881fae5f7b8b4fa46a3323685ef9ae1294787935a84f6ae75a580ae3e35e6b4ea413d5e3b588790", 0x6a}, {&(0x7f0000000580)="9b645d5b9fc12fcc33a3f268e5d6fbcd75a048f5d838ab305241b1d0734317ed406e5ec754", 0x25}, {&(0x7f00000005c0)}], 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) accept4(r1, 0x0, 0x0, 0x80000) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) fsync(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r4, &(0x7f0000000300)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @remote}, 0x3, 0x4, 0x2, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="440100001a001307000000003519e9f49efb3008000000000000aa7f0000010000000000000000000000000000000000c55d4df52efff7ebb77443c2f940d903c62c79a2f9f2e8b8b40d5f76a5172db04c353630f9986775794165b3a3d2b09793e976fc3fb9401d00"/120, @ANYRESHEX=r2, @ANYBLOB="092d17cf29b971f0b8b0eb984008b20ccd9f62f520973f99d1315a5484c887f567159722635bfbc0bbedf35c1cef711bf638367715b83c2ea8c2acb5afe28b7aa81d06bf641a489108c6db80", @ANYRESOCT=0x0, @ANYRES64=r4, @ANYRESOCT=r4, @ANYRES32=r0, @ANYRES8=r4], 0x1b4}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r2, 0x8, 0x0, 0xafa, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r10, 0x5404, &(0x7f00000000c0)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x15, "518aba4d000000000000000000000000002000"}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r8, 0x25, 0x8, @val=@netkit={@void, @value=r7, @void, @void, r9}}, 0x1c) 178.757834ms ago: executing program 9 (id=3139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000060000000405"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000540), 0xa7c, r0}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x9f) write(r1, &(0x7f00000005c0)="00010203040506070809130b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) 91.288075ms ago: executing program 9 (id=3140): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x28, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) r1 = open(&(0x7f0000000180)='./sys\x00', 0x0, 0x1c0) fcntl$notify(r1, 0x402, 0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, 0x0, 0xd0eb38dff8c09541) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000740)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000040)="f7edadfffeffff00f5ffffff00", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffff32) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socket(0x1d, 0x2, 0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x102) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x32, 0x10ffff, 0xfffffffd}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fstatat64(0xffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x1000) write(r7, &(0x7f0000000300)='1', 0x1) 90.783651ms ago: executing program 8 (id=3141): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'bond_slave_0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) readv(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='3', 0x4e) r8 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8000, 0x9, 0x8, 0x0, 0x0, 0x1ffffffffffffd}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4d4, 0x32}, 0xa, @in6=@local, 0x800000, 0x3}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x5, 0x0, 0x1, 0x0, 0xabf, 0x400000}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)={0x13c, 0x28, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8a, 0x6a, 0x0, 0x0, @binary="c23818ee0f538780fd5c6cd1a9d34696befcde6bad4a0e24acf2e2a0e88374f0f341bff21846553c0c9edba91580624baf23ce673f23e7ba23b5ea3b3a6d0c3c6de73428e39132679f4e20d48073a1b6e0aded4ec11f8d8b16090c48912f5683d0192f8da51e3c5d9536c10ebc498b7be766b66894e8f49eb57b90eb3154ec5b3d70eddc5c2b"}, @typed={0x14, 0x73, 0x0, 0x0, @ipv6=@local}, @generic="dde636d2c41f7129d039a64e2ff20d4b617372a062ec8a6da6803c1dbecafcf650e78a1b525e3767c614fa1b32a2fcb16aa82baa31521a43b0b5553a46caa3d9d2af4d6169d67a8179867e7c0a3dd6d192552e34548f74bcb1f8bf7331400c596cb6bbf4160987351fca90f2e39c2522ba863af8547c727bba3e6e185ac2d3876ed5a64bd7f6915ee7"]}, 0x13c}, {&(0x7f0000000440)={0x424, 0x36, 0x0, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0xc8, 0x0, 0x0, @u32=0x1}, @nested={0x200, 0x125, 0x0, 0x1, [@generic="51f2d571bf874656d1e29701f85276acf3315134ecd3afc780052c12d56dd470787d6a8fd23739c512e9304571c98d23e46eaa3099adf7e84080a68793fecfb166429138d205801a6001942fe0ba6b4ac657e9448e49e6fbbdc2d07759292a081576e7bb0ea3478028acec0714d933c355596e6f026081db96bfed31a787ac7bc831571bffc7546efbac877b2d2694ad6a8e08a7c9bda1ec143035ecfc9c60e60301c8f32fe02fce0d96c0ad3fc6b489bb636a005e9de8c5670d08ed62730187599db75a6322b0aaccc82a589d31ed4c4b9a20afdbb970f24d8d1e0f969bb699", @generic="29741becda4d72d9513f84a56137619b40aa1e8ab3e23a6546abf9ba7ef25be2e472bd7c7f460f4e2477eb0a468e9c01f91db26ae63f555687f43a1269c53a868d418baf59dc006777c2f83b3baf9b6524b3872274ff80f56cb258feb60676a011cfe8cdcb68b3215d6741eb1d7386d01c4edc11c8ab90581800fae9f8efe49446d9c40bf4b8074d4c5ebfe0929dfe6a85708a3433b27d99474485c7102080500a06eef1ad4cbd07a05765b531252d0732c4a98a5dca57d82ebd6caf7193a160cdc63be67225bb7f65de0ae7c15a75a22be0ba4ed54f4ab47f773cbd0470467ebc5f9505aeda61293b905f24", @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @nested={0x4, 0xfd}, @typed={0x8, 0x46, 0x0, 0x0, @fd=r9}, @nested={0x4, 0x4e}, @nested={0x4, 0x119}, @nested={0x4, 0x16a}, @nested={0x4, 0x8f}]}, @nested={0x20b, 0x95, 0x0, 0x1, [@generic="092c4c0adfde1bb54fcadb99e812c7b8126018dd274463314ae9690aa68ed05080f6ce18293c5b95803951365784ab87ce09055fe780fd746c0fc92db5fc9c488cdfdaf7dd03af974c637cf4a3514d6800365980af183c7d3106bd9f3fe7fd305d2cbe2a16252ba029b21b9aba78a0b90e7db721b2c79095a89eda9af2d3184dca843c202ccd12ac3f2b0856a4bf3a6e4f3d8dc5085028944a290ec4", @generic="866c0fe006e1ee2d29aa257a58c20ec6e936926588dfb0c78e58f16fd8ef2dc6f61a1aa68b958c63ce326b6664f3905e7692e1a0131eb53859888cefe1adee26367c806729e2b75fe567b593a0924edef0972f99d18f873296c2c639a355283f27f9e2535efb5b9175395a7c14", @typed={0x14, 0x63, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="9c77e4c76329b1bf768b9a77505d41061960d3c326e666a0ddc73e9d90d2d7077cc9dfbe34823dddd9eee5581b656e51c5644749b7961734f094475d6c035b43ad7cba78314db3657771d4a8ea2ba9bb062475c0b8f9d3016ced9df733a5607d2f01404759622208d2355e726a1b4958ce14257fb801b7f6670e25af45c42101fc3447a4454e5a9815116cd558064a7f5647eeaf91bbe2a9216ccf2539783d56ffd3df2b180f8b9c26ca51f4a6f23ebf3da2b35030f273b444857991c1a6ff562841e3a43787cd8c8d55cec86cee3c33526a30f62bbf3b0a76ec8f79e16a1d3b8938c8478c7dcf93397e"]}]}, 0x424}], 0x2}, 0x24000000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 283.15µs ago: executing program 8 (id=3142): unshare(0x68040200) socket$packet(0x11, 0x3, 0x300) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100"], 0x160}}, 0x0) 0s ago: executing program 7 (id=3143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x26, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) close(0xffffffffffffffff) syz_ublk_setup_io_uring(0x3516, &(0x7f0000000000)={0x0, 0x4c88, 0x8, 0x2, 0xd9}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(0x0, 0xd87, 0x4, 0x1010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(0x0, 0x81, 0x2, 0x20010, 0xffffffffffffffff, 0x10000000) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='net/rt6_stats\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) move_pages(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000ffe000/0x1000)=nil], &(0x7f00000002c0)=[0x8, 0x0, 0x40, 0x1], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x1, &(0x7f0000000480)=@raw=[@exit], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) write(r5, &(0x7f0000000480)='usbip-vudc.0', 0xc) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f000000f840)={0x1e0, 0x240, 0x80, 0x80, 0x0, 0xd, 0x20, 0x2, {0x9, 0x5}, {0x2, 0x32477c89, 0x1}, {0x10000, 0x4, 0x1}, {0xfff, 0xfffffffb, 0x1}, 0x2, 0x100, 0x4, 0x9, 0x1, 0x200, 0x8, 0xd8b, 0x8000, 0x2, 0x8001, 0x1, 0x6, 0x100, 0x0, 0xb}) kernel console output (not intermixed with test programs): _fault+0xc5/0x140 [ 438.261108][T15493] ? __fpu_restore_sig+0xc06/0x13b0 [ 438.261133][T15493] ? x86_task_fpu+0x5f/0x90 [ 438.261155][T15493] __fpu_restore_sig+0xfeb/0x13b0 [ 438.261180][T15493] ? __lock_acquire+0x4c5/0x1ec0 [ 438.261204][T15493] ? __pfx___fpu_restore_sig+0x10/0x10 [ 438.261231][T15493] ? __pte_offset_map+0x179/0x310 [ 438.261258][T15493] ? __might_fault+0xc5/0x140 [ 438.261287][T15493] fpu__restore_sig+0x151/0x190 [ 438.261313][T15493] ia32_restore_sigcontext+0x456/0x620 [ 438.261341][T15493] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 438.261375][T15493] ? rcu_is_watching+0x13/0xc0 [ 438.261400][T15493] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.261423][T15493] ? lockdep_hardirqs_on+0x7d/0x110 [ 438.261452][T15493] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 438.261481][T15493] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 438.261516][T15493] do_int80_emulation+0x166/0x650 [ 438.261544][T15493] asm_int80_emulation+0x1a/0x20 [ 438.261562][T15493] RIP: 0023:0xf7f73fec [ 438.261577][T15493] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 438.261594][T15493] RSP: 002b:00000000f543650c EFLAGS: 00000292 [ 438.261612][T15493] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 438.261623][T15493] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 438.261635][T15493] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.261645][T15493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.261656][T15493] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.261679][T15493] [ 438.366257][T15497] team0: Device veth0_vlan failed to register rx_handler [ 439.464847][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.464902][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.862240][T15516] nbd: illegal input index 13872787 [ 440.490377][T15523] FAULT_INJECTION: forcing a failure. [ 440.490377][T15523] name fail_futex, interval 1, probability 0, space 0, times 0 [ 440.495371][T15523] CPU: 0 UID: 0 PID: 15523 Comm: syz.4.2877 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.495411][T15523] Tainted: [L]=SOFTLOCKUP [ 440.495419][T15523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 440.495430][T15523] Call Trace: [ 440.495436][T15523] [ 440.495444][T15523] dump_stack_lvl+0x100/0x190 [ 440.495463][T15523] should_fail_ex.cold+0x5/0xa [ 440.495478][T15523] get_futex_key+0xf72/0x14f0 [ 440.495497][T15523] ? __pfx_get_futex_key+0x10/0x10 [ 440.495517][T15523] ? __mutex_unlock_slowpath+0x35d/0x930 [ 440.495536][T15523] futex_wake+0xf4/0x5e0 [ 440.495551][T15523] ? __pfx_futex_wake+0x10/0x10 [ 440.495566][T15523] ? detach_task_ctx_data+0x83/0x490 [ 440.495585][T15523] do_futex+0x2b2/0x440 [ 440.495601][T15523] ? __pfx_do_futex+0x10/0x10 [ 440.495616][T15523] ? __might_fault+0xc5/0x140 [ 440.495647][T15523] mm_exit_exec_release+0x256/0x2f0 [ 440.495671][T15523] do_exit+0x707/0x2ae0 [ 440.495685][T15523] ? __pfx_do_exit+0x10/0x10 [ 440.495697][T15523] ? do_raw_spin_lock+0x128/0x260 [ 440.495714][T15523] ? find_held_lock+0x2b/0x80 [ 440.495725][T15523] ? get_signal+0x7e0/0x21e0 [ 440.495743][T15523] do_group_exit+0xd5/0x2a0 [ 440.495756][T15523] get_signal+0x1ec7/0x21e0 [ 440.495789][T15523] ? __pfx_get_signal+0x10/0x10 [ 440.495816][T15523] ? do_futex+0x190/0x440 [ 440.495832][T15523] arch_do_signal_or_restart+0x91/0x7a0 [ 440.495848][T15523] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 440.495871][T15523] exit_to_user_mode_loop+0x139/0x700 [ 440.495887][T15523] ? rcu_is_watching+0x13/0xc0 [ 440.495899][T15523] __do_fast_syscall_32+0x59f/0x8b0 [ 440.495917][T15523] do_fast_syscall_32+0x32/0x70 [ 440.495933][T15523] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 440.495948][T15523] RIP: 0023:0xf707efec [ 440.495961][T15523] Code: Unable to access opcode bytes at 0xf707efc2. [ 440.495966][T15523] RSP: 002b:00000000f546d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 440.495978][T15523] RAX: fffffffffffffe00 RBX: 00000000f7474f88 RCX: 0000000000000080 [ 440.495985][T15523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7474f8c [ 440.495992][T15523] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 440.495999][T15523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.496010][T15523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 440.496024][T15523] [ 441.270544][T15534] socket: no more sockets [ 441.284226][T15534] socket: no more sockets [ 441.293753][T15534] socket: no more sockets [ 441.304675][T15534] socket: no more sockets [ 441.540520][T15536] FAULT_INJECTION: forcing a failure. [ 441.540520][T15536] name failslab, interval 1, probability 0, space 0, times 0 [ 441.540567][T15536] CPU: 1 UID: 0 PID: 15536 Comm: syz.4.2882 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.540594][T15536] Tainted: [L]=SOFTLOCKUP [ 441.540600][T15536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.540607][T15536] Call Trace: [ 441.540611][T15536] [ 441.540616][T15536] dump_stack_lvl+0x100/0x190 [ 441.540635][T15536] should_fail_ex.cold+0x5/0xa [ 441.540650][T15536] should_failslab+0xc2/0x120 [ 441.540664][T15536] __kmalloc_noprof+0xfc/0x840 [ 441.540677][T15536] ? tomoyo_encode2+0xfb/0x3c0 [ 441.540701][T15536] tomoyo_encode2+0xfb/0x3c0 [ 441.540727][T15536] tomoyo_encode+0x29/0x50 [ 441.540767][T15536] tomoyo_realpath_from_path+0x18c/0x690 [ 441.540804][T15536] tomoyo_check_open_permission+0x2af/0x3c0 [ 441.540836][T15536] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 441.540861][T15536] ? __lock_acquire+0x4c5/0x1ec0 [ 441.540894][T15536] ? hook_file_open+0x248/0x8e0 [ 441.540935][T15536] ? path_get+0x61/0x80 [ 441.540960][T15536] tomoyo_file_open+0x6b/0x90 [ 441.540980][T15536] security_file_open+0xb5/0x1e0 [ 441.541006][T15536] do_dentry_open+0x588/0x14d0 [ 441.541034][T15536] vfs_open+0x82/0x3f0 [ 441.541061][T15536] path_openat+0x19fa/0x2440 [ 441.541088][T15536] ? __pfx_path_openat+0x10/0x10 [ 441.541117][T15536] do_file_open+0x20e/0x430 [ 441.541140][T15536] ? __pfx_do_file_open+0x10/0x10 [ 441.541179][T15536] ? _raw_spin_unlock+0x28/0x50 [ 441.541202][T15536] ? alloc_fd+0x471/0x7a0 [ 441.541227][T15536] do_sys_openat2+0x10f/0x1e0 [ 441.541250][T15536] ? __pfx_do_sys_openat2+0x10/0x10 [ 441.541277][T15536] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 441.541306][T15536] __ia32_compat_sys_openat+0x12d/0x210 [ 441.541332][T15536] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 441.541357][T15536] ? fput+0x7c/0x100 [ 441.541379][T15536] ? ksys_write+0x1ac/0x250 [ 441.541396][T15536] ? __pfx_ksys_write+0x10/0x10 [ 441.541418][T15536] __do_fast_syscall_32+0x13a/0x8b0 [ 441.541443][T15536] ? lockdep_hardirqs_on+0x7d/0x110 [ 441.541469][T15536] do_fast_syscall_32+0x32/0x70 [ 441.541494][T15536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.541517][T15536] RIP: 0023:0xf707efec [ 441.541537][T15536] Code: Unable to access opcode bytes at 0xf707efc2. [ 441.541545][T15536] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 441.541563][T15536] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 441.541575][T15536] RDX: 0000000000084000 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.541586][T15536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 441.541596][T15536] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 441.541608][T15536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.541632][T15536] [ 441.541723][T15536] ERROR: Out of memory at tomoyo_realpath_from_path. [ 442.379132][T15567] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 442.793134][T15569] sd 0:0:0:0: PR command failed: 1026 [ 442.793213][T15569] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 442.793276][T15569] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 442.848947][T15572] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 442.924753][T15576] FAULT_INJECTION: forcing a failure. [ 442.924753][T15576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.931617][T15576] CPU: 0 UID: 0 PID: 15576 Comm: syz.7.2896 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.931636][T15576] Tainted: [L]=SOFTLOCKUP [ 442.931641][T15576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 442.931648][T15576] Call Trace: [ 442.931653][T15576] [ 442.931658][T15576] dump_stack_lvl+0x100/0x190 [ 442.931677][T15576] should_fail_ex.cold+0x5/0xa [ 442.931692][T15576] _copy_from_user+0x2e/0xd0 [ 442.931706][T15576] input_event_from_user+0x137/0x290 [ 442.931763][T15576] ? __pfx_input_event_from_user+0x10/0x10 [ 442.931775][T15576] ? input_inject_event+0x198/0x380 [ 442.931794][T15576] evdev_write+0x27a/0x430 [ 442.931812][T15576] ? __pfx_evdev_write+0x10/0x10 [ 442.931830][T15576] ? bpf_lsm_file_permission+0x9/0x10 [ 442.931845][T15576] ? security_file_permission+0x76/0x210 [ 442.931862][T15576] ? rw_verify_area+0xce/0x6d0 [ 442.931880][T15576] vfs_write+0x2aa/0x1050 [ 442.931892][T15576] ? __pfx_evdev_write+0x10/0x10 [ 442.931908][T15576] ? lock_acquire+0x1d1/0x380 [ 442.931923][T15576] ? __fget_files+0x34/0x3d0 [ 442.931934][T15576] ? __pfx_vfs_write+0x10/0x10 [ 442.931944][T15576] ? find_held_lock+0x2b/0x80 [ 442.931955][T15576] ? __fget_files+0x215/0x3d0 [ 442.931966][T15576] ? __fget_files+0x215/0x3d0 [ 442.931980][T15576] ? __fget_files+0x21f/0x3d0 [ 442.931995][T15576] ksys_write+0x1f8/0x250 [ 442.932006][T15576] ? __pfx_ksys_write+0x10/0x10 [ 442.932016][T15576] ? ksys_write+0x1ac/0x250 [ 442.932027][T15576] ? __pfx_ksys_write+0x10/0x10 [ 442.932040][T15576] __do_fast_syscall_32+0x13a/0x8b0 [ 442.932057][T15576] ? lockdep_hardirqs_on+0x7d/0x110 [ 442.932073][T15576] do_fast_syscall_32+0x32/0x70 [ 442.932089][T15576] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 442.932104][T15576] RIP: 0023:0xf6fdefec [ 442.932117][T15576] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 442.932122][T15576] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 442.932133][T15576] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000040 [ 442.932140][T15576] RDX: 00000000000012d8 RSI: 0000000000000000 RDI: 0000000000000000 [ 442.932147][T15576] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.932153][T15576] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 442.932160][T15576] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.932174][T15576] [ 444.347877][T15601] syzkaller1: entered promiscuous mode [ 444.347949][T15601] syzkaller1: entered allmulticast mode [ 444.352425][T15601] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 444.352463][T15601] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 444.353693][T15601] vhci_hcd vhci_hcd.0: Device attached [ 444.615115][ T5740] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 445.119338][T15602] vhci_hcd: connection reset by peer [ 445.120450][ T5606] vhci_hcd vhci_hcd.1: stop threads [ 445.120466][ T5606] vhci_hcd vhci_hcd.1: release socket [ 445.120494][ T5606] vhci_hcd vhci_hcd.1: disconnect device [ 445.271348][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'. [ 446.293469][T15646] FAULT_INJECTION: forcing a failure. [ 446.293469][T15646] name failslab, interval 1, probability 0, space 0, times 0 [ 446.293549][T15646] CPU: 3 UID: 0 PID: 15646 Comm: syz.8.2919 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.293591][T15646] Tainted: [L]=SOFTLOCKUP [ 446.293599][T15646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 446.293610][T15646] Call Trace: [ 446.293617][T15646] [ 446.293624][T15646] dump_stack_lvl+0x100/0x190 [ 446.293653][T15646] should_fail_ex.cold+0x5/0xa [ 446.293677][T15646] should_failslab+0xc2/0x120 [ 446.293701][T15646] __kmalloc_cache_node_noprof+0x94/0x720 [ 446.293724][T15646] ? __get_vm_area_node+0x124/0x350 [ 446.293752][T15646] __get_vm_area_node+0x124/0x350 [ 446.293794][T15646] __vmalloc_node_range_noprof+0x268/0x1420 [ 446.293819][T15646] ? bpf_check+0x1800/0xa7c0 [ 446.293844][T15646] ? __pfx___css_rstat_updated+0x10/0x10 [ 446.293871][T15646] ? __kernel_text_address+0xd/0x30 [ 446.293897][T15646] ? bpf_check+0x1800/0xa7c0 [ 446.293923][T15646] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 446.293944][T15646] ? rcu_read_unlock+0x17/0x60 [ 446.293967][T15646] ? rcu_read_unlock+0x17/0x60 [ 446.293996][T15646] ? find_held_lock+0x2b/0x80 [ 446.294016][T15646] ? rcu_read_unlock+0x17/0x60 [ 446.294041][T15646] ? rcu_read_unlock+0x17/0x60 [ 446.294071][T15646] ? bpf_check+0x1800/0xa7c0 [ 446.294093][T15646] __vmalloc_node_noprof+0xad/0xf0 [ 446.294117][T15646] ? bpf_check+0x1800/0xa7c0 [ 446.294143][T15646] __vmalloc_noprof+0xa3/0x120 [ 446.294167][T15646] ? __pfx___vmalloc_noprof+0x10/0x10 [ 446.294189][T15646] ? bpf_lsm_capable+0x9/0x10 [ 446.294216][T15646] ? security_capable+0x80/0x260 [ 446.294236][T15646] ? lsm_blob_alloc+0x2b/0x90 [ 446.294253][T15646] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 446.294279][T15646] ? security_bpf_prog_load+0x10f/0x2f0 [ 446.294303][T15646] ? bpf_vlog_init+0x118/0x150 [ 446.294329][T15646] bpf_check+0x1800/0xa7c0 [ 446.294354][T15646] ? __css_rstat_updated+0x1ce/0x590 [ 446.294378][T15646] ? __lock_acquire+0x4c5/0x1ec0 [ 446.294412][T15646] ? __lock_acquire+0x4c5/0x1ec0 [ 446.294443][T15646] ? __pfx_bpf_check+0x10/0x10 [ 446.294468][T15646] ? lock_acquire+0x1d1/0x380 [ 446.294491][T15646] ? bpf_prog_load+0x1a09/0x2a80 [ 446.294514][T15646] ? find_held_lock+0x2b/0x80 [ 446.294532][T15646] ? bpf_prog_load+0x1a09/0x2a80 [ 446.294560][T15646] ? __asan_memset+0x23/0x50 [ 446.294582][T15646] ? bpf_prog_load+0x1ac3/0x2a80 [ 446.294606][T15646] bpf_prog_load+0x1ac3/0x2a80 [ 446.294637][T15646] ? __pfx_bpf_prog_load+0x10/0x10 [ 446.294682][T15646] __sys_bpf+0x1f46/0x4a30 [ 446.294707][T15646] ? __pfx___sys_bpf+0x10/0x10 [ 446.294724][T15646] ? lock_acquire+0x1d1/0x380 [ 446.294772][T15646] ? get_pid_task+0x2a/0x250 [ 446.294792][T15646] ? find_held_lock+0x2b/0x80 [ 446.294810][T15646] ? get_pid_task+0xfc/0x250 [ 446.294827][T15646] ? get_pid_task+0xfc/0x250 [ 446.294851][T15646] ? proc_fail_nth_write+0x9f/0x220 [ 446.294871][T15646] ? find_held_lock+0x2b/0x80 [ 446.294895][T15646] ? rcu_read_lock_any_held+0x6a/0x90 [ 446.294916][T15646] ? find_held_lock+0x2b/0x80 [ 446.294934][T15646] ? ksys_write+0x190/0x250 [ 446.294952][T15646] ? ksys_write+0x190/0x250 [ 446.294970][T15646] ? lock_acquire+0x1d1/0x380 [ 446.295013][T15646] ? fput+0x7c/0x100 [ 446.295039][T15646] ? __ia32_sys_bpf+0xcc/0x170 [ 446.295057][T15646] __ia32_sys_bpf+0xcc/0x170 [ 446.295077][T15646] ? __do_fast_syscall_32+0xb3/0x8b0 [ 446.295105][T15646] __do_fast_syscall_32+0x13a/0x8b0 [ 446.295129][T15646] ? lockdep_hardirqs_on+0x7d/0x110 [ 446.295155][T15646] do_fast_syscall_32+0x32/0x70 [ 446.295181][T15646] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 446.295205][T15646] RIP: 0023:0xf7f73fec [ 446.295226][T15646] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 446.295234][T15646] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 446.295253][T15646] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 446.295266][T15646] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 446.295277][T15646] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 446.295286][T15646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.295297][T15646] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 446.295319][T15646] [ 446.452955][T15646] warn_alloc: 3 callbacks suppressed [ 446.455067][T15646] syz.8.2919: vmalloc error: size 544, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 446.455412][T15646] CPU: 3 UID: 0 PID: 15646 Comm: syz.8.2919 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.455437][T15646] Tainted: [L]=SOFTLOCKUP [ 446.455444][T15646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 446.455455][T15646] Call Trace: [ 446.455462][T15646] [ 446.455470][T15646] dump_stack_lvl+0x100/0x190 [ 446.455498][T15646] warn_alloc.cold+0x9e/0xb2 [ 446.455518][T15646] ? __pfx_warn_alloc+0x10/0x10 [ 446.455544][T15646] ? __kasan_kmalloc+0x8a/0xb0 [ 446.455574][T15646] ? __get_vm_area_node+0x22b/0x350 [ 446.455603][T15646] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 446.455629][T15646] ? __pfx___css_rstat_updated+0x10/0x10 [ 446.455657][T15646] ? __kernel_text_address+0xd/0x30 [ 446.455683][T15646] ? bpf_check+0x1800/0xa7c0 [ 446.455714][T15646] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 446.455738][T15646] ? rcu_read_unlock+0x17/0x60 [ 446.455764][T15646] ? rcu_read_unlock+0x17/0x60 [ 446.455790][T15646] ? find_held_lock+0x2b/0x80 [ 446.455808][T15646] ? rcu_read_unlock+0x17/0x60 [ 446.455831][T15646] ? rcu_read_unlock+0x17/0x60 [ 446.455860][T15646] ? bpf_check+0x1800/0xa7c0 [ 446.455882][T15646] __vmalloc_node_noprof+0xad/0xf0 [ 446.455906][T15646] ? bpf_check+0x1800/0xa7c0 [ 446.455932][T15646] __vmalloc_noprof+0xa3/0x120 [ 446.455957][T15646] ? __pfx___vmalloc_noprof+0x10/0x10 [ 446.455982][T15646] ? bpf_lsm_capable+0x9/0x10 [ 446.456014][T15646] ? security_capable+0x80/0x260 [ 446.456036][T15646] ? lsm_blob_alloc+0x2b/0x90 [ 446.456053][T15646] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 446.456082][T15646] ? security_bpf_prog_load+0x10f/0x2f0 [ 446.456106][T15646] ? bpf_vlog_init+0x118/0x150 [ 446.456132][T15646] bpf_check+0x1800/0xa7c0 [ 446.456158][T15646] ? __css_rstat_updated+0x1ce/0x590 [ 446.456181][T15646] ? __lock_acquire+0x4c5/0x1ec0 [ 446.456210][T15646] ? __lock_acquire+0x4c5/0x1ec0 [ 446.456235][T15646] ? __pfx_bpf_check+0x10/0x10 [ 446.456250][T15646] ? lock_acquire+0x1d1/0x380 [ 446.456264][T15646] ? bpf_prog_load+0x1a09/0x2a80 [ 446.456279][T15646] ? find_held_lock+0x2b/0x80 [ 446.456290][T15646] ? bpf_prog_load+0x1a09/0x2a80 [ 446.456307][T15646] ? __asan_memset+0x23/0x50 [ 446.456321][T15646] ? bpf_prog_load+0x1ac3/0x2a80 [ 446.456335][T15646] bpf_prog_load+0x1ac3/0x2a80 [ 446.456353][T15646] ? __pfx_bpf_prog_load+0x10/0x10 [ 446.456388][T15646] __sys_bpf+0x1f46/0x4a30 [ 446.456412][T15646] ? __pfx___sys_bpf+0x10/0x10 [ 446.456426][T15646] ? lock_acquire+0x1d1/0x380 [ 446.456446][T15646] ? get_pid_task+0x2a/0x250 [ 446.456464][T15646] ? find_held_lock+0x2b/0x80 [ 446.456480][T15646] ? get_pid_task+0xfc/0x250 [ 446.456496][T15646] ? get_pid_task+0xfc/0x250 [ 446.456510][T15646] ? proc_fail_nth_write+0x9f/0x220 [ 446.456521][T15646] ? find_held_lock+0x2b/0x80 [ 446.456535][T15646] ? rcu_read_lock_any_held+0x6a/0x90 [ 446.456548][T15646] ? find_held_lock+0x2b/0x80 [ 446.456559][T15646] ? ksys_write+0x190/0x250 [ 446.456569][T15646] ? ksys_write+0x190/0x250 [ 446.456580][T15646] ? lock_acquire+0x1d1/0x380 [ 446.456603][T15646] ? fput+0x7c/0x100 [ 446.456617][T15646] ? __ia32_sys_bpf+0xcc/0x170 [ 446.456628][T15646] __ia32_sys_bpf+0xcc/0x170 [ 446.456640][T15646] ? __do_fast_syscall_32+0xb3/0x8b0 [ 446.456658][T15646] __do_fast_syscall_32+0x13a/0x8b0 [ 446.456673][T15646] ? lockdep_hardirqs_on+0x7d/0x110 [ 446.456693][T15646] do_fast_syscall_32+0x32/0x70 [ 446.456710][T15646] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 446.456725][T15646] RIP: 0023:0xf7f73fec [ 446.456739][T15646] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 446.456744][T15646] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 446.456755][T15646] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 446.456763][T15646] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 446.456769][T15646] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 446.456775][T15646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.456782][T15646] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 446.456796][T15646] [ 446.456800][T15646] Mem-Info: [ 446.456806][T15646] active_anon:5775 inactive_anon:1559 isolated_anon:0 [ 446.456806][T15646] active_file:2462 inactive_file:23475 isolated_file:0 [ 446.456806][T15646] unevictable:1000 dirty:155 writeback:0 [ 446.456806][T15646] slab_reclaimable:6976 slab_unreclaimable:63836 [ 446.456806][T15646] mapped:24899 shmem:3901 pagetables:1641 [ 446.456806][T15646] sec_pagetables:317 bounce:0 [ 446.456806][T15646] kernel_misc_reclaimable:0 [ 446.456806][T15646] free:29060 free_pcp:13408 free_cma:0 [ 446.456833][T15646] Node 0 active_anon:892kB inactive_anon:28kB active_file:56kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8928kB pagetables:1572kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 446.456860][T15646] Node 1 active_anon:22208kB inactive_anon:6208kB active_file:9792kB inactive_file:93816kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:99504kB dirty:620kB writeback:0kB shmem:15604kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7664kB pagetables:4992kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 446.456894][T15646] Node 0 DMA free:1760kB boost:0kB min:744kB low:928kB high:1112kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:404kB local_pcp:180kB free_cma:0kB [ 446.456941][T15646] lowmem_reserve[]: 0 277 277 277 277 [ 446.456971][T15646] Node 0 DMA32 free:15448kB boost:0kB min:13800kB low:17248kB high:20696kB reserved_highatomic:2048kB free_highatomic:908kB active_anon:892kB inactive_anon:28kB active_file:56kB inactive_file:84kB unevictable:0kB writepending:0kB zspages:1280kB present:1032196kB managed:284620kB mlocked:0kB bounce:0kB free_pcp:15012kB local_pcp:4240kB free_cma:0kB [ 446.457029][T15646] lowmem_reserve[]: 0 0 0 0 0 [ 446.457059][T15646] Node 1 DMA32 free:99032kB boost:0kB min:45984kB low:57480kB high:68976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22208kB inactive_anon:6208kB active_file:9792kB inactive_file:93816kB unevictable:4000kB writepending:620kB zspages:4172kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:38216kB local_pcp:9684kB free_cma:0kB [ 446.457110][T15646] lowmem_reserve[]: 0 0 0 0 0 [ 446.457138][T15646] Node 0 DMA: 0*4kB 2*8kB (UM) 1*16kB (M) 2*32kB (U) 6*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1760kB [ 446.457253][T15646] Node 0 DMA32: 252*4kB (UMEH) 223*8kB (UMEH) 43*16kB (UMEH) 66*32kB (UMEH) 42*64kB (UMEH) 14*128kB (UME) 5*256kB (ME) 6*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 15448kB [ 446.457431][T15646] Node 1 DMA32: 1724*4kB (UME) 835*8kB (UME) 119*16kB (UME) 147*32kB (ME) 91*64kB (UME) 10*128kB (M) 54*256kB (UM) 31*512kB (UM) 3*1024kB (UM) 7*2048kB (UM) 6*4096kB (UM) = 98968kB [ 446.460248][T15646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.460263][T15646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 446.460277][T15646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.460291][T15646] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 446.460304][T15646] 30390 total pagecache pages [ 446.460311][T15646] 554 pages in swap cache [ 446.460318][T15646] Free swap = 84404kB [ 446.460325][T15646] Total swap = 124996kB [ 446.460331][T15646] 524155 pages RAM [ 446.460337][T15646] 0 pages HighMem/MovableOnly [ 446.460343][T15646] 212108 pages reserved [ 446.460349][T15646] 0 pages cma reserved [ 446.714846][T15654] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2921'. [ 446.714896][T15654] tc_dump_action: action bad kind [ 446.872735][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2926'. [ 446.872799][T15667] netlink: 'syz.7.2926': attribute type 5 has an invalid length. [ 446.872844][T15667] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2926'. [ 446.884107][T15667] geneve2: entered promiscuous mode [ 446.884203][T15667] geneve2: entered allmulticast mode [ 446.903137][ T13] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 446.903216][ T13] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 446.903248][ T13] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 446.903277][ T13] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 447.527178][T15691] (syz.4.2934,15691,1):ocfs2_get_sector:1713 ERROR: status = -5 [ 447.527250][T15691] (syz.4.2934,15691,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 447.527284][T15691] (syz.4.2934,15691,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 447.527309][T15691] (syz.4.2934,15691,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 447.770190][T15697] FAULT_INJECTION: forcing a failure. [ 447.770190][T15697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.770261][T15697] CPU: 2 UID: 0 PID: 15697 Comm: syz.4.2936 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.770300][T15697] Tainted: [L]=SOFTLOCKUP [ 447.770309][T15697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 447.770320][T15697] Call Trace: [ 447.770329][T15697] [ 447.770338][T15697] dump_stack_lvl+0x100/0x190 [ 447.770374][T15697] should_fail_ex.cold+0x5/0xa [ 447.770398][T15697] _copy_from_user+0x2e/0xd0 [ 447.770420][T15697] copy_from_buffer+0x7f/0xc0 [ 447.770447][T15697] copy_uabi_to_xstate+0x266/0x650 [ 447.770478][T15697] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 447.770504][T15697] ? __might_fault+0xc5/0x140 [ 447.770536][T15697] ? __fpu_restore_sig+0xc06/0x13b0 [ 447.770560][T15697] ? x86_task_fpu+0x5f/0x90 [ 447.770582][T15697] __fpu_restore_sig+0xfeb/0x13b0 [ 447.770608][T15697] ? __lock_acquire+0x4c5/0x1ec0 [ 447.770633][T15697] ? __pfx___fpu_restore_sig+0x10/0x10 [ 447.770660][T15697] ? __pte_offset_map+0x161/0x310 [ 447.770689][T15697] ? __might_fault+0xc5/0x140 [ 447.770719][T15697] fpu__restore_sig+0x151/0x190 [ 447.770768][T15697] ia32_restore_sigcontext+0x456/0x620 [ 447.770799][T15697] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 447.770833][T15697] ? rcu_is_watching+0x13/0xc0 [ 447.770850][T15697] ? _raw_spin_unlock_irq+0x23/0x50 [ 447.770872][T15697] ? lockdep_hardirqs_on+0x7d/0x110 [ 447.770899][T15697] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 447.770929][T15697] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 447.770965][T15697] do_int80_emulation+0x166/0x650 [ 447.770994][T15697] asm_int80_emulation+0x1a/0x20 [ 447.771012][T15697] RIP: 0023:0xf707efec [ 447.771027][T15697] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 447.771045][T15697] RSP: 002b:00000000f546d50c EFLAGS: 00000292 [ 447.771061][T15697] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 447.771072][T15697] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 447.771084][T15697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 447.771096][T15697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.771109][T15697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 447.771132][T15697] [ 447.928497][T15709] xt_ecn: cannot match TCP bits for non-tcp packets [ 447.949940][T15711] Mount JFS Failure: -22 [ 447.949986][T15711] jfs_mount failed w/return code = -22 [ 448.062588][T15717] netlink: 260 bytes leftover after parsing attributes in process `syz.8.2942'. [ 448.237857][T15724] sctp: [Deprecated]: syz.7.2945 (pid 15724) Use of int in max_burst socket option. [ 448.237857][T15724] Use struct sctp_assoc_value instead [ 448.710348][T15736] FAULT_INJECTION: forcing a failure. [ 448.710348][T15736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.714626][T15736] CPU: 2 UID: 0 PID: 15736 Comm: syz.8.2949 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.714646][T15736] Tainted: [L]=SOFTLOCKUP [ 448.714651][T15736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 448.714657][T15736] Call Trace: [ 448.714662][T15736] [ 448.714666][T15736] dump_stack_lvl+0x100/0x190 [ 448.714685][T15736] should_fail_ex.cold+0x5/0xa [ 448.714700][T15736] _copy_to_user+0x32/0xd0 [ 448.714714][T15736] __copy_siginfo_to_user32+0x9a/0x100 [ 448.714744][T15736] ? __pfx___copy_siginfo_to_user32+0x10/0x10 [ 448.714762][T15736] ? _raw_spin_unlock_irq+0x29/0x50 [ 448.714775][T15736] ? siginfo_layout+0x156/0x290 [ 448.714792][T15736] ia32_setup_rt_frame+0x6ac/0xaf0 [ 448.714813][T15736] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 448.714835][T15736] arch_do_signal_or_restart+0x459/0x7a0 [ 448.714851][T15736] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 448.714870][T15736] ? fput+0x7c/0x100 [ 448.714886][T15736] exit_to_user_mode_loop+0x139/0x700 [ 448.714903][T15736] ? rcu_is_watching+0x13/0xc0 [ 448.714915][T15736] do_int80_emulation+0x555/0x650 [ 448.714933][T15736] asm_int80_emulation+0x1a/0x20 [ 448.714944][T15736] RIP: 0023:0xf71775ab [ 448.714954][T15736] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 448.714964][T15736] RSP: 002b:00000000f54154bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 448.714976][T15736] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 00000000f54155c0 [ 448.714983][T15736] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 448.714990][T15736] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.715008][T15736] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 448.715016][T15736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.715030][T15736] [ 449.128655][T15754] MTD: Couldn't look up './dev/mtdblock0': -2 [ 449.293257][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2957'. [ 449.293297][T15761] netlink: 'syz.7.2957': attribute type 5 has an invalid length. [ 449.293335][T15761] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2957'. [ 449.375747][T15763] netlink: 260 bytes leftover after parsing attributes in process `syz.7.2958'. [ 449.437917][T13705] IPVS: starting estimator thread 0... [ 449.551538][T15769] IPVS: using max 43 ests per chain, 103200 per kthread [ 449.741500][ T9] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 449.771519][ T5740] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 449.902230][ T9] usb 13-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 449.903164][ T9] usb 13-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 449.903177][ T9] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.904037][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 449.904049][ T9] usb 13-1: SerialNumber: syz [ 450.149858][ T9] usb 13-1: 0:2 : does not exist [ 450.194764][ T9] usb 13-1: USB disconnect, device number 9 [ 450.253993][T15253] udevd[15253]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.547512][T15798] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2971'. [ 450.552197][T15798] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2971'. [ 450.707451][T15804] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 450.812315][T15809] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2974'. [ 451.545020][T15817] FAULT_INJECTION: forcing a failure. [ 451.545020][T15817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.545090][T15817] CPU: 3 UID: 0 PID: 15817 Comm: syz.1.2979 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.545128][T15817] Tainted: [L]=SOFTLOCKUP [ 451.545137][T15817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 451.545147][T15817] Call Trace: [ 451.545156][T15817] [ 451.545164][T15817] dump_stack_lvl+0x100/0x190 [ 451.545193][T15817] should_fail_ex.cold+0x5/0xa [ 451.545219][T15817] _copy_from_user+0x2e/0xd0 [ 451.545241][T15817] copy_from_buffer+0x7f/0xc0 [ 451.545269][T15817] copy_uabi_to_xstate+0x266/0x650 [ 451.545299][T15817] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 451.545343][T15817] ? __might_fault+0xc5/0x140 [ 451.545393][T15817] ? __fpu_restore_sig+0xc06/0x13b0 [ 451.545419][T15817] ? x86_task_fpu+0x5f/0x90 [ 451.545456][T15817] __fpu_restore_sig+0xfeb/0x13b0 [ 451.545483][T15817] ? __lock_acquire+0x4c5/0x1ec0 [ 451.545509][T15817] ? __pfx___fpu_restore_sig+0x10/0x10 [ 451.545531][T15817] ? clockevents_program_event+0x1bf/0x820 [ 451.545564][T15817] ? __might_fault+0xc5/0x140 [ 451.545610][T15817] fpu__restore_sig+0x151/0x190 [ 451.545637][T15817] ia32_restore_sigcontext+0x456/0x620 [ 451.545668][T15817] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 451.545716][T15817] ? rcu_is_watching+0x13/0xc0 [ 451.545737][T15817] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.545759][T15817] ? lockdep_hardirqs_on+0x7d/0x110 [ 451.545786][T15817] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 451.545824][T15817] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 451.545876][T15817] do_int80_emulation+0x166/0x650 [ 451.545907][T15817] asm_int80_emulation+0x1a/0x20 [ 451.545926][T15817] RIP: 0023:0xf7fe4fec [ 451.545941][T15817] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 451.545960][T15817] RSP: 002b:00000000f54a650c EFLAGS: 00000292 [ 451.545977][T15817] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 451.545989][T15817] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 451.546003][T15817] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.546014][T15817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.546038][T15817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.546065][T15817] [ 452.185718][T15832] FAULT_INJECTION: forcing a failure. [ 452.185718][T15832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.185783][T15832] CPU: 2 UID: 0 PID: 15832 Comm: syz.4.2983 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.185810][T15832] Tainted: [L]=SOFTLOCKUP [ 452.185816][T15832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 452.185823][T15832] Call Trace: [ 452.185827][T15832] [ 452.185832][T15832] dump_stack_lvl+0x100/0x190 [ 452.185851][T15832] should_fail_ex.cold+0x5/0xa [ 452.185866][T15832] _copy_from_user+0x2e/0xd0 [ 452.185880][T15832] kstrtouint_from_user+0xd6/0x1d0 [ 452.185896][T15832] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 452.185915][T15832] ? lock_acquire+0x1d1/0x380 [ 452.185933][T15832] proc_fail_nth_write+0x83/0x220 [ 452.185945][T15832] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 452.185963][T15832] vfs_write+0x2aa/0x1050 [ 452.185975][T15832] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 452.185986][T15832] ? lock_acquire+0x1d1/0x380 [ 452.186000][T15832] ? __fget_files+0x34/0x3d0 [ 452.186012][T15832] ? __pfx_vfs_write+0x10/0x10 [ 452.186022][T15832] ? find_held_lock+0x2b/0x80 [ 452.186034][T15832] ? __fget_files+0x215/0x3d0 [ 452.186048][T15832] ? __fget_files+0x21f/0x3d0 [ 452.186064][T15832] ksys_write+0x12a/0x250 [ 452.186075][T15832] ? __pfx_ksys_write+0x10/0x10 [ 452.186091][T15832] do_int80_emulation+0x166/0x650 [ 452.186109][T15832] asm_int80_emulation+0x1a/0x20 [ 452.186123][T15832] RIP: 0023:0xf71b75ab [ 452.186133][T15832] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 452.186144][T15832] RSP: 002b:00000000f546d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 452.186155][T15832] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f546d5d0 [ 452.186163][T15832] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.186169][T15832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.186176][T15832] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 452.186183][T15832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.186197][T15832] [ 452.388710][T15839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2986'. [ 452.390348][T15838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2986'. [ 452.595195][T15847] FAULT_INJECTION: forcing a failure. [ 452.595195][T15847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.595266][T15847] CPU: 2 UID: 0 PID: 15847 Comm: syz.7.2988 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.595307][T15847] Tainted: [L]=SOFTLOCKUP [ 452.595317][T15847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 452.595330][T15847] Call Trace: [ 452.595338][T15847] [ 452.595359][T15847] dump_stack_lvl+0x100/0x190 [ 452.595392][T15847] should_fail_ex.cold+0x5/0xa [ 452.595420][T15847] _copy_from_user+0x2e/0xd0 [ 452.595446][T15847] copy_from_buffer+0x7f/0xc0 [ 452.595483][T15847] copy_uabi_to_xstate+0x266/0x650 [ 452.595517][T15847] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 452.595544][T15847] ? __might_fault+0xc5/0x140 [ 452.595577][T15847] ? __fpu_restore_sig+0xc06/0x13b0 [ 452.595605][T15847] ? x86_task_fpu+0x5f/0x90 [ 452.595628][T15847] __fpu_restore_sig+0xfeb/0x13b0 [ 452.595657][T15847] ? __lock_acquire+0x4c5/0x1ec0 [ 452.595685][T15847] ? __pfx___fpu_restore_sig+0x10/0x10 [ 452.595715][T15847] ? __pte_offset_map+0x179/0x310 [ 452.595745][T15847] ? __might_fault+0xc5/0x140 [ 452.595778][T15847] fpu__restore_sig+0x151/0x190 [ 452.595807][T15847] ia32_restore_sigcontext+0x456/0x620 [ 452.595840][T15847] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 452.595877][T15847] ? rcu_is_watching+0x13/0xc0 [ 452.595896][T15847] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.595919][T15847] ? lockdep_hardirqs_on+0x7d/0x110 [ 452.595949][T15847] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 452.595980][T15847] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 452.596016][T15847] do_int80_emulation+0x166/0x650 [ 452.596048][T15847] asm_int80_emulation+0x1a/0x20 [ 452.596070][T15847] RIP: 0023:0xf6fdefec [ 452.596087][T15847] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 452.596106][T15847] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 [ 452.596123][T15847] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 452.596135][T15847] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.596149][T15847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.596161][T15847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.596176][T15847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.596215][T15847] [ 452.653615][T15849] [U]  [ 452.782268][T15853] netlink: 216 bytes leftover after parsing attributes in process `syz.8.2991'. [ 452.875493][T15864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2994'. [ 452.878675][T15864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2994'. [ 453.636013][T15891] FAULT_INJECTION: forcing a failure. [ 453.636013][T15891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.636100][T15891] CPU: 3 UID: 0 PID: 15891 Comm: syz.8.2997 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.636127][T15891] Tainted: [L]=SOFTLOCKUP [ 453.636133][T15891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 453.636143][T15891] Call Trace: [ 453.636147][T15891] [ 453.636153][T15891] dump_stack_lvl+0x100/0x190 [ 453.636172][T15891] should_fail_ex.cold+0x5/0xa [ 453.636188][T15891] _copy_from_user+0x2e/0xd0 [ 453.636202][T15891] copy_from_buffer+0x7f/0xc0 [ 453.636220][T15891] copy_uabi_to_xstate+0x266/0x650 [ 453.636239][T15891] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 453.636255][T15891] ? __might_fault+0xc5/0x140 [ 453.636275][T15891] ? __fpu_restore_sig+0xc06/0x13b0 [ 453.636292][T15891] ? x86_task_fpu+0x5f/0x90 [ 453.636306][T15891] __fpu_restore_sig+0xfeb/0x13b0 [ 453.636322][T15891] ? __lock_acquire+0x4c5/0x1ec0 [ 453.636339][T15891] ? __pfx___fpu_restore_sig+0x10/0x10 [ 453.636353][T15891] ? clockevents_program_event+0x1bf/0x820 [ 453.636373][T15891] ? __might_fault+0xc5/0x140 [ 453.636392][T15891] fpu__restore_sig+0x151/0x190 [ 453.636409][T15891] ia32_restore_sigcontext+0x456/0x620 [ 453.636428][T15891] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 453.636449][T15891] ? rcu_is_watching+0x13/0xc0 [ 453.636460][T15891] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.636475][T15891] ? lockdep_hardirqs_on+0x7d/0x110 [ 453.636492][T15891] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 453.636511][T15891] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 453.636533][T15891] do_int80_emulation+0x166/0x650 [ 453.636551][T15891] asm_int80_emulation+0x1a/0x20 [ 453.636563][T15891] RIP: 0023:0xf7f73fec [ 453.636573][T15891] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 453.636585][T15891] RSP: 002b:00000000f543650c EFLAGS: 00000292 [ 453.636595][T15891] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 453.636602][T15891] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 453.636609][T15891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 453.636616][T15891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.636622][T15891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.636636][T15891] [ 453.738886][T15894] FAULT_INJECTION: forcing a failure. [ 453.738886][T15894] name failslab, interval 1, probability 0, space 0, times 0 [ 453.738961][T15894] CPU: 1 UID: 0 PID: 15894 Comm: syz.4.2999 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.738990][T15894] Tainted: [L]=SOFTLOCKUP [ 453.738998][T15894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 453.739011][T15894] Call Trace: [ 453.739018][T15894] [ 453.739027][T15894] dump_stack_lvl+0x100/0x190 [ 453.739057][T15894] should_fail_ex.cold+0x5/0xa [ 453.739083][T15894] should_failslab+0xc2/0x120 [ 453.739108][T15894] __kmalloc_cache_noprof+0x91/0x6d0 [ 453.739156][T15894] ? __do_sys_fanotify_init+0x5c6/0xe30 [ 453.739184][T15894] __do_sys_fanotify_init+0x5c6/0xe30 [ 453.739212][T15894] __do_fast_syscall_32+0x13a/0x8b0 [ 453.739258][T15894] do_fast_syscall_32+0x32/0x70 [ 453.739287][T15894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 453.739313][T15894] RIP: 0023:0xf707efec [ 453.739339][T15894] Code: Unable to access opcode bytes at 0xf707efc2. [ 453.739349][T15894] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000152 [ 453.739368][T15894] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000001000 [ 453.739381][T15894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 453.739394][T15894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 453.739406][T15894] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 453.739418][T15894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.739444][T15894] [ 453.779576][T15894] PID 15894 killed due to inadequate hugepage pool [ 453.780150][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3000'. [ 454.061530][T15910] netlink: 216 bytes leftover after parsing attributes in process `syz.8.3005'. [ 454.223338][T15915] FAULT_INJECTION: forcing a failure. [ 454.223338][T15915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.223401][T15915] CPU: 2 UID: 0 PID: 15915 Comm: syz.7.3007 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.223428][T15915] Tainted: [L]=SOFTLOCKUP [ 454.223434][T15915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 454.223442][T15915] Call Trace: [ 454.223446][T15915] [ 454.223452][T15915] dump_stack_lvl+0x100/0x190 [ 454.223472][T15915] should_fail_ex.cold+0x5/0xa [ 454.223487][T15915] _copy_from_user+0x2e/0xd0 [ 454.223513][T15915] copy_from_buffer+0x7f/0xc0 [ 454.223534][T15915] copy_uabi_to_xstate+0xc0/0x650 [ 454.223554][T15915] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 454.223571][T15915] ? lock_acquire+0x1d1/0x380 [ 454.223586][T15915] ? __might_fault+0xc5/0x140 [ 454.223607][T15915] ? __fpu_restore_sig+0xc06/0x13b0 [ 454.223623][T15915] ? x86_task_fpu+0x5f/0x90 [ 454.223638][T15915] __fpu_restore_sig+0xfeb/0x13b0 [ 454.223656][T15915] ? __lock_acquire+0x4c5/0x1ec0 [ 454.223671][T15915] ? __pfx___fpu_restore_sig+0x10/0x10 [ 454.223689][T15915] ? __pte_offset_map+0x179/0x310 [ 454.223705][T15915] ? __might_fault+0xc5/0x140 [ 454.223725][T15915] fpu__restore_sig+0x151/0x190 [ 454.223741][T15915] ia32_restore_sigcontext+0x456/0x620 [ 454.223761][T15915] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 454.223782][T15915] ? rcu_is_watching+0x13/0xc0 [ 454.223793][T15915] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.223807][T15915] ? lockdep_hardirqs_on+0x7d/0x110 [ 454.223835][T15915] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 454.223856][T15915] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 454.223879][T15915] do_int80_emulation+0x166/0x650 [ 454.223897][T15915] asm_int80_emulation+0x1a/0x20 [ 454.223910][T15915] RIP: 0023:0xf6fdefec [ 454.223920][T15915] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 454.223932][T15915] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 [ 454.223942][T15915] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 454.223949][T15915] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 454.223956][T15915] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.223975][T15915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.223982][T15915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 454.223996][T15915] [ 454.441566][T15920] sctp_transport_update_pmtu: 47 callbacks suppressed [ 454.451522][T15920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 454.453021][T15920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 454.453783][T15920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 454.454417][T15920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 454.455964][T15920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 454.456687][T15920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 454.456955][T15920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 454.457217][T15920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 454.458154][T15920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 454.458999][T15920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 455.080872][T15932] [U] ¥ [ 455.080905][T15932] [U] [ 455.080922][T15932] [U] [ 455.080938][T15932] [U] [ 455.080997][T15932] [U] [ 455.081024][T15932] [U] [ 455.081043][T15932] [U] [ 455.081070][T15932] [U] [ 455.081214][T15932] [U] [ 455.081246][T15932] [U] [ 455.081265][T15932] [U] [ 455.081286][T15932] [U] [ 455.081341][T15932] [U] [ 455.081378][T15932] [U] [ 455.081395][T15932] [U] [ 455.081410][T15932] [U] [ 455.081439][T15932] [U] [ 455.081466][T15932] [U] [ 455.081482][T15932] [U] [ 455.081497][T15932] [U] [ 455.081532][T15932] [U] [ 455.081559][T15932] [U] [ 455.081575][T15932] [U] [ 455.081590][T15932] [U] [ 455.081618][T15932] [U] [ 455.081645][T15932] [U] [ 455.081662][T15932] [U] [ 455.081677][T15932] [U] [ 455.081711][T15932] [U] [ 455.081737][T15932] [U] [ 455.081754][T15932] [U] [ 455.081769][T15932] [U] [ 455.081797][T15932] [U] [ 455.081823][T15932] [U] [ 455.081840][T15932] [U] [ 455.081855][T15932] [U] [ 455.081888][T15932] [U] [ 455.081914][T15932] [U] [ 455.081931][T15932] [U] [ 455.081947][T15932] [U] [ 455.081974][T15932] [U] [ 455.081991][T15932] [U] [ 455.082006][T15932] [U] [ 455.082021][T15932] [U] [ 455.082044][T15932] [U] [ 455.082059][T15932] [U] [ 455.082074][T15932] [U] [ 455.082089][T15932] [U] [ 455.082105][T15932] [U] [ 455.082120][T15932] [U] [ 455.082134][T15932] [U] [ 455.082150][T15932] [U] [ 455.082171][T15932] [U] [ 455.082186][T15932] [U] [ 455.082201][T15932] [U] [ 455.082216][T15932] [U] [ 455.082240][T15932] [U] [ 455.082257][T15932] [U] [ 455.082274][T15932] [U] [ 455.082291][T15932] [U] [ 455.082314][T15932] [U] [ 455.082331][T15932] [U] [ 455.082348][T15932] [U] [ 455.082365][T15932] [U] [ 455.082384][T15932] [U] [ 455.082400][T15932] [U] [ 455.082417][T15932] [U] [ 455.082433][T15932] [U] [ 455.082453][T15932] [U] [ 455.082469][T15932] [U] [ 455.082484][T15932] [U] [ 455.082499][T15932] [U] [ 455.082515][T15932] [U] [ 455.082530][T15932] [U] [ 455.082545][T15932] [U] [ 455.082560][T15932] [U] [ 455.082581][T15932] [U] [ 455.082596][T15932] [U] [ 455.082611][T15932] [U] [ 455.082626][T15932] [U] [ 455.082642][T15932] [U] [ 455.082657][T15932] [U] [ 455.082673][T15932] [U] [ 455.082688][T15932] [U] [ 455.082735][T15932] [U] [ 455.082755][T15932] [U] [ 455.082771][T15932] [U] [ 455.082788][T15932] [U] [ 455.082806][T15932] [U] [ 455.082823][T15932] [U] [ 455.082841][T15932] [U] [ 455.082858][T15932] [U] [ 455.082881][T15932] [U] [ 455.082898][T15932] [U] [ 455.082915][T15932] [U] [ 455.082931][T15932] [U] [ 455.082948][T15932] [U] [ 455.082963][T15932] [U] [ 455.082978][T15932] [U] [ 455.082993][T15932] [U] [ 455.083690][T15932] [U] [ 455.083710][T15932] [U] [ 455.083727][T15932] [U] [ 455.083744][T15932] [U] [ 455.083762][T15932] [U] [ 455.083780][T15932] [U] [ 455.083798][T15932] [U] [ 455.083814][T15932] [U] [ 455.083838][T15932] [U] [ 455.083855][T15932] [U] [ 455.083871][T15932] [U] [ 455.083885][T15932] [U] [ 455.083902][T15932] [U] [ 455.083916][T15932] [U] [ 455.083931][T15932] [U] [ 455.083946][T15932] [U] [ 455.083966][T15932] [U] [ 455.083981][T15932] [U] [ 455.083996][T15932] [U] [ 455.084011][T15932] [U] [ 455.084027][T15932] [U] [ 455.084042][T15932] [U] [ 455.084057][T15932] [U] [ 455.084072][T15932] [U] [ 455.084088][T15932] [U] [ 455.084104][T15932] [U] [ 455.084123][T15932] [U] [ 455.233749][T15931] [U] [ 456.271306][T15948] FAULT_INJECTION: forcing a failure. [ 456.271306][T15948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.271348][T15948] CPU: 1 UID: 0 PID: 15948 Comm: syz.1.3016 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.271374][T15948] Tainted: [L]=SOFTLOCKUP [ 456.271380][T15948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 456.271387][T15948] Call Trace: [ 456.271392][T15948] [ 456.271398][T15948] dump_stack_lvl+0x100/0x190 [ 456.271417][T15948] should_fail_ex.cold+0x5/0xa [ 456.271432][T15948] _copy_from_user+0x2e/0xd0 [ 456.271452][T15948] copy_from_buffer+0x7f/0xc0 [ 456.271471][T15948] copy_uabi_to_xstate+0xc0/0x650 [ 456.271490][T15948] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 456.271506][T15948] ? lock_acquire+0x1d1/0x380 [ 456.271523][T15948] ? __might_fault+0xc5/0x140 [ 456.271543][T15948] ? __fpu_restore_sig+0xc06/0x13b0 [ 456.271558][T15948] ? x86_task_fpu+0x5f/0x90 [ 456.271572][T15948] __fpu_restore_sig+0xfeb/0x13b0 [ 456.271588][T15948] ? __lock_acquire+0x4c5/0x1ec0 [ 456.271603][T15948] ? __pfx___fpu_restore_sig+0x10/0x10 [ 456.271618][T15948] ? clockevents_program_event+0x1bf/0x820 [ 456.271637][T15948] ? __might_fault+0xc5/0x140 [ 456.271656][T15948] fpu__restore_sig+0x151/0x190 [ 456.271673][T15948] ia32_restore_sigcontext+0x456/0x620 [ 456.271691][T15948] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 456.271712][T15948] ? rcu_is_watching+0x13/0xc0 [ 456.271725][T15948] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.271746][T15948] ? lockdep_hardirqs_on+0x7d/0x110 [ 456.271772][T15948] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 456.271800][T15948] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 456.271834][T15948] do_int80_emulation+0x166/0x650 [ 456.271858][T15948] asm_int80_emulation+0x1a/0x20 [ 456.271870][T15948] RIP: 0023:0xf7fe4fec [ 456.271880][T15948] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 456.271891][T15948] RSP: 002b:00000000f54a650c EFLAGS: 00000292 [ 456.271901][T15948] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 456.271908][T15948] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 456.271914][T15948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.271921][T15948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.271928][T15948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.271945][T15948] [ 456.487799][T15950] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3017'. [ 456.488076][T15950] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3017'. [ 456.729770][T15955] netlink: 216 bytes leftover after parsing attributes in process `syz.7.3018'. [ 456.815889][T15957] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3019'. [ 456.819151][T15957] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3019'. [ 456.820545][T15957] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3019'. [ 456.820649][T15959] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3019'. [ 456.894451][T15963] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3020'. [ 457.918878][T15986] netlink: 'syz.7.3025': attribute type 1 has an invalid length. [ 457.933482][T15986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.946261][T15986] bond1: (slave veth0_to_bond): making interface the new active one [ 457.948948][T15986] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 457.953296][T15986] bond1: entered promiscuous mode [ 457.953338][T15986] veth0_to_bond: entered promiscuous mode [ 457.953494][T15986] bond1: entered allmulticast mode [ 457.953503][T15986] veth0_to_bond: entered allmulticast mode [ 458.220952][ T6921] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 458.401018][ T6921] usb 12-1: Using ep0 maxpacket: 8 [ 458.401559][ T6921] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 458.402349][ T6921] usb 12-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 458.402374][ T6921] usb 12-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.402394][ T6921] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.408746][ T6921] usbtmc 12-1:16.0: bulk endpoints not found [ 458.800273][T16006] netlink: 276 bytes leftover after parsing attributes in process `syz.8.3031'. [ 458.805680][T16006] netlink: 276 bytes leftover after parsing attributes in process `syz.8.3031'. [ 459.334795][T16013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.335865][T16013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.815829][T16023] Bluetooth: MGMT ver 1.23 [ 460.980837][ T5740] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 460.990004][ T50] usb 12-1: USB disconnect, device number 11 [ 461.110802][ T5740] usb 6-1: device descriptor read/64, error -71 [ 461.350886][ T5740] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 461.481433][ T5740] usb 6-1: device descriptor read/64, error -71 [ 461.508198][T16041] veth0_vlan: left promiscuous mode [ 461.508859][T16041] team0: Device veth0_vlan failed to register rx_handler [ 461.600880][ T5740] usb usb6-port1: attempt power cycle [ 461.646332][T16048] __nla_validate_parse: 1 callbacks suppressed [ 461.646376][T16048] netlink: 216 bytes leftover after parsing attributes in process `syz.8.3042'. [ 461.940923][ T5740] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 461.971700][ T5740] usb 6-1: device descriptor read/8, error -71 [ 462.250758][ T5740] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 462.281199][ T5740] usb 6-1: device descriptor read/8, error -71 [ 462.390907][ T5740] usb usb6-port1: unable to enumerate USB device [ 462.904901][T16061] FAULT_INJECTION: forcing a failure. [ 462.904901][T16061] name failslab, interval 1, probability 0, space 0, times 0 [ 462.904954][T16061] CPU: 1 UID: 0 PID: 16061 Comm: syz.8.3045 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.904971][T16061] Tainted: [L]=SOFTLOCKUP [ 462.904976][T16061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 462.904983][T16061] Call Trace: [ 462.904988][T16061] [ 462.904993][T16061] dump_stack_lvl+0x100/0x190 [ 462.905012][T16061] should_fail_ex.cold+0x5/0xa [ 462.905027][T16061] should_failslab+0xc2/0x120 [ 462.905043][T16061] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 462.905057][T16061] ? __d_alloc+0x35/0xa50 [ 462.905073][T16061] __d_alloc+0x35/0xa50 [ 462.905088][T16061] d_alloc_pseudo+0x1c/0xc0 [ 462.905105][T16061] alloc_file_pseudo+0x118/0x290 [ 462.905122][T16061] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 462.905138][T16061] ? alloc_fd+0x471/0x7a0 [ 462.905153][T16061] sock_alloc_file+0x50/0x210 [ 462.905168][T16061] __sys_socket+0x1c0/0x260 [ 462.905179][T16061] ? __pfx___sys_socket+0x10/0x10 [ 462.905189][T16061] ? __sys_setsockopt+0x139/0x190 [ 462.905205][T16061] __ia32_sys_socket+0x72/0xb0 [ 462.905215][T16061] ? lockdep_hardirqs_on+0x7d/0x110 [ 462.905232][T16061] __do_fast_syscall_32+0x13a/0x8b0 [ 462.905255][T16061] do_fast_syscall_32+0x32/0x70 [ 462.905273][T16061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 462.905288][T16061] RIP: 0023:0xf7f73fec [ 462.905302][T16061] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 462.905308][T16061] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 462.905321][T16061] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000003 [ 462.905328][T16061] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 462.905335][T16061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.905342][T16061] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 462.905348][T16061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 462.905362][T16061] [ 463.899520][T16079] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3051'. [ 463.902796][T16079] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3051'. [ 463.913638][T16080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3050'. [ 464.051253][T16090] FAULT_INJECTION: forcing a failure. [ 464.051253][T16090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.051316][T16090] CPU: 3 UID: 0 PID: 16090 Comm: syz.1.3053 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.051340][T16090] Tainted: [L]=SOFTLOCKUP [ 464.051347][T16090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 464.051357][T16090] Call Trace: [ 464.051363][T16090] [ 464.051371][T16090] dump_stack_lvl+0x100/0x190 [ 464.051398][T16090] should_fail_ex.cold+0x5/0xa [ 464.051419][T16090] _copy_to_user+0x32/0xd0 [ 464.051441][T16090] simple_read_from_buffer+0xcb/0x170 [ 464.051463][T16090] proc_fail_nth_read+0x1af/0x230 [ 464.051490][T16090] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.051518][T16090] ? rw_verify_area+0xce/0x6d0 [ 464.051541][T16090] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.051567][T16090] vfs_read+0x1e4/0xb40 [ 464.051584][T16090] ? lock_acquire+0x1d1/0x380 [ 464.051606][T16090] ? __fget_files+0x34/0x3d0 [ 464.051624][T16090] ? __pfx_vfs_read+0x10/0x10 [ 464.051638][T16090] ? find_held_lock+0x2b/0x80 [ 464.051656][T16090] ? __fget_files+0x215/0x3d0 [ 464.051678][T16090] ? __fget_files+0x21f/0x3d0 [ 464.051702][T16090] ksys_read+0x12a/0x250 [ 464.051719][T16090] ? __pfx_ksys_read+0x10/0x10 [ 464.051741][T16090] do_int80_emulation+0x166/0x650 [ 464.051767][T16090] asm_int80_emulation+0x1a/0x20 [ 464.051784][T16090] RIP: 0023:0xf71e75ab [ 464.051804][T16090] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 464.051820][T16090] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 464.051837][T16090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0 [ 464.051849][T16090] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 464.051859][T16090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 464.051869][T16090] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 464.051878][T16090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 464.051901][T16090] [ 464.132689][T16092] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3054'. [ 465.665978][T16120] FAULT_INJECTION: forcing a failure. [ 465.665978][T16120] name failslab, interval 1, probability 0, space 0, times 0 [ 465.670214][T16120] CPU: 0 UID: 0 PID: 16120 Comm: syz.7.3063 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.670247][T16120] Tainted: [L]=SOFTLOCKUP [ 465.670253][T16120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 465.670261][T16120] Call Trace: [ 465.670267][T16120] [ 465.670272][T16120] dump_stack_lvl+0x100/0x190 [ 465.670292][T16120] should_fail_ex.cold+0x5/0xa [ 465.670309][T16120] should_failslab+0xc2/0x120 [ 465.670327][T16120] __kmalloc_cache_noprof+0x91/0x6d0 [ 465.670345][T16120] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 465.670362][T16120] ? device_create_groups_vargs+0x8a/0x270 [ 465.670383][T16120] device_create_groups_vargs+0x8a/0x270 [ 465.670403][T16120] device_create+0xed/0x130 [ 465.670421][T16120] ? __pfx_device_create+0x10/0x10 [ 465.670437][T16120] ? lockdep_init_map_type+0x5c/0x250 [ 465.670468][T16120] ? timer_init_key+0x150/0x310 [ 465.670490][T16120] ? ieee80211_roc_setup+0x136/0x270 [ 465.670505][T16120] ? ieee80211_alloc_hw_nm+0x1a2a/0x2310 [ 465.670524][T16120] mac80211_hwsim_new_radio+0x37c/0x6510 [ 465.670556][T16120] ? __asan_memset+0x23/0x50 [ 465.670577][T16120] ? __nla_validate_parse+0x1e7/0x28b0 [ 465.670610][T16120] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 465.670673][T16120] hwsim_new_radio_nl+0xc6b/0x13f0 [ 465.670704][T16120] ? trace_kmalloc+0xeb/0x110 [ 465.670732][T16120] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 465.670773][ T5824] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 465.670770][T16120] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 465.670794][T16120] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 465.670830][T16120] genl_family_rcv_msg_doit+0x214/0x300 [ 465.670856][T16120] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 465.670880][T16120] ? genl_get_cmd+0x3e7/0x760 [ 465.670910][T16120] ? bpf_lsm_capable+0x9/0x10 [ 465.670947][T16120] ? security_capable+0x80/0x260 [ 465.670971][T16120] ? ns_capable+0xd2/0xf0 [ 465.671008][T16120] genl_rcv_msg+0x560/0x800 [ 465.671047][T16120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 465.671073][T16120] ? __lock_acquire+0x4c5/0x1ec0 [ 465.671095][T16120] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 465.671122][T16120] netlink_rcv_skb+0x159/0x420 [ 465.671135][T16120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 465.671151][T16120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 465.671170][T16120] ? netlink_deliver_tap+0x1ae/0xcc0 [ 465.671184][T16120] genl_rcv+0x28/0x40 [ 465.671197][T16120] netlink_unicast+0x585/0x850 [ 465.671213][T16120] ? __pfx_netlink_unicast+0x10/0x10 [ 465.671230][T16120] netlink_sendmsg+0x8b0/0xda0 [ 465.671245][T16120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.671260][T16120] ? apparmor_socket_sendmsg+0x165/0x280 [ 465.671278][T16120] ____sys_sendmsg+0xa4d/0xbe0 [ 465.671295][T16120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.671309][T16120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.671337][T16120] ___sys_sendmsg+0x190/0x1e0 [ 465.671357][T16120] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.671375][T16120] ? futex_wait+0x11e/0x370 [ 465.671396][T16120] ? find_held_lock+0x2b/0x80 [ 465.671418][T16120] __sys_sendmsg+0x160/0x210 [ 465.671433][T16120] ? __pfx___sys_sendmsg+0x10/0x10 [ 465.671457][T16120] __do_fast_syscall_32+0x13a/0x8b0 [ 465.671476][T16120] do_fast_syscall_32+0x32/0x70 [ 465.671494][T16120] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 465.671509][T16120] RIP: 0023:0xf6fdefec [ 465.671524][T16120] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 465.671530][T16120] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 465.671542][T16120] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 465.671550][T16120] RDX: 0000000004044084 RSI: 0000000000000000 RDI: 0000000000000000 [ 465.671559][T16120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 465.671566][T16120] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 465.671574][T16120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.671589][T16120] [ 465.800609][ T5824] usb 6-1: device descriptor read/64, error -71 [ 466.037836][T16123] netlink: zone id is out of range [ 466.037879][T16123] netlink: zone id is out of range [ 466.038481][T16123] FAULT_INJECTION: forcing a failure. [ 466.038481][T16123] name failslab, interval 1, probability 0, space 0, times 0 [ 466.038500][T16123] CPU: 1 UID: 0 PID: 16123 Comm: syz.8.3064 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.038516][T16123] Tainted: [L]=SOFTLOCKUP [ 466.038520][T16123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 466.038528][T16123] Call Trace: [ 466.038532][T16123] [ 466.038537][T16123] dump_stack_lvl+0x100/0x190 [ 466.038556][T16123] should_fail_ex.cold+0x5/0xa [ 466.038572][T16123] should_failslab+0xc2/0x120 [ 466.038588][T16123] __kmalloc_cache_noprof+0x91/0x6d0 [ 466.038606][T16123] ? device_add+0xd3f/0x1970 [ 466.038625][T16123] device_add+0xd3f/0x1970 [ 466.038642][T16123] ? __pfx_device_add+0x10/0x10 [ 466.038685][T16123] ? kfree_const+0x5a/0x70 [ 466.038702][T16123] ? kfree+0x1e5/0x6d0 [ 466.038724][T16123] device_create_groups_vargs+0x1f8/0x270 [ 466.038744][T16123] device_create+0xed/0x130 [ 466.038761][T16123] ? __pfx_device_create+0x10/0x10 [ 466.038778][T16123] ? lockdep_init_map_type+0x5c/0x250 [ 466.038795][T16123] ? timer_init_key+0x150/0x310 [ 466.038815][T16123] ? ieee80211_roc_setup+0x136/0x270 [ 466.038829][T16123] ? ieee80211_alloc_hw_nm+0x1a2a/0x2310 [ 466.038848][T16123] mac80211_hwsim_new_radio+0x37c/0x6510 [ 466.038871][T16123] ? __asan_memset+0x23/0x50 [ 466.038882][T16123] ? __nla_validate_parse+0x1e7/0x28b0 [ 466.038909][T16123] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 466.038937][T16123] hwsim_new_radio_nl+0xc6b/0x13f0 [ 466.038960][T16123] ? trace_kmalloc+0xeb/0x110 [ 466.038978][T16123] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 466.038998][T16123] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 466.039014][T16123] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 466.039032][T16123] genl_family_rcv_msg_doit+0x214/0x300 [ 466.039047][T16123] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 466.039061][T16123] ? genl_get_cmd+0x3e7/0x760 [ 466.039077][T16123] ? bpf_lsm_capable+0x9/0x10 [ 466.039092][T16123] ? security_capable+0x80/0x260 [ 466.039106][T16123] ? ns_capable+0xd2/0xf0 [ 466.039124][T16123] genl_rcv_msg+0x560/0x800 [ 466.039142][T16123] ? __pfx_genl_rcv_msg+0x10/0x10 [ 466.039155][T16123] ? __lock_acquire+0x4c5/0x1ec0 [ 466.039170][T16123] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 466.039191][T16123] netlink_rcv_skb+0x159/0x420 [ 466.039203][T16123] ? __pfx_genl_rcv_msg+0x10/0x10 [ 466.039217][T16123] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 466.039236][T16123] ? netlink_deliver_tap+0x1ae/0xcc0 [ 466.039249][T16123] genl_rcv+0x28/0x40 [ 466.039261][T16123] netlink_unicast+0x585/0x850 [ 466.039275][T16123] ? __pfx_netlink_unicast+0x10/0x10 [ 466.039291][T16123] netlink_sendmsg+0x8b0/0xda0 [ 466.039312][T16123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.039327][T16123] ? apparmor_socket_sendmsg+0x165/0x280 [ 466.039346][T16123] ____sys_sendmsg+0xa4d/0xbe0 [ 466.039363][T16123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.039377][T16123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.039401][T16123] ___sys_sendmsg+0x190/0x1e0 [ 466.039426][T16123] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.039451][T16123] ? futex_wait+0x11e/0x370 [ 466.039484][T16123] ? find_held_lock+0x2b/0x80 [ 466.039511][T16123] __sys_sendmsg+0x160/0x210 [ 466.039526][T16123] ? __pfx___sys_sendmsg+0x10/0x10 [ 466.039547][T16123] __do_fast_syscall_32+0x13a/0x8b0 [ 466.039566][T16123] do_fast_syscall_32+0x32/0x70 [ 466.039582][T16123] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 466.039597][T16123] RIP: 0023:0xf7f73fec [ 466.039611][T16123] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 466.039616][T16123] RSP: 002b:00000000f541550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 466.039628][T16123] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 466.039635][T16123] RDX: 0000000004044084 RSI: 0000000000000000 RDI: 0000000000000000 [ 466.039641][T16123] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 466.039648][T16123] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 466.039655][T16123] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 466.039669][T16123] [ 466.042687][ T5824] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 466.180525][ T5824] usb 6-1: device descriptor read/64, error -71 [ 466.195821][T16126] kAFS: unparsable volume name [ 466.195984][T16125] kAFS: unparsable volume name [ 466.221517][T16126] xt_MASQUERADE: bad rangesize 29 [ 466.290783][ T5824] usb usb6-port1: attempt power cycle [ 466.370273][T16129] netlink: 'syz.7.3066': attribute type 3 has an invalid length. [ 466.457910][T16131] netlink: 204 bytes leftover after parsing attributes in process `syz.7.3067'. [ 466.630546][ T5824] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 466.651054][ T5824] usb 6-1: device descriptor read/8, error -71 [ 466.890845][ T5824] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 466.911080][ T5824] usb 6-1: device descriptor read/8, error -71 [ 467.020744][ T5824] usb usb6-port1: unable to enumerate USB device [ 467.344661][T16147] trusted_key: encrypted_key: master key parameter 'rusted:syz' is invalid [ 467.351232][T16147] trusted_key: encrypted_key: keyword 'upeate' not recognized [ 467.464271][T16153] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 467.502118][T16156] bonding: mM% is being created... [ 467.511804][T16156] bonding: mM% creation failed [ 467.708385][T16163] 9pnet_fd: Insufficient options for proto=fd [ 467.734045][T16162] FAULT_INJECTION: forcing a failure. [ 467.734045][T16162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 467.739644][T16162] CPU: 2 UID: 0 PID: 16162 Comm: syz.7.3076 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.739673][T16162] Tainted: [L]=SOFTLOCKUP [ 467.739679][T16162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 467.739686][T16162] Call Trace: [ 467.739691][T16162] [ 467.739696][T16162] dump_stack_lvl+0x100/0x190 [ 467.739716][T16162] should_fail_ex.cold+0x5/0xa [ 467.739729][T16162] ? prepare_alloc_pages+0x16d/0x5b0 [ 467.739745][T16162] should_fail_alloc_page+0xeb/0x140 [ 467.739760][T16162] prepare_alloc_pages+0x1f0/0x5b0 [ 467.739777][T16162] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 467.739798][T16162] ? mark_held_locks+0x40/0x70 [ 467.739813][T16162] ? smp_call_function_many_cond+0x1458/0x18c0 [ 467.739828][T16162] ? lockdep_hardirqs_on+0x7d/0x110 [ 467.739842][T16162] ? __pfx_flush_tlb_func+0x10/0x10 [ 467.739853][T16162] ? smp_call_function_many_cond+0x944/0x18c0 [ 467.739871][T16162] ? __pfx_should_flush_tlb+0x10/0x10 [ 467.739887][T16162] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 467.739907][T16162] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 467.739924][T16162] ? rcu_is_watching+0x13/0xc0 [ 467.739935][T16162] ? trace_tlb_flush+0x14b/0x1a0 [ 467.739956][T16162] ? __lock_acquire+0x4c5/0x1ec0 [ 467.739970][T16162] ? __css_rstat_updated+0x1ce/0x590 [ 467.739987][T16162] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 467.740003][T16162] ? policy_nodemask+0xed/0x4f0 [ 467.740019][T16162] alloc_pages_mpol+0x201/0x550 [ 467.740034][T16162] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 467.740050][T16162] ? page_table_check_set+0x31e/0x580 [ 467.740066][T16162] folio_alloc_mpol_noprof+0x36/0x260 [ 467.740084][T16162] vma_alloc_folio_noprof+0xed/0x1d0 [ 467.740101][T16162] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 467.740117][T16162] ? rcu_read_unlock+0x2d/0xb0 [ 467.740133][T16162] ? rcu_read_unlock+0x2d/0xb0 [ 467.740152][T16162] do_wp_page+0xe11/0x45c0 [ 467.740169][T16162] ? lock_acquire+0x1d1/0x380 [ 467.740184][T16162] ? __pfx_do_wp_page+0x10/0x10 [ 467.740199][T16162] ? do_raw_spin_lock+0x128/0x260 [ 467.740216][T16162] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 467.740237][T16162] __handle_mm_fault+0x1cd2/0x2f60 [ 467.740257][T16162] ? __pfx___handle_mm_fault+0x10/0x10 [ 467.740272][T16162] ? __pfx_mt_find+0x10/0x10 [ 467.740296][T16162] ? find_vma+0xbf/0x140 [ 467.740307][T16162] ? __pfx_find_vma+0x10/0x10 [ 467.740321][T16162] handle_mm_fault+0x363/0xa20 [ 467.740354][T16162] do_user_addr_fault+0x745/0x12f0 [ 467.740373][T16162] exc_page_fault+0x6f/0xd0 [ 467.740388][T16162] asm_exc_page_fault+0x26/0x30 [ 467.740400][T16162] RIP: 0010:_copy_to_iter+0x38c/0x1720 [ 467.740413][T16162] Code: 00 00 00 00 e9 4d ff ff ff e8 00 82 e5 fc 4c 8b 74 24 18 44 89 fe 4c 89 f7 e8 10 b0 57 fd 0f 01 cb 4c 89 f9 48 89 df 4c 89 f6 a4 0f 1f 00 48 89 cb 0f 01 ca 4c 89 f8 48 29 c8 48 89 44 24 08 [ 467.740424][T16162] RSP: 0000:ffffc90007a9fa18 EFLAGS: 00050246 [ 467.740434][T16162] RAX: 0000000000000001 RBX: 0000000080006786 RCX: 0000000000000786 [ 467.740441][T16162] RDX: 0000000000000001 RSI: ffff88805b08287a RDI: 0000000080007000 [ 467.740448][T16162] RBP: ffffc90007a9fd68 R08: 0000000000000000 R09: ffffed100b6105ff [ 467.740455][T16162] R10: ffff88805b082fff R11: 0000000000000000 R12: 0000000080007786 [ 467.740462][T16162] R13: 00007ffffffff000 R14: ffff88805b082000 R15: 0000000000001000 [ 467.740476][T16162] ? _copy_to_iter+0x380/0x1720 [ 467.740491][T16162] ? __pfx__copy_to_iter+0x10/0x10 [ 467.740504][T16162] ? __folio_put+0x3b9/0x5f0 [ 467.740519][T16162] ? __pfx___folio_put+0x10/0x10 [ 467.740537][T16162] copy_page_to_iter+0x285/0x370 [ 467.740550][T16162] anon_pipe_read+0x47e/0x1200 [ 467.740568][T16162] ? get_pid_task+0xfc/0x250 [ 467.740579][T16162] ? __pfx_anon_pipe_read+0x10/0x10 [ 467.740592][T16162] ? common_file_perm+0x266/0x500 [ 467.740609][T16162] ? bpf_lsm_file_permission+0x9/0x10 [ 467.740623][T16162] ? security_file_permission+0x76/0x210 [ 467.740640][T16162] ? rw_verify_area+0xce/0x6d0 [ 467.740656][T16162] ? __pfx_anon_pipe_read+0x10/0x10 [ 467.740668][T16162] vfs_read+0x960/0xb40 [ 467.740681][T16162] ? __pfx_vfs_read+0x10/0x10 [ 467.740690][T16162] ? find_held_lock+0x2b/0x80 [ 467.740711][T16162] ksys_read+0x1f8/0x250 [ 467.740722][T16162] ? __pfx_ksys_read+0x10/0x10 [ 467.740731][T16162] ? ksys_write+0x1ac/0x250 [ 467.740742][T16162] ? __pfx_ksys_write+0x10/0x10 [ 467.740755][T16162] __do_fast_syscall_32+0x13a/0x8b0 [ 467.740771][T16162] ? lockdep_hardirqs_on+0x7d/0x110 [ 467.740787][T16162] do_fast_syscall_32+0x32/0x70 [ 467.740803][T16162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.740817][T16162] RIP: 0023:0xf6fdefec [ 467.740829][T16162] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 467.740834][T16162] RSP: 002b:00000000f538b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 467.740845][T16162] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 467.740851][T16162] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 467.740858][T16162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.740864][T16162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.740871][T16162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.740885][T16162] [ 468.490454][T16175] overlayfs: statfs failed on './file0' [ 468.652393][T16180] FAULT_INJECTION: forcing a failure. [ 468.652393][T16180] name failslab, interval 1, probability 0, space 0, times 0 [ 468.669857][T16180] CPU: 2 UID: 0 PID: 16180 Comm: syz.1.3080 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.669889][T16180] Tainted: [L]=SOFTLOCKUP [ 468.669894][T16180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 468.669911][T16180] Call Trace: [ 468.669919][T16180] [ 468.669926][T16180] dump_stack_lvl+0x100/0x190 [ 468.669956][T16180] should_fail_ex.cold+0x5/0xa [ 468.669973][T16180] should_failslab+0xc2/0x120 [ 468.669988][T16180] __kmalloc_cache_noprof+0x91/0x6d0 [ 468.670006][T16180] ? drm_self_refresh_helper_alter_state+0x3c4/0x520 [ 468.670028][T16180] ? drm_atomic_helper_setup_commit+0x56f/0x14f0 [ 468.670059][T16180] drm_atomic_helper_setup_commit+0x56f/0x14f0 [ 468.670083][T16180] drm_atomic_helper_commit+0xa9/0x380 [ 468.670100][T16180] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 468.670117][T16180] drm_atomic_commit+0x230/0x300 [ 468.670132][T16180] ? __pfx_drm_atomic_commit+0x10/0x10 [ 468.670147][T16180] ? __pfx___drm_printfn_info+0x10/0x10 [ 468.670163][T16180] ? drm_client_rotation+0x451/0x6a0 [ 468.670183][T16180] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 468.670212][T16180] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 468.670240][T16180] ? __mutex_lock+0x8f4/0x1bd0 [ 468.670279][T16180] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 468.670307][T16180] drm_client_modeset_commit_locked+0x14d/0x580 [ 468.670338][T16180] drm_fb_helper_pan_display+0x32d/0xa40 [ 468.670365][T16180] fb_pan_display+0x195/0x820 [ 468.670381][T16180] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 468.670396][T16180] ? queue_delayed_work_on+0x122/0x1e0 [ 468.670412][T16180] bit_update_start+0x48/0x1f0 [ 468.670430][T16180] fbcon_switch+0x1119/0x19f0 [ 468.670450][T16180] ? __pfx_fbcon_switch+0x10/0x10 [ 468.670474][T16180] ? __pfx_bit_cursor+0x10/0x10 [ 468.670490][T16180] ? fbcon_cursor+0x24c/0x5e0 [ 468.670506][T16180] ? is_console_locked+0x9/0x20 [ 468.670520][T16180] ? con_is_visible+0x65/0x150 [ 468.670539][T16180] redraw_screen+0x2c1/0x760 [ 468.670552][T16180] ? __pfx_redraw_screen+0x10/0x10 [ 468.670566][T16180] ? fbcon_set_palette+0x156/0x5f0 [ 468.670583][T16180] fbcon_modechanged+0x4ee/0x7f0 [ 468.670602][T16180] fbcon_set_all_vcs+0x39b/0x470 [ 468.670620][T16180] fbcon_update_vcs+0x2c/0x60 [ 468.670660][T16180] fb_set_var_from_user+0xa7/0xc0 [ 468.670682][T16180] do_fb_ioctl+0x1f3/0x730 [ 468.670698][T16180] ? __pfx_do_fb_ioctl+0x10/0x10 [ 468.670717][T16180] ? find_held_lock+0x2b/0x80 [ 468.670732][T16180] ? tomoyo_path_number_perm+0x28f/0x580 [ 468.670762][T16180] ? get_pid_task+0x106/0x250 [ 468.670789][T16180] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 468.670818][T16180] fb_compat_ioctl+0x4f5/0x680 [ 468.670833][T16180] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 468.670848][T16180] ? hook_file_ioctl_common+0x140/0x440 [ 468.670874][T16180] ? __fget_files+0x21f/0x3d0 [ 468.670894][T16180] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 468.670910][T16180] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 468.670935][T16180] __do_fast_syscall_32+0x13a/0x8b0 [ 468.670956][T16180] ? lockdep_hardirqs_on+0x7d/0x110 [ 468.670978][T16180] do_fast_syscall_32+0x32/0x70 [ 468.670998][T16180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 468.671017][T16180] RIP: 0023:0xf7fe4fec [ 468.671034][T16180] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 468.671041][T16180] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 468.671057][T16180] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 468.671066][T16180] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.671075][T16180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 468.671084][T16180] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 468.671093][T16180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.671113][T16180] [ 468.684031][T16183] tmpfs: Cannot change global quota limit on remount [ 468.942425][ T854] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 468.956853][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 468.958570][T16199] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 468.962538][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 468.963966][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 468.964442][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 468.964728][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 468.983314][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 468.983594][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 468.990245][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 468.993797][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 468.996078][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 468.996594][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3087'. [ 469.020858][T16206] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:10000 [ 469.063057][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3090'. [ 469.094129][ T854] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 469.095369][ T854] usb 13-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 469.095392][ T854] usb 13-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 469.097998][ T854] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.098016][ T854] usb 13-1: Product: syz [ 469.098028][ T854] usb 13-1: Manufacturer: ㌓拮Ѷì»åƒ¢ [ 469.098040][ T854] usb 13-1: SerialNumber: syz [ 469.112193][T16216] FAULT_INJECTION: forcing a failure. [ 469.112193][T16216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.112248][T16216] CPU: 2 UID: 0 PID: 16216 Comm: syz.1.3091 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.112265][T16216] Tainted: [L]=SOFTLOCKUP [ 469.112273][T16216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 469.112280][T16216] Call Trace: [ 469.112285][T16216] [ 469.112290][T16216] dump_stack_lvl+0x100/0x190 [ 469.112308][T16216] should_fail_ex.cold+0x5/0xa [ 469.112323][T16216] __fpu_restore_sig+0xa92/0x13b0 [ 469.112340][T16216] ? __lock_acquire+0x4c5/0x1ec0 [ 469.112357][T16216] ? __pfx___fpu_restore_sig+0x10/0x10 [ 469.112375][T16216] ? rcu_is_watching+0x13/0xc0 [ 469.112392][T16216] ? __might_fault+0xc5/0x140 [ 469.112412][T16216] fpu__restore_sig+0x151/0x190 [ 469.112428][T16216] ia32_restore_sigcontext+0x456/0x620 [ 469.112447][T16216] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 469.112470][T16216] ? rcu_is_watching+0x13/0xc0 [ 469.112482][T16216] ? _raw_spin_unlock_irq+0x23/0x50 [ 469.112495][T16216] ? lockdep_hardirqs_on+0x7d/0x110 [ 469.112513][T16216] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 469.112532][T16216] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 469.112554][T16216] do_int80_emulation+0x166/0x650 [ 469.112572][T16216] asm_int80_emulation+0x1a/0x20 [ 469.112583][T16216] RIP: 0023:0xf7fe4fea [ 469.112593][T16216] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 469.112616][T16216] RSP: 002b:00000000f54a65bc EFLAGS: 00000292 [ 469.112628][T16216] RAX: 00000000000000f0 RBX: 00000000f74a4f88 RCX: 0000000000000080 [ 469.112635][T16216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74a4f8c [ 469.112642][T16216] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 469.112649][T16216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.112656][T16216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.112670][T16216] [ 469.185498][ T5879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.250362][ T5740] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 469.283575][ T5879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.305499][ T854] cdc_ncm 13-1:1.0: bind() failure [ 469.309781][ T854] cdc_ncm 13-1:1.1: CDC Union missing and no IAD found [ 469.313773][ T854] cdc_ncm 13-1:1.1: bind() failure [ 469.319029][ T854] usb 13-1: USB disconnect, device number 10 [ 469.352915][ T5879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.380817][T16195] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.380933][T16195] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.381104][T16195] bridge_slave_0: entered allmulticast mode [ 469.381835][T16195] bridge_slave_0: entered promiscuous mode [ 469.383189][T16195] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.383260][T16195] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.383320][T16195] bridge_slave_1: entered allmulticast mode [ 469.383977][T16195] bridge_slave_1: entered promiscuous mode [ 469.390466][ T5740] usb 12-1: device descriptor read/64, error -71 [ 469.396541][T16195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.397927][T16195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.410660][T16195] team0: Port device team_slave_0 added [ 469.411917][T16195] team0: Port device team_slave_1 added [ 469.438878][ T5879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.443655][T16195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.443699][T16195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.443743][T16195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.445188][T16195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.445199][T16195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.445220][T16195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.469001][T16195] hsr_slave_0: entered promiscuous mode [ 469.469460][T16195] hsr_slave_1: entered promiscuous mode [ 469.469750][T16195] debugfs: 'hsr0' already exists in 'hsr' [ 469.469761][T16195] Cannot create hsr debugfs directory [ 469.595047][ T5879] bridge_slave_0: left allmulticast mode [ 469.595107][ T5879] bridge_slave_0: left promiscuous mode [ 469.595286][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.650342][ T5740] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 469.723037][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.727103][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.732898][ T5879] bond0 (unregistering): Released all slaves [ 469.800370][ T5740] usb 12-1: device descriptor read/64, error -71 [ 469.831628][T16195] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 469.835407][T16195] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.835977][T16195] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 469.839210][T16195] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.839599][T16195] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 469.842260][T16195] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.842698][T16195] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 469.844474][T16195] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 469.910543][ T5740] usb usb12-port1: attempt power cycle [ 469.910786][T16195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.917178][T16195] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.920060][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.920103][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.928612][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.928722][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.957681][ T5879] hsr_slave_0: left promiscuous mode [ 469.959623][ T5879] hsr_slave_1: left promiscuous mode [ 469.960002][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.960014][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.960589][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.960599][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.966809][ T5879] veth1_macvtap: left promiscuous mode [ 469.966835][ T5879] veth0_macvtap: left promiscuous mode [ 469.966888][ T5879] veth1_vlan: left promiscuous mode [ 469.966927][ T5879] veth0_vlan: left promiscuous mode [ 470.020913][T16245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3094'. [ 470.170660][T13160] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 470.280613][ T5740] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 470.303274][ T5740] usb 12-1: device descriptor read/8, error -71 [ 470.321334][T13160] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 470.322239][T13160] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.322257][T13160] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.322269][T13160] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 470.322289][T13160] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.323375][T13160] usb 13-1: config 0 descriptor?? [ 470.550373][ T5740] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 470.571359][ T5879] team0 (unregistering): Port device team_slave_1 removed [ 470.576766][ T5740] usb 12-1: device descriptor read/8, error -71 [ 470.611174][ T5879] team0 (unregistering): Port device team_slave_0 removed [ 470.681376][ T5740] usb usb12-port1: unable to enumerate USB device [ 470.703389][ T5447] 8021q: adding VLAN 0 to HW filter on device eth19 [ 470.758032][T16241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.758350][T16241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.928586][T16260] 9p: Bad value for 'rfdno' [ 470.991504][ T5447] 8021q: adding VLAN 0 to HW filter on device eth20 [ 470.999196][T16270] openvswitch: netlink: Flow actions attr not present in new flow. [ 471.001490][T16270] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 471.009593][T16195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.018745][ T43] audit: type=1326 audit(1700006588.352:10493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16269 comm="syz.1.3098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 471.019024][ T43] audit: type=1326 audit(1700006588.352:10494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16269 comm="syz.1.3098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 471.019529][ T43] audit: type=1326 audit(1700006588.352:10495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16269 comm="syz.1.3098" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 471.019564][ T43] audit: type=1326 audit(1700006588.352:10496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16269 comm="syz.1.3098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 471.019714][ T43] audit: type=1326 audit(1700006588.352:10497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16269 comm="syz.1.3098" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 471.019960][ T43] audit: type=1326 audit(1700006588.352:10498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16269 comm="syz.1.3098" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 471.025522][ T43] audit: type=1326 audit(1700006588.362:10499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16269 comm="syz.1.3098" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 471.025706][ T43] audit: type=1326 audit(1700006588.362:10500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16269 comm="syz.1.3098" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 471.025743][ T43] audit: type=1326 audit(1700006588.362:10501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16269 comm="syz.1.3098" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 471.026077][ T43] audit: type=1326 audit(1700006588.362:10502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16269 comm="syz.1.3098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 471.057045][ T5744] Bluetooth: hci0: command tx timeout [ 471.147855][T16195] veth0_vlan: entered promiscuous mode [ 471.159765][ T5447] 8021q: adding VLAN 0 to HW filter on device eth21 [ 471.160935][T16195] veth1_vlan: entered promiscuous mode [ 471.172046][T13160] usbhid 13-1:0.0: can't add hid device: -71 [ 471.172127][T13160] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 471.178234][T13160] usb 13-1: USB disconnect, device number 11 [ 471.181880][T16195] veth0_macvtap: entered promiscuous mode [ 471.184807][T16195] veth1_macvtap: entered promiscuous mode [ 471.194015][T16195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.197661][T16195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.201391][T16285] FAULT_INJECTION: forcing a failure. [ 471.201391][T16285] name failslab, interval 1, probability 0, space 0, times 0 [ 471.201444][T16285] CPU: 0 UID: 0 PID: 16285 Comm: syz.1.3099 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.201472][T16285] Tainted: [L]=SOFTLOCKUP [ 471.201478][T16285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 471.201485][T16285] Call Trace: [ 471.201490][T16285] [ 471.201495][T16285] dump_stack_lvl+0x100/0x190 [ 471.201513][T16285] should_fail_ex.cold+0x5/0xa [ 471.201531][T16285] should_failslab+0xc2/0x120 [ 471.201546][T16285] __kmalloc_noprof+0xfc/0x840 [ 471.201559][T16285] ? tomoyo_encode2+0xfb/0x3c0 [ 471.201579][T16285] tomoyo_encode2+0xfb/0x3c0 [ 471.201598][T16285] ? __get_fs_type+0xe3/0x200 [ 471.201614][T16285] tomoyo_encode+0x29/0x50 [ 471.201631][T16285] tomoyo_mount_acl+0x388/0x8b0 [ 471.201646][T16285] ? is_bpf_text_address+0x8a/0x1a0 [ 471.201661][T16285] ? is_bpf_text_address+0x8a/0x1a0 [ 471.201678][T16285] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 471.201695][T16285] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 471.201712][T16285] ? kernel_text_address+0x8d/0x100 [ 471.201727][T16285] ? unwind_get_return_address+0x59/0xa0 [ 471.201741][T16285] ? arch_stack_walk+0xa6/0xf0 [ 471.201755][T16285] ? __lock_acquire+0x4c5/0x1ec0 [ 471.201777][T16285] ? tomoyo_mount_permission+0x1f6/0x460 [ 471.201796][T16285] ? tomoyo_domain+0xb2/0x150 [ 471.201807][T16285] ? tomoyo_profile+0x47/0x60 [ 471.201820][T16285] tomoyo_mount_permission+0x214/0x460 [ 471.201836][T16285] ? tomoyo_mount_permission+0x1f6/0x460 [ 471.201854][T16285] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 471.201879][T16285] security_sb_mount+0xdd/0x270 [ 471.201894][T16285] path_mount+0x158/0x24c0 [ 471.201911][T16285] ? __pfx_path_mount+0x10/0x10 [ 471.201926][T16285] ? lockdep_hardirqs_on+0x7d/0x110 [ 471.201943][T16285] ? putname+0xb1/0x110 [ 471.201956][T16285] ? kmem_cache_free+0x127/0x6c0 [ 471.201978][T16285] ? __ia32_sys_mount+0x292/0x310 [ 471.201992][T16285] __ia32_sys_mount+0x292/0x310 [ 471.202007][T16285] ? __pfx___ia32_sys_mount+0x10/0x10 [ 471.202027][T16285] __do_fast_syscall_32+0x13a/0x8b0 [ 471.202046][T16285] do_fast_syscall_32+0x32/0x70 [ 471.202063][T16285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 471.202077][T16285] RIP: 0023:0xf7fe4fec [ 471.202089][T16285] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 471.202094][T16285] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 471.202106][T16285] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 471.202114][T16285] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 471.202121][T16285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 471.202127][T16285] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 471.202134][T16285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 471.202149][T16285] [ 471.240482][ T5879] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.240506][ T5879] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.240523][ T5879] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.240541][ T5879] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.255489][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.255504][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.277768][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.277785][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.357787][ T5447] 8021q: adding VLAN 0 to HW filter on device eth22 [ 471.476989][T16299] netlink: 204 bytes leftover after parsing attributes in process `syz.9.3101'. [ 472.023407][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3104'. [ 472.550218][ T1352] usb 12-1: new full-speed USB device number 16 using dummy_hcd [ 472.680272][ T1352] usb 12-1: device descriptor read/64, error -71 [ 472.689878][T16337] FAULT_INJECTION: forcing a failure. [ 472.689878][T16337] name failslab, interval 1, probability 0, space 0, times 0 [ 472.689930][T16337] CPU: 1 UID: 0 PID: 16337 Comm: syz.1.3109 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.689957][T16337] Tainted: [L]=SOFTLOCKUP [ 472.689963][T16337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 472.689970][T16337] Call Trace: [ 472.689974][T16337] [ 472.689979][T16337] dump_stack_lvl+0x100/0x190 [ 472.689998][T16337] should_fail_ex.cold+0x5/0xa [ 472.690014][T16337] should_failslab+0xc2/0x120 [ 472.690029][T16337] __kmalloc_noprof+0xfc/0x840 [ 472.690040][T16337] ? rcu_is_watching+0x13/0xc0 [ 472.690052][T16337] ? tomoyo_realpath_from_path+0xb6/0x690 [ 472.690092][T16337] tomoyo_realpath_from_path+0xb6/0x690 [ 472.690124][T16337] tomoyo_path_number_perm+0x23c/0x580 [ 472.690148][T16337] ? tomoyo_path_number_perm+0x22e/0x580 [ 472.690174][T16337] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 472.690196][T16337] ? get_pid_task+0x106/0x250 [ 472.690222][T16337] ? __lock_acquire+0x4c5/0x1ec0 [ 472.690257][T16337] ? __fget_files+0x34/0x3d0 [ 472.690279][T16337] ? find_held_lock+0x2b/0x80 [ 472.690298][T16337] ? __fget_files+0x215/0x3d0 [ 472.690316][T16337] ? hook_file_ioctl_common+0x140/0x440 [ 472.690341][T16337] ? __fget_files+0x215/0x3d0 [ 472.690363][T16337] ? __fget_files+0x21f/0x3d0 [ 472.690384][T16337] security_file_ioctl_compat+0xd3/0x230 [ 472.690408][T16337] __ia32_compat_sys_ioctl+0xc2/0x360 [ 472.690440][T16337] __do_fast_syscall_32+0x13a/0x8b0 [ 472.690465][T16337] ? lockdep_hardirqs_on+0x7d/0x110 [ 472.690491][T16337] do_fast_syscall_32+0x32/0x70 [ 472.690519][T16337] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 472.690542][T16337] RIP: 0023:0xf7fe4fec [ 472.690562][T16337] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 472.690571][T16337] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 472.690589][T16337] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000720 [ 472.690602][T16337] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.690634][T16337] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 472.690646][T16337] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 472.690657][T16337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 472.690789][T16337] [ 472.690883][T16337] ERROR: Out of memory at tomoyo_realpath_from_path. [ 472.817859][T16349] FAULT_INJECTION: forcing a failure. [ 472.817859][T16349] name failslab, interval 1, probability 0, space 0, times 0 [ 472.817934][T16349] CPU: 1 UID: 0 PID: 16349 Comm: syz.8.3113 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.817975][T16349] Tainted: [L]=SOFTLOCKUP [ 472.817984][T16349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 472.817994][T16349] Call Trace: [ 472.818000][T16349] [ 472.818008][T16349] dump_stack_lvl+0x100/0x190 [ 472.818052][T16349] should_fail_ex.cold+0x5/0xa [ 472.818077][T16349] should_failslab+0xc2/0x120 [ 472.818101][T16349] __kmalloc_noprof+0xfc/0x840 [ 472.818124][T16349] ? tomoyo_encode2+0xfb/0x3c0 [ 472.818168][T16349] tomoyo_encode2+0xfb/0x3c0 [ 472.818199][T16349] tomoyo_encode+0x29/0x50 [ 472.818224][T16349] tomoyo_realpath_from_path+0x18c/0x690 [ 472.818257][T16349] tomoyo_path_number_perm+0x23c/0x580 [ 472.818281][T16349] ? tomoyo_path_number_perm+0x22e/0x580 [ 472.818308][T16349] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 472.818333][T16349] ? get_pid_task+0x106/0x250 [ 472.818357][T16349] ? __lock_acquire+0x4c5/0x1ec0 [ 472.818392][T16349] ? __fget_files+0x34/0x3d0 [ 472.818413][T16349] ? find_held_lock+0x2b/0x80 [ 472.818431][T16349] ? __fget_files+0x215/0x3d0 [ 472.818447][T16349] ? hook_file_ioctl_common+0x140/0x440 [ 472.818471][T16349] ? __fget_files+0x215/0x3d0 [ 472.818493][T16349] ? __fget_files+0x21f/0x3d0 [ 472.818513][T16349] security_file_ioctl_compat+0xd3/0x230 [ 472.818539][T16349] __ia32_compat_sys_ioctl+0xc2/0x360 [ 472.818571][T16349] __do_fast_syscall_32+0x13a/0x8b0 [ 472.818598][T16349] ? lockdep_hardirqs_on+0x7d/0x110 [ 472.818648][T16349] do_fast_syscall_32+0x32/0x70 [ 472.818674][T16349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 472.818696][T16349] RIP: 0023:0xf7f73fec [ 472.818717][T16349] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 472.818725][T16349] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 472.818748][T16349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f85403 [ 472.818759][T16349] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.818769][T16349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 472.818779][T16349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.818790][T16349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 472.818815][T16349] [ 472.821819][T16349] ERROR: Out of memory at tomoyo_realpath_from_path. [ 472.834958][T16347] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3112'. [ 472.896515][T16353] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3114'. [ 472.920296][ T1352] usb 12-1: new full-speed USB device number 17 using dummy_hcd [ 473.067071][ T1352] usb 12-1: device descriptor read/64, error -71 [ 473.130151][ T5744] Bluetooth: hci0: command tx timeout [ 473.204051][ T1352] usb usb12-port1: attempt power cycle [ 473.423031][T16374] FAULT_INJECTION: forcing a failure. [ 473.423031][T16374] name failslab, interval 1, probability 0, space 0, times 0 [ 473.423094][T16374] CPU: 0 UID: 0 PID: 16374 Comm: syz.1.3120 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.423134][T16374] Tainted: [L]=SOFTLOCKUP [ 473.423143][T16374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 473.423154][T16374] Call Trace: [ 473.423160][T16374] [ 473.423167][T16374] dump_stack_lvl+0x100/0x190 [ 473.423196][T16374] should_fail_ex.cold+0x5/0xa [ 473.423221][T16374] should_failslab+0xc2/0x120 [ 473.423245][T16374] __kmalloc_noprof+0xfc/0x840 [ 473.423263][T16374] ? __pfx_dynamic_dname+0x10/0x10 [ 473.423290][T16374] ? tomoyo_encode2+0xfb/0x3c0 [ 473.423323][T16374] tomoyo_encode2+0xfb/0x3c0 [ 473.423354][T16374] tomoyo_encode+0x29/0x50 [ 473.423389][T16374] tomoyo_realpath_from_path+0x18c/0x690 [ 473.423424][T16374] tomoyo_path_number_perm+0x23c/0x580 [ 473.423447][T16374] ? tomoyo_path_number_perm+0x22e/0x580 [ 473.423475][T16374] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 473.423499][T16374] ? get_pid_task+0x106/0x250 [ 473.423525][T16374] ? __lock_acquire+0x4c5/0x1ec0 [ 473.423561][T16374] ? __fget_files+0x34/0x3d0 [ 473.423583][T16374] ? find_held_lock+0x2b/0x80 [ 473.423600][T16374] ? __fget_files+0x215/0x3d0 [ 473.423618][T16374] ? hook_file_ioctl_common+0x140/0x440 [ 473.423644][T16374] ? __fget_files+0x215/0x3d0 [ 473.423668][T16374] ? __fget_files+0x21f/0x3d0 [ 473.423692][T16374] security_file_ioctl_compat+0xd3/0x230 [ 473.423720][T16374] __ia32_compat_sys_ioctl+0xc2/0x360 [ 473.423752][T16374] __do_fast_syscall_32+0x13a/0x8b0 [ 473.423778][T16374] ? lockdep_hardirqs_on+0x7d/0x110 [ 473.423805][T16374] do_fast_syscall_32+0x32/0x70 [ 473.423832][T16374] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 473.423856][T16374] RIP: 0023:0xf7fe4fec [ 473.423876][T16374] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 473.423884][T16374] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 473.423902][T16374] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 473.423914][T16374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 473.423924][T16374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 473.423935][T16374] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 473.423946][T16374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 473.423971][T16374] [ 473.424019][T16374] ERROR: Out of memory at tomoyo_realpath_from_path. [ 473.938373][T16387] FAULT_INJECTION: forcing a failure. [ 473.938373][T16387] name failslab, interval 1, probability 0, space 0, times 0 [ 473.938422][T16387] CPU: 0 UID: 0 PID: 16387 Comm: syz.8.3123 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.938439][T16387] Tainted: [L]=SOFTLOCKUP [ 473.938444][T16387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 473.938451][T16387] Call Trace: [ 473.938456][T16387] [ 473.938461][T16387] dump_stack_lvl+0x100/0x190 [ 473.938481][T16387] should_fail_ex.cold+0x5/0xa [ 473.938497][T16387] should_failslab+0xc2/0x120 [ 473.938512][T16387] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 473.938526][T16387] ? proc_alloc_inode+0x25/0x200 [ 473.938542][T16387] ? __pfx_proc_alloc_inode+0x10/0x10 [ 473.938557][T16387] proc_alloc_inode+0x25/0x200 [ 473.938571][T16387] alloc_inode+0x68/0x250 [ 473.938587][T16387] new_inode+0x22/0x1c0 [ 473.938602][T16387] ? proc_sys_lookup+0x266/0x430 [ 473.938642][T16387] proc_sys_make_inode+0x47/0x5c0 [ 473.938657][T16387] proc_sys_lookup+0x307/0x430 [ 473.938672][T16387] ? __pfx_proc_sys_lookup+0x10/0x10 [ 473.938686][T16387] ? find_held_lock+0x2b/0x80 [ 473.938701][T16387] ? down_read+0x13b/0x4c0 [ 473.938718][T16387] ? __pfx_down_read+0x10/0x10 [ 473.938735][T16387] __lookup_slow+0x155/0x320 [ 473.938752][T16387] lookup_slow+0x50/0x70 [ 473.938768][T16387] link_path_walk+0x1377/0x1cc0 [ 473.938784][T16387] path_openat+0x1ac/0x2440 [ 473.938799][T16387] ? __pfx_path_openat+0x10/0x10 [ 473.938816][T16387] do_file_open+0x20e/0x430 [ 473.938831][T16387] ? __pfx_do_file_open+0x10/0x10 [ 473.938853][T16387] ? _raw_spin_unlock+0x28/0x50 [ 473.938866][T16387] ? alloc_fd+0x471/0x7a0 [ 473.938883][T16387] do_sys_openat2+0x10f/0x1e0 [ 473.938899][T16387] ? __pfx_do_sys_openat2+0x10/0x10 [ 473.938945][T16387] __ia32_compat_sys_openat+0x12d/0x210 [ 473.938962][T16387] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 473.938984][T16387] __do_fast_syscall_32+0x13a/0x8b0 [ 473.939003][T16387] do_fast_syscall_32+0x32/0x70 [ 473.939020][T16387] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 473.939035][T16387] RIP: 0023:0xf7f73fec [ 473.939049][T16387] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 473.939054][T16387] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 473.939065][T16387] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 473.939073][T16387] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 473.939079][T16387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 473.939086][T16387] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 473.939093][T16387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 473.939107][T16387] [ 473.990381][ T1352] usb 12-1: new full-speed USB device number 18 using dummy_hcd [ 474.013327][ T1352] usb 12-1: device descriptor read/8, error -71 [ 474.078519][T16391] overlayfs: missing 'lowerdir' [ 474.123181][T16394] FAULT_INJECTION: forcing a failure. [ 474.123181][T16394] name failslab, interval 1, probability 0, space 0, times 0 [ 474.123233][T16394] CPU: 0 UID: 0 PID: 16394 Comm: syz.8.3125 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.123260][T16394] Tainted: [L]=SOFTLOCKUP [ 474.123265][T16394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 474.123272][T16394] Call Trace: [ 474.123277][T16394] [ 474.123282][T16394] dump_stack_lvl+0x100/0x190 [ 474.123300][T16394] should_fail_ex.cold+0x5/0xa [ 474.123315][T16394] should_failslab+0xc2/0x120 [ 474.123330][T16394] __kmalloc_noprof+0xfc/0x840 [ 474.123347][T16394] ? __pfx_dynamic_dname+0x10/0x10 [ 474.123363][T16394] ? tomoyo_encode2+0xfb/0x3c0 [ 474.123383][T16394] tomoyo_encode2+0xfb/0x3c0 [ 474.123402][T16394] tomoyo_encode+0x29/0x50 [ 474.123419][T16394] tomoyo_realpath_from_path+0x18c/0x690 [ 474.123439][T16394] tomoyo_path_number_perm+0x23c/0x580 [ 474.123465][T16394] ? tomoyo_path_number_perm+0x22e/0x580 [ 474.123483][T16394] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 474.123499][T16394] ? get_pid_task+0x106/0x250 [ 474.123514][T16394] ? __lock_acquire+0x4c5/0x1ec0 [ 474.123536][T16394] ? __fget_files+0x34/0x3d0 [ 474.123548][T16394] ? find_held_lock+0x2b/0x80 [ 474.123559][T16394] ? __fget_files+0x215/0x3d0 [ 474.123570][T16394] ? hook_file_ioctl_common+0x140/0x440 [ 474.123585][T16394] ? __fget_files+0x215/0x3d0 [ 474.123599][T16394] ? __fget_files+0x21f/0x3d0 [ 474.123613][T16394] security_file_ioctl_compat+0xd3/0x230 [ 474.123629][T16394] __ia32_compat_sys_ioctl+0xc2/0x360 [ 474.123648][T16394] __do_fast_syscall_32+0x13a/0x8b0 [ 474.123664][T16394] ? lockdep_hardirqs_on+0x7d/0x110 [ 474.123680][T16394] do_fast_syscall_32+0x32/0x70 [ 474.123696][T16394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 474.123711][T16394] RIP: 0023:0xf7f73fec [ 474.123723][T16394] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 474.123728][T16394] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 474.123740][T16394] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 474.123747][T16394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 474.123753][T16394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.123760][T16394] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 474.123766][T16394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.123780][T16394] [ 474.123892][T16394] ERROR: Out of memory at tomoyo_realpath_from_path. [ 474.238172][T16399] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 474.250409][ T1352] usb 12-1: new full-speed USB device number 19 using dummy_hcd [ 474.272430][ T1352] usb 12-1: device descriptor read/8, error -71 [ 474.328522][T16402] netlink: 204 bytes leftover after parsing attributes in process `syz.8.3128'. [ 474.391964][ T1352] usb usb12-port1: unable to enumerate USB device [ 474.574026][T16407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3129'. [ 474.602813][T16410] FAULT_INJECTION: forcing a failure. [ 474.602813][T16410] name failslab, interval 1, probability 0, space 0, times 0 [ 474.602872][T16410] CPU: 3 UID: 0 PID: 16410 Comm: syz.9.3130 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.602901][T16410] Tainted: [L]=SOFTLOCKUP [ 474.602907][T16410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 474.602915][T16410] Call Trace: [ 474.602919][T16410] [ 474.602925][T16410] dump_stack_lvl+0x100/0x190 [ 474.602943][T16410] should_fail_ex.cold+0x5/0xa [ 474.602960][T16410] should_failslab+0xc2/0x120 [ 474.602976][T16410] kmem_cache_alloc_noprof+0x92/0x6a0 [ 474.602989][T16410] ? alloc_empty_file+0x5b/0x1c0 [ 474.602998][T16407] FAULT_INJECTION: forcing a failure. [ 474.602998][T16407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.603008][T16410] alloc_empty_file+0x5b/0x1c0 [ 474.603024][T16410] path_openat+0xdb/0x2440 [ 474.603039][T16410] ? __pfx_path_openat+0x10/0x10 [ 474.603057][T16410] do_file_open+0x20e/0x430 [ 474.603071][T16410] ? __pfx_do_file_open+0x10/0x10 [ 474.603093][T16410] ? _raw_spin_unlock+0x28/0x50 [ 474.603106][T16410] ? alloc_fd+0x471/0x7a0 [ 474.603123][T16410] do_sys_openat2+0x10f/0x1e0 [ 474.603145][T16410] ? __pfx_do_sys_openat2+0x10/0x10 [ 474.603163][T16410] ? do_sock_setsockopt+0x101/0x1d0 [ 474.603180][T16410] ? kfree+0x1e5/0x6d0 [ 474.603200][T16410] __ia32_compat_sys_openat+0x12d/0x210 [ 474.603218][T16410] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 474.603240][T16410] __do_fast_syscall_32+0x13a/0x8b0 [ 474.603259][T16410] do_fast_syscall_32+0x32/0x70 [ 474.603275][T16410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 474.603291][T16410] RIP: 0023:0xf7ff6fec [ 474.603305][T16410] Code: Unable to access opcode bytes at 0xf7ff6fc2. [ 474.603311][T16410] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 474.603322][T16410] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 474.603329][T16410] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 474.603336][T16410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.603343][T16410] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 474.603349][T16410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.603363][T16410] [ 474.603374][T16407] CPU: 1 UID: 0 PID: 16407 Comm: syz.1.3129 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.603413][T16407] Tainted: [L]=SOFTLOCKUP [ 474.603420][T16407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 474.603430][T16407] Call Trace: [ 474.603450][T16407] [ 474.603457][T16407] dump_stack_lvl+0x100/0x190 [ 474.603478][T16407] should_fail_ex.cold+0x5/0xa [ 474.603492][T16407] _copy_from_user+0x2e/0xd0 [ 474.603505][T16407] memdup_user+0x6b/0xe0 [ 474.603528][T16407] strndup_user+0x78/0xe0 [ 474.603544][T16407] __ia32_sys_mount+0x136/0x310 [ 474.603565][T16407] ? __pfx___ia32_sys_mount+0x10/0x10 [ 474.603586][T16407] ? exit_to_user_mode_loop+0x166/0x700 [ 474.603609][T16407] ? rcu_is_watching+0x13/0xc0 [ 474.603632][T16407] __do_fast_syscall_32+0x13a/0x8b0 [ 474.603657][T16407] ? lockdep_hardirqs_on+0x7d/0x110 [ 474.603679][T16407] do_fast_syscall_32+0x32/0x70 [ 474.603703][T16407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 474.603724][T16407] RIP: 0023:0xf7fe4fec [ 474.603742][T16407] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 474.603751][T16407] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 474.603767][T16407] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 0000000080000100 [ 474.603778][T16407] RDX: 0000000080000300 RSI: 000000000080008c RDI: 0000000000000000 [ 474.603788][T16407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.603798][T16407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.603811][T16407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.603834][T16407] [ 474.651020][T16412] random: crng reseeded on system resumption [ 474.967373][T16428] lo: entered allmulticast mode [ 474.980107][T16428] tunl0: entered allmulticast mode [ 474.982783][T16428] gre0: entered allmulticast mode [ 474.985412][T16428] gretap0: entered allmulticast mode [ 474.985614][T16428] erspan0: entered allmulticast mode [ 474.985743][T16428] ip_vti0: entered allmulticast mode [ 474.985861][T16428] ip6_vti0: entered allmulticast mode [ 474.986041][T16428] sit0: entered allmulticast mode [ 474.986380][T16428] ip6tnl0: entered allmulticast mode [ 474.986640][T16428] ip6gre0: entered allmulticast mode [ 474.986879][T16428] ip6gretap0: entered allmulticast mode [ 474.989642][T16432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 474.989655][T16432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 474.989668][T16432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 474.989677][T16432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 474.989687][T16432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 474.989699][T16432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 474.989708][T16432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 474.989724][T16432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 474.989733][T16432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 474.989742][T16432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 474.989750][T16432] jffs2: Further such events for this erase block will not be printed [ 474.989783][T16432] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 474.989791][T16432] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 474.989799][T16432] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 474.990143][T16428] bridge0: entered allmulticast mode [ 474.990515][T16428] vcan0: entered allmulticast mode [ 474.990835][T16428] bond0: entered allmulticast mode [ 474.991305][T16428] team0: entered allmulticast mode [ 474.993953][T16428] dummy0: entered allmulticast mode [ 474.994830][T16428] nlmon0: entered allmulticast mode [ 474.995113][T16428] batadv0: entered allmulticast mode [ 474.995493][T16428] veth0: entered allmulticast mode [ 474.995767][T16428] veth1: entered allmulticast mode [ 474.996136][T16428] wg0: entered allmulticast mode [ 474.996398][T16428] wg1: entered allmulticast mode [ 474.996667][T16428] wg2: entered allmulticast mode [ 474.996924][T16428] veth0_to_bridge: entered allmulticast mode [ 474.997184][T16428] bridge_slave_0: entered allmulticast mode [ 474.997431][T16428] veth1_to_bridge: entered allmulticast mode [ 474.997723][T16428] bridge_slave_1: entered allmulticast mode [ 474.998632][T16432] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 474.998640][T16432] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 474.999032][T16428] veth0_to_bond: entered allmulticast mode [ 474.999419][T16428] bond_slave_0: entered allmulticast mode [ 474.999755][T16428] veth1_to_bond: entered allmulticast mode [ 475.008078][T16428] bond_slave_1: entered allmulticast mode [ 475.008468][T16428] veth0_to_team: entered allmulticast mode [ 475.008769][T16428] team_slave_0: entered allmulticast mode [ 475.009163][T16428] veth1_to_team: entered allmulticast mode [ 475.009456][T16428] team_slave_1: entered allmulticast mode [ 475.009827][T16428] veth0_to_batadv: entered allmulticast mode [ 475.014333][T16428] batadv_slave_0: entered allmulticast mode [ 475.014631][T16428] veth1_to_batadv: entered allmulticast mode [ 475.014941][T16428] batadv_slave_1: entered allmulticast mode [ 475.015192][T16428] xfrm0: entered allmulticast mode [ 475.015444][T16428] veth0_to_hsr: entered allmulticast mode [ 475.015698][T16428] hsr_slave_0: entered allmulticast mode [ 475.015944][T16428] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 475.069616][T16436] bond_slave_0: left allmulticast mode [ 475.073339][T16436] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3141'. [ 475.079780][T16436] FAULT_INJECTION: forcing a failure. [ 475.079780][T16436] name failslab, interval 1, probability 0, space 0, times 0 [ 475.079800][T16436] CPU: 1 UID: 0 PID: 16436 Comm: syz.8.3141 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.079816][T16436] Tainted: [L]=SOFTLOCKUP [ 475.079820][T16436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 475.079827][T16436] Call Trace: [ 475.079831][T16436] [ 475.079836][T16436] dump_stack_lvl+0x100/0x190 [ 475.079856][T16436] should_fail_ex.cold+0x5/0xa [ 475.079871][T16436] should_failslab+0xc2/0x120 [ 475.079886][T16436] __kmalloc_noprof+0xfc/0x840 [ 475.079899][T16436] ? x509_fabricate_name.isra.0+0x5ea/0xa10 [ 475.079914][T16436] x509_fabricate_name.isra.0+0x5ea/0xa10 [ 475.079929][T16436] asn1_ber_decoder+0xd0c/0x2170 [ 475.079967][T16436] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 475.079987][T16436] ? kasan_save_track+0x14/0x30 [ 475.080000][T16436] ? __kasan_kmalloc+0xaa/0xb0 [ 475.080013][T16436] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 475.080032][T16436] ? x509_cert_parse+0x162/0x910 [ 475.080047][T16436] x509_cert_parse+0x1c9/0x910 [ 475.080060][T16436] x509_key_preparse+0x65/0x9c0 [ 475.080076][T16436] asymmetric_key_preparse+0xce/0x1d0 [ 475.080094][T16436] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 475.080112][T16436] __key_create_or_update+0x463/0xe30 [ 475.080132][T16436] ? __pfx___key_create_or_update+0x10/0x10 [ 475.080150][T16436] ? lookup_user_key+0x3f3/0x1300 [ 475.080177][T16436] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 475.080197][T16436] key_create_or_update+0x42/0x60 [ 475.080216][T16436] __do_sys_add_key+0x2e8/0x460 [ 475.080230][T16436] ? __pfx___do_sys_add_key+0x10/0x10 [ 475.080249][T16436] __do_fast_syscall_32+0x13a/0x8b0 [ 475.080270][T16436] do_fast_syscall_32+0x32/0x70 [ 475.080288][T16436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.080303][T16436] RIP: 0023:0xf7f73fec [ 475.080316][T16436] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 475.080321][T16436] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 475.080333][T16436] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 475.080340][T16436] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 475.080347][T16436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.080354][T16436] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 475.080361][T16436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.080375][T16436] [ 475.089377][T16436] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3141'. [ 475.090329][T16436] netlink: 280 bytes leftover after parsing attributes in process `syz.8.3141'. [ 475.222120][ T5744] Bluetooth: hci0: command tx timeout [ 475.225730][T13712] IPVS: starting estimator thread 0... [ 475.236014][T16444] netlink: 204 bytes leftover after parsing attributes in process `syz.8.3142'. [ 475.247200][T16437] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3138'. ** replaying previous printk message ** [ 475.272840][T16443] ================================================================== [ 475.272863][T16443] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 475.272886][T16443] Read of size 64 at addr ffffffff9bca0120 by task syz.7.3143/16443 [ 475.272896][T16443] [ 475.272903][T16443] CPU: 1 UID: 0 PID: 16443 Comm: syz.7.3143 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.272919][T16443] Tainted: [L]=SOFTLOCKUP [ 475.272924][T16443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 475.272931][T16443] Call Trace: [ 475.272935][T16443] [ 475.272940][T16443] dump_stack_lvl+0x100/0x190 [ 475.272955][T16443] print_report+0x13d/0x4b0 [ 475.272972][T16443] ? __virt_addr_valid+0x239/0x430 [ 475.272989][T16443] ? usb_copy_descriptors+0x18d/0x320 [ 475.273005][T16443] kasan_report+0xdf/0x1c0 [ 475.273020][T16443] ? usb_copy_descriptors+0x18d/0x320 [ 475.273037][T16443] kasan_check_range+0x10f/0x1e0 [ 475.273053][T16443] __asan_memcpy+0x23/0x60 [ 475.273063][T16443] usb_copy_descriptors+0x18d/0x320 [ 475.273079][T16443] usb_assign_descriptors+0xd2/0x470 [ 475.273096][T16443] f_audio_bind+0x243a/0x3950 [ 475.273109][T16443] ? __pfx_f_audio_bind+0x10/0x10 [ 475.273119][T16443] usb_add_function+0x219/0x890 [ 475.273135][T16443] ? composite_dev_prepare+0x1b1/0x420 [ 475.273147][T16443] configfs_composite_bind+0xd83/0x1960 [ 475.273164][T16443] ? kernfs_create_link+0x1bd/0x240 [ 475.273183][T16443] gadget_bind_driver+0x28c/0xbf0 [ 475.273195][T16443] ? __pfx_gadget_bind_driver+0x10/0x10 [ 475.273208][T16443] really_probe+0x241/0xa60 [ 475.273222][T16443] __driver_probe_device+0x210/0x460 [ 475.273235][T16443] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 475.273250][T16443] driver_probe_device+0x4a/0x140 [ 475.273264][T16443] __driver_attach+0x21f/0x5b0 [ 475.273277][T16443] ? __pfx___driver_attach+0x10/0x10 [ 475.273291][T16443] bus_for_each_dev+0x13e/0x1d0 [ 475.273301][T16443] ? __pfx_bus_for_each_dev+0x10/0x10 [ 475.273311][T16443] ? bus_add_driver+0x2b5/0x5b0 [ 475.273325][T16443] bus_add_driver+0x305/0x5b0 [ 475.273338][T16443] driver_register+0x1e2/0x360 [ 475.273367][T16443] usb_gadget_register_driver_owner+0x132/0x210 [ 475.273382][T16443] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 475.273398][T16443] configfs_write_iter+0x302/0x4e0 [ 475.273414][T16443] vfs_write+0x6af/0x1050 [ 475.273426][T16443] ? __pfx_configfs_write_iter+0x10/0x10 [ 475.273442][T16443] ? __pfx_vfs_write+0x10/0x10 [ 475.273452][T16443] ? find_held_lock+0x2b/0x80 [ 475.273468][T16443] ksys_write+0x12a/0x250 [ 475.273480][T16443] ? __pfx_ksys_write+0x10/0x10 [ 475.273493][T16443] __do_fast_syscall_32+0x13a/0x8b0 [ 475.273508][T16443] ? lockdep_hardirqs_on+0x7d/0x110 [ 475.273523][T16443] do_fast_syscall_32+0x32/0x70 [ 475.273539][T16443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.273553][T16443] RIP: 0023:0xf6fdefec [ 475.273567][T16443] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 475.273573][T16443] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 475.273584][T16443] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000480 [ 475.273592][T16443] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 475.273598][T16443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.273605][T16443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.273612][T16443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.273622][T16443] [ 475.273627][T16443] [ 475.273635][T16443] The buggy address belongs to the variable: [ 475.273639][T16443] ac_header_desc+0x0/0x40 [ 475.273654][T16443] [ 475.273657][T16443] The buggy address belongs to the physical page: [ 475.273663][T16443] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bca0 [ 475.273674][T16443] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 475.273689][T16443] raw: 00fff00000002000 ffffea00006f2808 ffffea00006f2808 0000000000000000 [ 475.273699][T16443] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 475.273705][T16443] page dumped because: kasan: bad access detected [ 475.273711][T16443] page_owner info is not present (never set?) [ 475.273715][T16443] [ 475.273718][T16443] Memory state around the buggy address: [ 475.273723][T16443] ffffffff9bca0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.273731][T16443] ffffffff9bca0080: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 475.273738][T16443] >ffffffff9bca0100: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 475.273744][T16443] ^ [ 475.273750][T16443] ffffffff9bca0180: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 475.273757][T16443] ffffffff9bca0200: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 475.273763][T16443] ================================================================== [ 475.273859][T16443] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 475.428375][T16443] CPU: 1 UID: 0 PID: 16443 Comm: syz.7.3143 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.432351][T16443] Tainted: [L]=SOFTLOCKUP [ 475.433711][T16443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 475.436821][T16443] Call Trace: [ 475.437880][T16443] [ 475.438869][T16443] dump_stack_lvl+0x100/0x190 [ 475.440347][T16443] vpanic+0x553/0x970 [ 475.441598][T16443] ? __pfx_vpanic+0x10/0x10 [ 475.443028][T16443] ? usb_copy_descriptors+0x18d/0x320 [ 475.444700][T16443] panic+0xd1/0xe0 [ 475.445883][T16443] ? __pfx_panic+0x10/0x10 [ 475.447318][T16443] ? usb_copy_descriptors+0x18d/0x320 [ 475.449020][T16443] ? preempt_schedule_common+0x3c/0xb0 [ 475.450728][T16443] check_panic_on_warn.cold+0x19/0x34 [ 475.452402][T16443] end_report.part.0+0x3a/0x90 [ 475.453902][T16443] kasan_report.cold+0xe/0x18 [ 475.455389][T16443] ? usb_copy_descriptors+0x18d/0x320 [ 475.457057][T16443] kasan_check_range+0x10f/0x1e0 [ 475.458626][T16443] __asan_memcpy+0x23/0x60 [ 475.460031][T16443] usb_copy_descriptors+0x18d/0x320 [ 475.461658][T16443] usb_assign_descriptors+0xd2/0x470 [ 475.463314][T16443] f_audio_bind+0x243a/0x3950 [ 475.464782][T16443] ? __pfx_f_audio_bind+0x10/0x10 [ 475.466353][T16443] usb_add_function+0x219/0x890 [ 475.467907][T16443] ? composite_dev_prepare+0x1b1/0x420 [ 475.469702][T16443] configfs_composite_bind+0xd83/0x1960 [ 475.471707][T16443] ? kernfs_create_link+0x1bd/0x240 [ 475.473405][T16443] gadget_bind_driver+0x28c/0xbf0 [ 475.475004][T16443] ? __pfx_gadget_bind_driver+0x10/0x10 [ 475.476742][T16443] really_probe+0x241/0xa60 [ 475.478199][T16443] __driver_probe_device+0x210/0x460 [ 475.479865][T16443] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 475.481685][T16443] driver_probe_device+0x4a/0x140 [ 475.483270][T16443] __driver_attach+0x21f/0x5b0 [ 475.484769][T16443] ? __pfx___driver_attach+0x10/0x10 [ 475.486417][T16443] bus_for_each_dev+0x13e/0x1d0 [ 475.487946][T16443] ? __pfx_bus_for_each_dev+0x10/0x10 [ 475.489616][T16443] ? bus_add_driver+0x2b5/0x5b0 [ 475.491152][T16443] bus_add_driver+0x305/0x5b0 [ 475.492629][T16443] driver_register+0x1e2/0x360 [ 475.494131][T16443] usb_gadget_register_driver_owner+0x132/0x210 [ 475.496079][T16443] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 475.497827][T16443] configfs_write_iter+0x302/0x4e0 [ 475.499462][T16443] vfs_write+0x6af/0x1050 [ 475.500815][T16443] ? __pfx_configfs_write_iter+0x10/0x10 [ 475.502564][T16443] ? __pfx_vfs_write+0x10/0x10 [ 475.504075][T16443] ? find_held_lock+0x2b/0x80 [ 475.505557][T16443] ksys_write+0x12a/0x250 [ 475.506918][T16443] ? __pfx_ksys_write+0x10/0x10 [ 475.508443][T16443] __do_fast_syscall_32+0x13a/0x8b0 [ 475.510074][T16443] ? lockdep_hardirqs_on+0x7d/0x110 [ 475.511677][T16443] do_fast_syscall_32+0x32/0x70 [ 475.513162][T16443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.515135][T16443] RIP: 0023:0xf6fdefec [ 475.516431][T16443] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 475.518498][T16443] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 475.521078][T16443] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000480 [ 475.523533][T16443] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 475.525997][T16443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.528455][T16443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.530906][T16443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.533371][T16443] [ 475.535326][T16443] Kernel Offset: disabled [ 475.536694][T16443] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:42:37 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff96956510 RBX=0000000000000243 RCX=000000000005c5dc RDX=ffffffff969c0460 RSI=0000000000000264 RDI=ffffffff98369898 RBP=0000000000000030 RSP=ffffc900039ceec8 R8 =ffffffff969c0490 R9 =0000000000000022 R10=ffffc900039cf058 R11=0000000000000000 R12=ffffffff81e612e0 R13=ffffc900039cef70 R14=ffffffff81e61c90 R15=ffffffff983a30a8 RIP=ffffffff81e626d2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f24c0930c80 ffffffff 00c00000 GS =0000 ffff888096963000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c47432f CR3=0000000025e5e000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ae5725 RDI=ffffffff9bc541e0 RBP=ffffffff9bc541a0 RSP=ffffc900035b6f20 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3966666666666652 R12=0000000000000000 R13=000000000000002e R14=000000000000000d R15=ffffc900035b7238 RIP=ffffffff85ae574f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096a63000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f6fdf000 CR3=0000000047dd7000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000021800000000 0000000700000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=fffff52000085fb6 RBX=ffffffff8fbd7460 RCX=dffffc0000000000 RDX=0000000000000001 RSI=ffffffff8c622500 RDI=ffffffff8c622540 RBP=ffffc9000042fda8 RSP=ffffc9000042f958 R8 =0000000000000000 R9 =fffffbfff1f7ae8c R10=ffffffff8fbd7463 R11=3d3d3d3d3d3d3d3d R12=ffffffff8fbd73c0 R13=ffffc9000042fda8 R14=0000000000000000 R15=ffffc9000042fdb4 RIP=ffffffff820b4c30 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b63000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7268c10 CR3=000000006244b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffffff9bb36930 RCX=0000000000000100 RDX=0000000000000002 RSI=ffffffff8e3ca4eb RDI=ffffffff9bb36930 RBP=0000000000000006 RSP=ffffc900033577f8 R8 =0000000000060ccb R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffffff9bb36928 R13=dffffc0000000000 R14=ffffc90003357a30 R15=1ffff9200066af06 RIP=ffffffff81e6f330 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c63000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080004000 CR3=000000006244b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000