last executing test programs: 29.193775902s ago: executing program 1 (id=160): r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_emit_ethernet(0x35, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000020000000001002742420300"/56], 0x0) 29.114151492s ago: executing program 1 (id=163): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000001c0), 0x45) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) write(r1, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000380)={0xb, 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000000400)={@random="f444244edc50", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x7, 0x0, 0xffa}, {0x8100, 0x5, 0x0, 0x2}}, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0xe, 0x1, 0x0, 0x0, "bce9f4bdd487402dfc11df43474300ef02142df40da00a1c4edf45cf0b6c6f33fa85186e574eb3b1b9e863bdf262b8021bdb1c4f1923fc20750b7a5f43c2a123"}}}}, &(0x7f0000000240)={0x0, 0x3, [0x36f, 0x3da, 0xaaa, 0x7fc]}) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="2007a79a0f0ef9ff43ff743c1993a770cba2f07013131930f77a3ad1250610f174190c83b69e955c95dff4803758a4c453c6a12b3449b7843b27e717a5f39d35abcd04d419107591e8dd53163700559f23c17ea5366d0f86d0b9dc69e3e55fbede1381e7a659ade67ce2ab0617bfcc0e88ca7919"], 0xf) nanosleep(&(0x7f00000000c0)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) write(r4, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x288043, 0x0) write$P9_RSTATu(r5, &(0x7f0000000080)={0x254, 0x7d, 0x2, {{0x500, 0x11f, 0x3, 0x5000000, {0x80, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e6, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf4\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x67, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x06\x00\x00\x00@\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12[\x93\xa5\xd4\xdb\x9a\xb2\xe0\x16He\x81\xea[\x9c\xf9\xc4\xa2\x86F\xbct@\x97\x11Y\xa7\x1b\xc0v\xb0lJ\xc4\x9e\xc7m^\x86\xea'}, 0x120, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff@\x00\xdb\xa0\xc2\xf7\xf0\x05\x00\x00\x00M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82\x18}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\x00'/288}}, 0x254) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000080)={'vlan1\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x0, 0x0, 0x4, 0x3, 0x0, 0x88, 0x2000000}}) r7 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) bind(r7, &(0x7f0000000140)=@generic={0x1f, "0000000000000100"}, 0x13) connect(r7, &(0x7f0000000180)=@generic={0x1f, "0102030405060100"}, 0x13) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0xe, &(0x7f00000001c0)=ANY=[@ANYRES16=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090006"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 28.944483135s ago: executing program 1 (id=168): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000aa0000000060a01020000000000000000030000070c0006400000000000000001"], 0x2acc}, 0x1, 0x0, 0x0, 0x40}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0x20ac1f87, 0x8, 0x6, 0x4, 0x4, 0x8, 0x4, 0x7ff, 0x1, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x7, 0x3, 0x0, 0x8, 0x2, 0xff, 0x63, 0x3, 0x2, 0xd, 0x7, 0x0, 0x1, 0xfffffffb, 0xfa, 0x9, 0x2, 0x0, '\x00', 0x25, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x9000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.817167085s ago: executing program 1 (id=169): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x64, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @broadcast}, {{0xfff9, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x2, 0x200, 0x0, 0x8, {[@sack_perm={0x4, 0x2}, @fastopen={0x22, 0x2}, @mptcp=@remove_addr={0x1e, 0x3}, @exp_fastopen={0xfe, 0x7, 0xf989, "f15eee"}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x64, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @broadcast}, {{0xfff9, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x2, 0x200, 0x0, 0x8, {[@sack_perm={0x4, 0x2}, @fastopen={0x22, 0x2}, @mptcp=@remove_addr={0x1e, 0x3}, @exp_fastopen={0xfe, 0x7, 0xf989, "f15eee"}]}}}}}}}, 0x0) ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000a40)={0x3, 0x0, 0x15, 0x20, 0x68, &(0x7f0000000640)}) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, 0x2}, 0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, 0x2}, 0x6) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x200, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000080)=0xfd8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r4, &(0x7f0000000240)='./file0\x00') ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000001540)=0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e9320574a599d763952148fb2bd655e900c850243e43246c70a3b317b0d87a001ce1972a24b", 0x1a0}], 0x1}}], 0x1, 0x2090) 28.750713399s ago: executing program 1 (id=170): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200001, 0x0) fchdir(r2) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/94) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000600), 0x2008800, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c7264b2f1396f64653d30303030303000"/29, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3fe, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0xfffffffe, 0x300040ac, 0x0, 0xffff, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xa8f86, 0x1) r6 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa0000000000000200"}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='blacklist\x00', r6) r7 = socket$nl_route(0x10, 0x3, 0x0) write$FUSE_STATFS(r5, &(0x7f0000000100)={0x60, 0x0, 0x0, {{0xffffffffffffff28, 0xd79b, 0x9, 0x1, 0x200, 0x20ceacbc, 0x80000000, 0x6}}}, 0x60) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x2, 0x0, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000900), 0x1, 0x0) write$P9_RREAD(r9, 0x0, 0x2d) close(r3) 28.492323441s ago: executing program 1 (id=173): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_emit_ethernet(0x35, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000020000000001002742420300"/56], 0x0) 28.373989345s ago: executing program 32 (id=173): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_emit_ethernet(0x35, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000020000000001002742420300"/56], 0x0) 25.093523959s ago: executing program 2 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 25.045991412s ago: executing program 2 (id=231): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x2020) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") 24.981259787s ago: executing program 2 (id=232): getpid() sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8910, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x8800, 0x20, 0x6}, 0x18) r3 = openat(r2, &(0x7f0000000140)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x148) write(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x80) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) 24.887397059s ago: executing program 2 (id=236): setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) 24.834236211s ago: executing program 2 (id=238): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) mprotect(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000) (async) mprotect(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db77c931091000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db77c931091000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) r1 = semget$private(0x0, 0x6, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000040)=0x2e18, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1120, 0x0) (async) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1120, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r1, &(0x7f00000000c0)=[{0x2}], 0x1) (async) semop(r1, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="442e2717", 0x4, 0x40, 0x0, 0x0) 23.952291578s ago: executing program 2 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0)={0x7}, 0x1) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.933668473s ago: executing program 33 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0)={0x7}, 0x1) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.824125173s ago: executing program 0 (id=492): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @mcast1, 0x4}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r6, 0x400454cd, 0x308) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.684077235s ago: executing program 0 (id=496): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) mount(&(0x7f0000000100)=@md0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='pipefs\x00', 0x300820, &(0x7f00000002c0)='^/-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (async) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) (async) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x125d, 0x0) gettid() (async) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) (async) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r5, 0xfffff000) 1.533865986s ago: executing program 5 (id=500): syz_emit_ethernet(0x26, &(0x7f00000007c0)={@link_local, @random="f070a23f0d69", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x18, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "8f84e8eb"}}}}, 0x0) 1.492904555s ago: executing program 5 (id=501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x1b, 0x6, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) 1.491763858s ago: executing program 5 (id=503): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) (fail_nth: 2) close_range(r0, 0xffffffffffffffff, 0x0) 1.1644297s ago: executing program 5 (id=506): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r0, &(0x7f0000002a40)=[{&(0x7f00000004c0)="30672d441b638573ce7c81eb2e709ebfb9e6261f733463f5b959f111fc86f9829856f3597b7be5d883451b8ee400805edbd1c338366625b63327e1e4dff17057f84304af30845a0564220420cd97592857a7e3303ad8c5f226d3edac75d04ed7e5cb847d8f172d5bfa801025ec671811e10fa3fa9d11bcfc5f78315e683b1e7cfdcb3aceb1ff8fdf33813217a830c719008366462c5c2fd7897a02aca1caf7676cbfd93fb2dbf443fa5db3ce559aa47302b4fa49e41d3c7316ec", 0xba}, {&(0x7f0000000640)="bac940e621c1dec2ec676c886e5510f6b1c9b7ced518f7b3446e93584ae9e3f86b8d36340a016f8d5f8e49d2c09ba1e1acb4c42d37c5922c4cedd4d6a346d6d69ce637f37a47b8104c781791f8dce322b780d1ac84e0fbcb87811121d0", 0x5d}, {&(0x7f00000006c0)="f7ff6c076cbd1ae8df0a6d6efac2378bf3f6e92b18d5042e22f6d71e302b94d8a2e7bcbaf22cbb9012", 0x29}, {&(0x7f0000000700)="8adcf5bda74e90807556251a5b0a97c2819132a1b45b0ffd3075600f04e0db6d8473b8f4e543bdcf7f1472613cfa495b80391f888b3aa956d31eb0b501278351fa9fab457c6370247039445887cd3beeafe914325fcab19f09d5eede177805885cef7cd5c5a6f37fd41eb2409dcf62962879", 0x72}, {&(0x7f0000000780)="571e7701766418f90be95289e6b101424d73b17edc9e02efc86b0a1c36b585cc354de1ca17ffbb27d9a5eea107945fc9ebb1cba269544050a8cf846b6f56c27999f5d9a0f91e1af7d9e17bc5dc222f90bae394e37789fa67b0685c521489b5b5e3efc012acf3bcc8f4125064d5b81f3e172f5ee2daf3ecaaf43222ec14c1fa75f308783448fcc64685ef8458c15e4ce6451326c820fbd3afdceefeeab5c301e4617ff7adb971889fced914436cc0a33f7415", 0xb2}, {&(0x7f0000000840)="e89572f999355f956f3eee67db14c3d88fee47157e8f760e1d2008ea157a1a0c5417dbb85bab32df7e9cb5d45cb3291f6ac8b28c315ef2d0b7ab8c882158823910c6a3099fd97508654d239c8bbe03", 0x4f}, {&(0x7f00000008c0)="6df9cae3a74e65fa92c4392e1bfb1475d5f56a6284e74eed1fbe4a3eec4c8e9e91cefbec3d33dfe64ce535d14711445ceaff621ff04ea85f56315871a5e21c303593a32d383ac4f166ed9ca9d3eade3c566af0cec82239ddf8d0a00556c13a7561d438d7b1620b3b7e6cb2c5d90a5f372a5c4d5c3948ce23ad744b3a5f5268537af4c7f3be8ef66daf3921403ec77549b41b5b92ca2f98fb331e398d6d8031474cc76de6daced87a82b60e03d7a884f80ab0efa95bf396b7a2ab7b81b33e38c79fdf6794f797216334", 0xc9}], 0x7, 0x3, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}}, 0x0) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, r6, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r8, &(0x7f0000000a00)={0x2020}, 0x2020) 1.104203085s ago: executing program 5 (id=507): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d07, &(0x7f0000000040)) 1.103906465s ago: executing program 5 (id=508): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x10000000000000, 0x0, 0x800}, 0x810) 894.143935ms ago: executing program 3 (id=510): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd70005abab29e32e7839f08003c000400000005003800000000000800340001017d00"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8090) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x44) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000003680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003640)={&(0x7f0000001380)={0x22b0, r9, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x803, 0x77}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_SSIDS={0x24, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="b0a03cb5061110ac1044e559b1"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2230, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe5, 0x0, "720d3177f588d02c86945e4881f78b0d4decb24e0ba952bd126644f1e16f9f7e3582acd0971d60be0b700242778f865276c015c9b40f40d0aa84d6a6ef4e5ff2247a5603076b34a2e88af0cd18136380f8b462f31d24767a22895a267b7a55194e64d6dd201902191fbb07661f17f025bf38ecae163ed91511a58e7e1e04138e96810bf4feea405a43a55c0544bc5d913f31fd7196622f32e0136c279490c46a8e644893de4e6c6c2ec2fc0ef872a51e9a2aca72aec627ff7d354d06d4a6e527ec19bb64e45d579cf1e9edb001bfbdd572a1234299a45b94885fe1e8e7daf6623e"}, @NL80211_BAND_2GHZ={0x40, 0x0, "dd467fee609a8b510c3085174441adb386b087f63d9b22e058c700f17320aa75971bc8b01717ff591233221628868a260382a747a9a0edde53020e8b"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "4324dbde35bd1b8d90270f517ead5e030793ec1c8f2e8e0dbffa20f77f4517ca52906a17dbe85c0c366c0894fbdd825a51a6815190385c9aa7a3953e3291df537f545751b84883edaf06ce41a1529360742902fa7f93d6051649bab1af8ef019e473112fc542ad1888d295c1f2dbf3747ac02b0c34451121d7d61e3de348d088ab4c640b88af35f9e0964973b9b787bb323bfd7ffa60bc157815407b8f9350ef1ac469465a6ebc5b1c5bd6f1bc515410673c7a0c5277215f5f38defade61475882cd6755f6bbf461b5742e26de480f76461b379acc11949cd68ff5095ab54023626e0c83683ab4d26b20ffd5774a7b06b5d624e4a67b8247e771cbdd74029e4b73fb52e9aedd19b190075f3734a2977efa9928c660c5da67395b071937375efe3fbc9afd2c3b3ed3f219aba87f9ae4a65996b606b6bd5a693ead619164276316b9992879dd9d85484cf6af3f90f0a446977135c7f1367e0599809deba2605e0362b6a19181d20a961be0fdcaf1803875ef8b625f8fb767286f8bda00f595c47e6548d83e70b53ec583cbf443b35e6b59e2d2c7de61a1fd99cfbeb76375d2d643c3985a156f1f1ff502272b7e55a5a5f57d98e36e59e8053d66115ac1321795fa6c6c81366ae4b7535cd1cf402910415bc4a961f81a614958aa48537c924b77d1735414a940eaabbe67493ebc31593376706843b3699026ce8ed0055c2c143c65f465d8e3a17bee246b290a6f39088bfe2c5ce32ddf101b17e9be6cb67412e9176d5a34b3176df5607e7e9cb4ccbde8e6f57d58bcde85033fc56639561d16b6ad5771aeb660c9f07c806634ecb768a90b5d6239165730a093d4dcf4589f15d0e76a734f6b840dc30e2da9d21c99006365974fd331c010dfca913bd77d10094a8a065aa23e48ecc49d94771fd5de78ef1624e69a6976cc4fe669190a26d593b2ebad3a238027e48eada09dff58b608334b6dc593daa84525363fbdd8db0c45be89698fc8a8b106018d10fbd24d9d268c10ba9879b67b7b058e297a0eb389f999eca728b5e9a74f5a2aeff4bb0c331a06a90d70d30e09fd0024d4a7c4ce5081494d3bdaae9e2225ec432a65c1c1ae8124a3a16e722a5ac3db4d5c4924e8d180600dcb94b2d9e8d472d08c17e44bff83893032a4f400c4ac09ccf07487f66a0de04a550200c1f693586e60c43cb1a1981d6b847b555432e210d7ee4b43a8ee56b31d06b04ce8f371e2309b331329fb3794ca819239af305f74fd6a35c20a53f8ffa321314d006cffe3d2e33ce35718f5afa421bd6159fba255024bf60984fc428ea8af4d5f7706fc159cdc19589b1679d9495ce30114b6a5ea282e3d89a1b9140c96020f5715adb2dc40163c88ca5b45bbae14cbee5760182e7019eafcc8e261a4f15893d7ea6bba41895a1dbec211f5527bbe6f07168aa5e92ae8a75731df0a5ec9426885432e29f3024c00251973f577c7e51f480887276252548426f3d9437b911022a5dc0f1216371e2c8a4df912dc25b62d8ccc3b322d1d19df9476977654fc84464e35eb706b70152f30b9509e8351b399b56a511d61e63f652168c5ddfd11d15c5ff7d020067b01f8bb7db07a54e079e9dd2cf90e89cbee08ea873be54f0125b546511d26c0f37b06e98fc73bdff4207aed2b856f3ea9391d93006dcea30715d073c122ec1fd5687fe3c0eca64deb0be864b6a7a68fe978d172f8b0e76144bdab4f86217ab418d2015a23a21c79a3e5d54017258c7c6d7ceeba99d3a6d0c108b709374324b6c3e839bfda40d177c9d7f3fc4eb7bba0aba264449455c3e0ffb5e1ef2efa195389c8e8ff0d3a1255cb8fd6432e89535f32c025db325f317fe056aec7fa0e88b5724e27d1c319655336298ad9215714a040b22ddf144692fe834d6c16341c955c1d11d4ebc7919d1f626c58555832ec953f18d9fd803a99ebbe2b6238d88f3d608b4c0027cfeaea819f804387babaab6e63c526e18cfe118720742bc3c6006bdf15e2d353e90ac51581a619b60afd26f2b16703fd549ca88535f6213be4beddde9e6d75ce34998a3927836b24a5a433c40d21ac28d1169fc4549c57d1572789d72b1d8cfa6e3044b1e2d6f65b7fe596771e4d950bad1ca2bf9bd432d5ad17095f5faa6045d28f834af27e6a1005d9992701baf1bdbc1dcf7a2716366a024acc587cc5fb005a0d2f0d3ce3b7f6a6d3e54282c7528ab82246a957dae7ebf0e06594766e48ef37781adf93ac450528123df9cf5d4bf0b425be56acc9007444db999efb5e70eff109980ebdf35582a1d905c045c46806cad2ef6762cbf29c838125efe13f3ef37176b260d1dd746abffff290b51073f40012657b92c2252096ccd1e28c904f73db9fda373e4d01f8fef82e89f8f5764aea5f5fc19ac8f44ea17b699707e098bc4df21ffa39ceac8b8c0120c41d048ede9411969c0b84e263f5c5abafc606dd29d94c6b7f3d3e7983ca66b054c633071336537f46d7981d4778a6a689f3253724d3e9fb97e015c25e5a1d55b2987d3d60b3a0328b5fc2f22c33f1f96f90819db2aa636abb860f7aed12a9dab6d14e37f3b0416e73cae8323d172088fd148321762dd59cea8f2d1bff117d5dd3116428e1c3dd49dce84bb57c494cc801e2081c2631869d872e9fc54e2b007b444160a20444b5e998c49fe2837dba2d8f892dc47640dd28bbf7380e2025d7e057af061b7152a2f592b67fa56e7948b565dfdce2370e66669ba51c9b4678ab6c1294ba6f63b96d9e5e84ab63351494554b9acde13edb887fc22ef31e4c818d10a9b0e0de18f7e7dede259b06841bca62ac111e2c5dc87f93351c4f0b9c1da0330f74ece86a27ead38bf4690240843645c6379987f11efb6801ecf04e28459f9857f1f6228cc17c6f308e0150a71d38fbf4200e4c71f93dda5a0ecbe798d067b506913ca96fc94927bf57dde1d2159b8005d35d48a524f5f35149c144b223ae98a64aa98fcf92cf9537bfc202c8161adcbd7d71aafa7047273b5b525bbb55e374cabbd4c6d9430000c49d6409c898f859f8093c60fd1273c2257c7b95885763fcaf57dbb87d9987867f96de24fe008b6c57c6f8f652e96d82883efc85cd80b74184c22acc965cccbd1265a591e0221149687105a9616c527b5b51da2d050f1a559a1003d4ac10cbf0e28d208fa2cea67cf1e9eed34f8ea948afbc9a05c5840d5b18bd84132d702efb25f7416fa268ef83c09fc45fc309022112d9f6610139b3bf3ebcaee372507ebd03cae13ff0a3af379f3889b3707ee076a8ff3a8ddda93dfc19f9aeece08390d9e5def12edc5d7c167b0d6e6682bb34c965fdd161ab38c6f04739da717ff9a33bcae96708bc58c9378bcb82ce62b88e67754c81205de56ccd753abad25d9ba3d287fe4d7e8fac4e52044c5986703caebb86d418521b7272ae2a464130113f81e78d0daeb8ada9df6011337852e552357116adb1dd357b5d5f7dbcefd9b92f33496bd3f478cf1a49b8248ddf50fe1cfa53ebb22bf3bde09e568bc8140aee1756eb3ffb345eabbf3da9dec8d479148a3986e71a9c41b579affe2cf8046026f2833cff2f61087f0e3a723af49fbb2193d7caa0429288e74ed502177a0f281930a760a6bd3d2c76958eff590b9dedbffad040ebf6e82ec17eb358e78016a1aa575dbf9b4306bfa8a80cea0e38250cb56016c5f634ea8d4c7c918b8b67f5d98e6d8fc0beceff11e6e17e8d28e0c0cb907a62a427bb388f4e5cf0212881ee0e8fdf27bff5779d293d96e161ed83862ccc9b75fde152e5e54ff66155e341f6c850ba646d1264b5ea67b7f37881888fe7540632d3314e5161dc5b4186abbac248e4b5e76c30d8b07af350581bdcee66ea4a00576ea4be2fafceb28f1474f853b893fe1dbef150bbf48cb6399760c728111c62d97b67bb90bcb50ebbed00ba8051139c11b81cc53f9b4140e506c424ee564993740c7bfbb52f89364fbe3564c13618ee51e92f46d472aaf9983d731c2471956cac03b280eb423c90eb280f5cdf4afe8aeab2ce0b858afc68fba541d654653054a00d7b3649cc44b50324a7924b537de35c3bbd37a48df63cff522b4fc7b8e2918fa199b530004a99a1bc49d6c4321c0e37656e09fb2832fe949059b1355e8d7055d0be30057bd27b93fa5a9c7067af5c755bdbd281c143cc0ddd6352a879838584c96be4c560232da83ab15cfa0fe0f841fdbc98570eb9a593cc522d892500721c5db9b2f80e60601dcd5597c0c485eed2de6df23dbf5c1c059360cd7fc4f541b9a3920aa2d766ff6464dea2f839509e49678916733e66956fcd20790c66a4480e2765cea274179f9f62c2b3fea7867ddce0e07073844ad3ef744c14b4bf5312423c9b5a3a91534950230587271288eb58ecfee6de97017939c9f1e3d6f4d43710d1cd6a4c3b04ab66279d46367a57b4909f3cdd3ec9da7e283e18474e6de654adfc7e50c08cdbcb3e17cd3b78e0e98af1365fd6e1a696d999fbc8e6c3832dec4e235b5637bca6e6567c106f53dfb6ea30f114c4f0ad23de66a13280a925c8c5216b90c660cd3ed5579945582b37e6134543986bf5ac42a2bad01a72288a8a429c69b9f427a66baac7bc4e413c1804283111d557db36a441c10b51dbc38c5ffaebb43152d88cb6be72e8d55795cf7e5aafcc0848f50a8f5a78e6ed6d894d3f83717ab6db77509aa71c1a87e2c1f11b8cb43fff164896c56fba7c51299d49a7ddeb819e10204136d9e7636c9fcd47be70d1338d574ec7488de0b0eb2e9944746266bfa78fa394a6bd663a847135e991e5ef2d970c058e7be9b22a4b8b9c800eccc00c9af20dc7ff2a3d5da2da7d665b383edd4352c26b857309b234f1ac0d4c958ea4b64b181d368101a857a830c10d189f1c2fe1e13424a18b985264d5843457f7ac275d90346327020d347ed327092401dfa3345356093e2883e90c100ec876b4dff8c96c4046e35f04a6dfa54598c2a70a72b41d59a4ff3a206e83a0c98959f8f041dad2aeb2373c1ba8c14372e8d556c786b2141b59c39bd53b7dd0195403231ab0cea9183837942943e77d694581812e120dea31f62e736e481108c26437ea6ef1f824a8f6e23d101412ed23377abc5973dbcf7c5e3c6c4830ec64c2897714643e2f2fb5c6adf1be52e467eae2bdc9f0d61bce092a158a86b490d7d9329f0c55fb3a811c2e1b4c75de4a3323fdeaaca17c0e76579bee9e8a71579ad0799e74da377de416b4d5970e395b0334f8a4828c8a95e21a97704bf38c2e9d05f91eea6c877c1ce5e08ac929de89df2d38c4f6348965276ab38b651b5482ebba7cb7207f2f63c02e224856f5be61ecf998b9ac14b5d96f0219dfde27ea6a62d331e7e50261aa71c33ffb7b4a90c16356b4b94b0cb43188f68c18d96f9b52e70b380a40e68ee78053f1b05de02e66b4b72c9a46bc85a67aebbbf207af9c6c7107abe2ea3a2339b355dbbdeac1af852a0cea9549bfc5cd2ec8e9b7ee8eecd89e4d1e232fedab4c68863ad124429fc6bce31c39441cac333abe0f3e93df2cdb31a76e54377fcc4e6b68b0463012697581f365e7de0b6c43d0468be9989e9f7c93da01e96c4bb19c4fad3082520b2a3e9f58414ad2013286442ca39486823cd29f78965f64291c2d2a88d7fdabcf64c1182eeae84b81788c0b98cf92b515b47b0aedfaf9d19127972d2694f1e908f6d2e947f2ba9464d1f2ce46a22bfa8ae66a6e398f265d635fcef7a6841b8736d01b2c70ebd10414e443de9565cb94ceaf664697adac65726a4566eb1d8f260ded6f79f02f39e9e41ae1"}, @NL80211_BAND_5GHZ={0x4a, 0x1, "ed3e747d2de1793f85f2e6c0cf1af6ae8e41b10ac953ed5def4093585515de5845504eb366e2868b9a987be10026d3974f2f4a872374ebb5a0c067c14ad6a75fc070e011e640"}, @NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_6GHZ={0xae, 0x3, "38db275c99371f4b9234f859afb01624d1ef6769222e2050da8c83aaf213af01981a5aeb5930f2a917d1984c05049cd1bc752c9bb72a6fd91fefe5f5180996dce1bb1a0236f4306ecab17bbf4c72d9c8ddb9a471076f0413d0eeac4a088b44d58118688c4a4bef40cf48a85a3a72fbb1f1b9f596f3adfcf9a00356c91b36b44907c0a8a68bfdec7b6651bf24b8f47fd0fe123544462e8a5e9e11454d2fbcf135b8234c27341e2b586f3e"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4ae}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xff}]}, 0x22b0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$KVM_SET_MSRS(r8, 0xc048aeca, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x40010, r11, 0x1000) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{0x303}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "559edb33", "8254650325d850d2"}, 0x38) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "8f251d", 0x0, 0x1, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0xffffff01, 0x67, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xa9}, 0x9c) 804.067104ms ago: executing program 0 (id=512): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)=ANY=[@ANYBLOB="d506330080000000fffffffffffff47a06b12e93a384cfbdd2e35027972acb3b5d15ad249e914ee7eccc698bca646251b6b309216ab5c36e7bcc009825c01029032b045bb4853b500a341e434664733e23c3b1f144634d5e82c97d485ab1a57ce94205d2df523eae6d09a7f860d411393dc5a293a398f840c13f0581b33fab78417f4b36748ba1720795cb4d643a30c99bf304ac01215451b89f309ec524150be7928c2d866aa7d4f936219fcd", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYRES16, @ANYRES16=r0], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x20000810) 798.341938ms ago: executing program 3 (id=513): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) fsopen(&(0x7f0000000000)='proc\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) fanotify_init(0x200, 0x2) 704.64998ms ago: executing program 3 (id=514): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='&\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_create(0x8) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x101}, 0x0) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) fsopen(&(0x7f0000000040)='qnx6\x00', 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 653.408508ms ago: executing program 3 (id=516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x6, 0x8, 0x7b, 0xb, 0x4e, 0x9, 0x4, 0x4, 0x40, 0x6, 0x94, 0x2f, 0x3}, {0x7ff, 0x8, 0x8f, 0x4, 0x34, 0x4e, 0x40, 0x10, 0xa7, 0x9, 0x5, 0x3, 0x2}, {0x8723, 0xfff, 0x7f, 0x5, 0xa, 0x26, 0x9, 0x1, 0x9, 0x80, 0x84, 0x8, 0x7f}], 0xb}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 641.658676ms ago: executing program 0 (id=517): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d07, &(0x7f0000000040)) 544.30588ms ago: executing program 4 (id=518): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/148, 0x1a, 0x94, 0x1}, 0x28) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000000)) 543.906862ms ago: executing program 0 (id=519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000040)='\xe0^@&&}\'\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000891) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000640)={0x1, 0x0, @ioapic={0x200000, 0x7, 0x5, 0x3, 0x0, [{0x4, 0x9, 0x18, '\x00', 0x80}, {0x81, 0x6}, {0x8, 0x7, 0x94, '\x00', 0x6}, {0xfd, 0x10, 0x4, '\x00', 0x71}, {0x47, 0x6, 0x1, '\x00', 0x3}, {0x1, 0x6, 0x10, '\x00', 0x6}, {0x6, 0x1, 0x7, '\x00', 0x47}, {0x76, 0x72, 0x4, '\x00', 0x95}, {0x7f, 0x7f, 0x99, '\x00', 0x5}, {0x40, 0x9, 0x8e, '\x00', 0x5}, {0x8, 0x7, 0x8, '\x00', 0x8}, {0x5, 0x0, 0x40, '\x00', 0x3}, {0x9, 0xa, 0x4}, {0x7, 0x4, 0x3, '\x00', 0x1}, {0x74, 0x9, 0x8, '\x00', 0x9}, {0x9, 0x5, 0x80, '\x00', 0x5}, {0x7, 0xd, 0xb, '\x00', 0x9}, {0xb, 0xa, 0xe, '\x00', 0x4}, {0x4, 0x9, 0x5, '\x00', 0x8}, {0x4, 0xef, 0x5, '\x00', 0x4b}, {0xca, 0x5, 0xb1, '\x00', 0x3}, {0x7f, 0x0, 0xe0}, {0x3, 0xa4, 0x8, '\x00', 0xf7}, {0xdf, 0x2, 0xc0, '\x00', 0x9}]}}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x2}]}}, &(0x7f0000000540)=""/132, 0x26, 0x84, 0x1}, 0x20) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x9) 484.330092ms ago: executing program 4 (id=520): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x8, 0x3, 0x4, 0x2}) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000c00)={0x0, &(0x7f0000000540)=[@nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x80, 0x4, 0xffffffff90198472, 0x2}}, @in_dx={0x69, 0x20, {0xef66, 0x1}}, @wr_crn={0x67, 0x20, {0x0, 0x6}}, @uexit={0x0, 0x18, 0x6}, @nested_load_syzos={0x136, 0xc8, {0x3, 0x2b, [@wrmsr={0x65, 0x20, {0x234, 0x5}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xa, 0x5}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0x20, {0x1, 0x9}}, @nested_amd_vmsave={0x183, 0x18}]}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro32=0x4406, 0x3, 0x3, 0x5}}, @wrmsr={0x65, 0x20, {0x39a, 0x3}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_syzos={0x136, 0x15e, {0x2, 0xf, [@in_dx={0x69, 0x20, {0xc6e2, 0x2}}, @code={0xa, 0x58, {"660f38806f596564420f01f5c4e1eb7df166470f38809ba47e00003e450f23032e0fc73c99d8e73e440f013c2ec74424008e000000c74424022b820000ff2c2466f23e2e42ddec"}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x6, 0x200000, 0x1}}, @wr_crn={0x67, 0x20, {0xb, 0x2ac00}}, @rdmsr={0x66, 0x18, {0x8a5}}, @nested_load_code={0x12e, 0x5e, {0x0, "c4e17829bcf61d0000000f01df653e0f00128f697812c666baf80cb8c021438cef66bafc0ced66baf80cb88ce67489ef66bafc0cec400f00183e420f01c50f01c366420f18c6"}}]}}, @out_dx={0x6a, 0x28, {0xe57, 0x0, 0xf}}, @wr_drn={0x68, 0x20, {0x2, 0x7fff}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmresume={0x130, 0x18}, @in_dx={0x69, 0x20, {0xa320, 0x2}}, @code={0xa, 0x5b, {"0f01df66b806018ee0c462e13a46080f2143420f00d148b800000000010000000f23c80f21f8350800f0000f23f86565400f785cb300440f00500066430f38806cdc0066660f3a0e118c"}}, @in_dx={0x69, 0x20, {0x7d10, 0x4}}, @wr_drn={0x68, 0x20, {0x1, 0xc}}, @wr_drn={0x68, 0x20, {0x6, 0x6}}, @out_dx={0x6a, 0x28, {0xc6bc, 0x2, 0x3}}, @nested_load_code={0x12e, 0x6d, {0x3, "b9800000c00f3235004000000f3047da420eb91d090000b800400000ba000000000f30c42270f7210f01cb660f38824100c4c2f91c3cc7b963080000b8f8ffffffbaffff00000f30b9160200000f32c4c1f8116592"}}, @in_dx={0x69, 0x20, {0xe5a2}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x0, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x100000, 0x6b74}}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control32=0x4018, 0xffff, 0x5, 0x8001}}, @code={0xa, 0x75, {"460fc758ccb9510300000f320f01c566b82c010f00d0654a0fc75f97660f72e50c7508c744240000000000c7442402f1000000c7442406000000000f011424c744240080000000c7442402af000000c7442406000000000f0114248f696097a9ec160000"}}, @nested_vmresume={0x130, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8000}], 0x683}) capget(&(0x7f0000000080)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000180)={0x9f, 0x400, 0x100, 0x6, 0x7, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r2, 0x701, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4c000, 0x0) ioctl$KVM_TDX_GET_CPUID(r3, 0xc008aeba, &(0x7f0000000400)={0x5, 0x0, &(0x7f0000000240)={0xa, 0x0, [{0x80000007, 0xffe00000, 0x0, 0x7fff, 0x6, 0x2, 0xb}, {0x80000014, 0x9, 0x7, 0xffffff8d, 0x5, 0x346, 0xfffff801}, {0x80000000, 0x6, 0x5, 0x5, 0xfffffffa, 0x3ff, 0x8d0c}, {0x80000007, 0x8, 0x4, 0xd, 0x0, 0x6b, 0xd2ed}, {0x80000008, 0x8, 0x3, 0xc90, 0xe3c7, 0x4e, 0x10}, {0x40000001, 0x2eab, 0x0, 0x9, 0x9, 0x4, 0xd}, {0x6, 0x6, 0x6, 0x6, 0x1, 0x14000000, 0xffff7fff}, {0x4, 0x7, 0x1, 0xfff, 0xa, 0x3, 0x2}, {0xc0000001, 0x3, 0x0, 0x80000000, 0x80, 0x1, 0x5e8c}, {0x40000000, 0x7, 0x6, 0xc528, 0x3ff, 0x0, 0x40}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000320000000000000000000000850000009e0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000c40)={0x4, 0x0, [{0x80000008, 0x386, 0x2, 0x7, 0xff, 0x2, 0x4}, {0x2, 0x5, 0x0, 0x10, 0x9, 0xfff, 0x7fffffff}, {0x0, 0x3, 0x4, 0xac4, 0x58f, 0x100, 0xff}, {0x80000008, 0x2, 0x4, 0x8518, 0x2, 0x1, 0x7}]}) 484.119804ms ago: executing program 4 (id=521): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x20) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x1010000, &(0x7f0000000400)) r0 = syz_open_dev$video(&(0x7f0000000300), 0x35, 0x80200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5, @ANYRES32=r5, @ANYRESHEX], 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7], 0x3c}}, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001d40)={0x9, @pix={0xffffffff, 0x3, 0x3132564e, 0x5, 0x3, 0x0, 0xe, 0x4, 0x1, 0x8, 0x0, 0x6}}) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000006c0)={0xc, @meta={0x4d435655, 0x4a897bfe, 0xe44a, 0xfcad, 0x4f71b439}}) chdir(&(0x7f0000000140)='./file1\x00') r8 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) symlinkat(&(0x7f00000000c0)='./file2\x00', r8, &(0x7f0000000100)='./file2\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x40049366, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000ffdbdf2508000000180001801400020073797a5f74756e00000000000000000014000280100003800c"], 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', r3, 0x2f, 0x2, 0xf7, 0x30000000, 0x40, @dev={0xfe, 0x80, '\x00', 0xd}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x20, 0x40, 0x5, 0x2}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000040a010800000000000000000a0000070900010073797a31"], 0x3c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000020) 411.874873ms ago: executing program 0 (id=522): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) listen(r0, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000002060300000000000000000001000002050001001b0000000500050003000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x50, r1, 0x629b3000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='readonly', 0x8) 351.846489ms ago: executing program 3 (id=523): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x50800, 0x0) futex(&(0x7f00000040c0), 0xa, 0xffffffff, 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000080)=0x7, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) setns(0xc9, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="460a0000000000007910b8000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r10, @ANYBLOB="0b00000000000000cc001a8018000a80140007"], 0xec}}, 0x44000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4000, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4004080) write(r0, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest,data_digest', 0x4b) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 351.394595ms ago: executing program 4 (id=524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x70) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x504c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(0x3) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmmsg$inet(r3, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x6, 0x0, 0x8, 0x0, 0xe410, 0x8, 0x6, 0xb, 0x83, 0xe, 0x5, 0x8a, 0x0, 0x104, 0x2a, 0x0, 0x0, 0x8, 0x7f, '\x00', 0xff, 0x100000d}) 214.49529ms ago: executing program 3 (id=525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x3}, 0x8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002400)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xcc, 0x9}, 0x0, 0x0, 0x7, 0x9b, 0x2, 0xffffffffffffffff, 0xc831, 0xffff, 0x7fff, 0x2}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000008037000100ffffffff9500000000000000ff61cdc33a46ce16bd7ce5c45b414a3ac8f51907b24e7cab78d555bc3e9e791e607ac61cd54800ef0e12c5d946fcc8cdd1b15446a0ab3ba0f68dfc8c7642f7e507aaf6f1c3cb3e4b48f5e27466f98af11fde110c537ef91df8f0909fa2cd8feb8a0a2d89614a0863d2303d48baff9031dcda1f914ecddba455efafb395123c704a804f1c204dd057a770b700f9c1d110c2ad2d5154ee1812531817ecdf7d71"], &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r5, 0x4) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x5f8b, 0x80000001, 0x8b}) mount$fuse(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r4, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0xc0046686, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35300900000045c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd31fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2a52a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e11965ffc568be2eab11b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a0500e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e7b4e5988933852820226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d05000000a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109edcb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727b4d2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e2b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b300", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0xfffffffffffffffe, 0x6, {0x1003, 0x3, 0x0, '\x00', {0x80, 0x0, 0xae3, 0x10, r7, 0xffffffffffffffff, 0x8000, '\x00', 0x9, 0x5, 0x200, 0x7fffffff, {0x1, 0x5}, {0x7, 0x8000042}, {0x85, 0x403a}, {0x4, 0x40000008}, 0xf3, 0x6, 0x81, 0x9}}}}) ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0x3) write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r6, {0x7, 0x29, 0x2, 0x2810901, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010141, 0x0, 0x10001}]}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 73.273467ms ago: executing program 4 (id=526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r1, 0x303, 0x4000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) set_mempolicy(0x3, &(0x7f0000000140)=0x7, 0x8) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r5, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) syz_open_dev$tty20(0xc, 0x4, 0x0) getpriority(0x0, r6) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x452000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r7, 0xc05c5340, &(0x7f0000000180)={0x5, 0x6023, 0x9c83, {0x2a9d617b, 0x8}, 0x7, 0x566}) 0s ago: executing program 4 (id=527): recvfrom(0xffffffffffffffff, 0x0, 0xc, 0x60002123, 0x0, 0x0) kernel console output (not intermixed with test programs): ive_file:0 inactive_file:64279 isolated_file:0 [ 56.454697][ T6156] unevictable:1026 dirty:2254 writeback:0 [ 56.454697][ T6156] slab_reclaimable:11691 slab_unreclaimable:65676 [ 56.454697][ T6156] mapped:25055 shmem:1593 pagetables:1183 [ 56.454697][ T6156] sec_pagetables:292 bounce:0 [ 56.454697][ T6156] kernel_misc_reclaimable:0 [ 56.454697][ T6156] free:445202 free_pcp:24222 free_cma:0 [ 56.454723][ T6156] Node 0 active_anon:32372kB inactive_anon:0kB active_file:0kB inactive_file:256916kB unevictable:2104kB isolated(anon):0kB isolated(file):0kB mapped:100220kB dirty:9008kB writeback:0kB shmem:4372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12960kB pagetables:4556kB sec_pagetables:1168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 56.454750][ T6156] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 56.454774][ T6156] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 56.454820][ T6156] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 56.454875][ T6156] Node 0 DMA32 free:113072kB boost:0kB min:27360kB low:34200kB high:41040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32372kB inactive_anon:0kB active_file:0kB inactive_file:256916kB unevictable:2104kB writepending:9008kB zspages:0kB present:2080628kB managed:1252924kB mlocked:104kB bounce:0kB free_pcp:92988kB local_pcp:27856kB free_cma:0kB [ 56.454905][ T6156] lowmem_reserve[]: 0 0 0 0 0 [ 56.454922][ T6156] Node 1 Normal free:1652376kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB writepending:8kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:3900kB local_pcp:140kB free_cma:0kB [ 56.454950][ T6156] lowmem_reserve[]: 0 0 0 0 0 [ 56.454968][ T6156] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 56.455028][ T6156] Node 0 DMA32: 117*4kB (M) 42*8kB (UM) 56*16kB (UME) 23*32kB (UM) 22*64kB (UM) 15*128kB (UM) 31*256kB (UME) 10*512kB (UM) 8*1024kB (UM) 6*2048kB (UME) 18*4096kB (M) = 113028kB [ 56.455111][ T6156] Node 1 Normal: 1*4kB (U) 3*8kB (UM) 2*16kB (UM) 5*32kB (UM) 3*64kB (UM) 4*128kB (UM) 1*256kB (U) 3*512kB (M) 1*1024kB (U) 3*2048kB (UM) 401*4096kB (M) = 1652380kB [ 56.455193][ T6156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 56.455201][ T6156] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 56.455209][ T6156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 56.455217][ T6156] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 56.455224][ T6156] 65899 total pagecache pages [ 56.455228][ T6156] 0 pages in swap cache [ 56.455232][ T6156] Free swap = 124996kB [ 56.455235][ T6156] Total swap = 124996kB [ 56.455239][ T6156] 1048443 pages RAM [ 56.455243][ T6156] 0 pages HighMem/MovableOnly [ 56.455246][ T6156] 285902 pages reserved [ 56.455249][ T6156] 0 pages cma reserved [ 56.910452][ T42] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.078627][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 57.079125][ T42] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 57.079948][ T42] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 57.079973][ T42] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 57.079984][ T42] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 57.079998][ T42] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 57.080009][ T42] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 57.080030][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.293447][ T42] usb 5-1: usb_control_msg returned -32 [ 57.293471][ T42] usbtmc 5-1:16.0: can't read capabilities [ 57.426745][ T6190] jffs2: notice: (6190) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 58.127609][ T6216] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 58.474357][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.530283][ T43] kauditd_printk_skb: 63 callbacks suppressed [ 58.530296][ T43] audit: type=1400 audit(1789128400.070:392): avc: denied { create } for pid=6229 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.532670][ T6231] netlink: 104 bytes leftover after parsing attributes in process `syz.2.106'. [ 58.532754][ T43] audit: type=1400 audit(1789128400.070:393): avc: denied { write } for pid=6229 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.532776][ T43] audit: type=1400 audit(1789128400.070:394): avc: denied { nlmsg_write } for pid=6229 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.707973][ T43] audit: type=1400 audit(1789128400.240:395): avc: denied { read } for pid=6236 comm="syz.3.108" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.708304][ T43] audit: type=1400 audit(1789128400.240:396): avc: denied { open } for pid=6236 comm="syz.3.108" path="/dev/ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.714933][ T43] audit: type=1400 audit(1789128400.250:397): avc: denied { read } for pid=6236 comm="syz.3.108" path="socket:[11178]" dev="sockfs" ino=11178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.769291][ T43] audit: type=1400 audit(1789128400.310:398): avc: denied { block_suspend } for pid=6236 comm="syz.3.108" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.779390][ T43] audit: type=1400 audit(1789128400.320:399): avc: denied { create } for pid=6239 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.780090][ T43] audit: type=1400 audit(1789128400.320:400): avc: denied { write } for pid=6239 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.781335][ T43] audit: type=1400 audit(1789128400.320:401): avc: denied { listen } for pid=6239 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 59.538873][ T5595] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 59.609238][ T6268] FAULT_INJECTION: forcing a failure. [ 59.609238][ T6268] name failslab, interval 1, probability 0, space 0, times 0 [ 59.609268][ T6268] CPU: 1 UID: 0 PID: 6268 Comm: syz.1.118 Not tainted syzkaller #0 PREEMPT(full) [ 59.609289][ T6268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.609299][ T6268] Call Trace: [ 59.609306][ T6268] [ 59.609314][ T6268] dump_stack_lvl+0x100/0x190 [ 59.609359][ T6268] should_fail_ex.cold+0x5/0xa [ 59.609385][ T6268] should_failslab+0xc2/0x120 [ 59.609415][ T6268] __kvmalloc_node_noprof+0x113/0x9b0 [ 59.609434][ T6268] ? __might_fault+0xc5/0x140 [ 59.609474][ T6268] ? xt_alloc_table_info+0x44/0xa0 [ 59.609507][ T6268] xt_alloc_table_info+0x44/0xa0 [ 59.609530][ T6268] do_ipt_set_ctl+0x611/0xcf0 [ 59.609557][ T6268] ? nf_sockopt_find.isra.0+0x222/0x290 [ 59.609580][ T6268] ? nf_sockopt_find.isra.0+0x222/0x290 [ 59.609605][ T6268] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 59.609631][ T6268] ? __mutex_unlock_slowpath+0x35d/0x930 [ 59.609664][ T6268] ? sockopt_release_sock+0x5c/0x70 [ 59.609687][ T6268] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 59.609722][ T6268] ? nf_sockopt_find.isra.0+0x222/0x290 [ 59.609748][ T6268] nf_setsockopt+0x8d/0xf0 [ 59.609773][ T6268] ip_setsockopt+0xcb/0xf0 [ 59.609803][ T6268] udp_setsockopt+0x64/0xb0 [ 59.609827][ T6268] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 59.609855][ T6268] do_sock_setsockopt+0xf3/0x1d0 [ 59.609882][ T6268] __sys_setsockopt+0x195/0x220 [ 59.609907][ T6268] __x64_sys_setsockopt+0xbd/0x160 [ 59.609927][ T6268] ? do_syscall_64+0xae/0x790 [ 59.609950][ T6268] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.609972][ T6268] do_syscall_64+0x123/0x790 [ 59.609998][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.610018][ T6268] RIP: 0033:0x7f834ff9e159 [ 59.610034][ T6268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.610051][ T6268] RSP: 002b:00007f8350ed1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 59.610069][ T6268] RAX: ffffffffffffffda RBX: 00007f8350225fa0 RCX: 00007f834ff9e159 [ 59.610081][ T6268] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 59.610091][ T6268] RBP: 00007f8350ed1090 R08: 0000000000001000 R09: 0000000000000000 [ 59.610102][ T6268] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.610113][ T6268] R13: 00007f8350226038 R14: 00007f8350225fa0 R15: 00007ffc66aa75c8 [ 59.610138][ T6268] [ 59.709167][ T5595] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 59.709963][ T5595] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.709978][ T5595] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.709997][ T5595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.887611][ T6274] FAULT_INJECTION: forcing a failure. [ 59.887611][ T6274] name failslab, interval 1, probability 0, space 0, times 0 [ 59.887630][ T6274] CPU: 0 UID: 0 PID: 6274 Comm: syz.1.120 Not tainted syzkaller #0 PREEMPT(full) [ 59.887643][ T6274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.887649][ T6274] Call Trace: [ 59.887653][ T6274] [ 59.887669][ T6274] dump_stack_lvl+0x100/0x190 [ 59.887690][ T6274] should_fail_ex.cold+0x5/0xa [ 59.887706][ T6274] should_failslab+0xc2/0x120 [ 59.887721][ T6274] kmem_cache_alloc_noprof+0x92/0x6a0 [ 59.887734][ T6274] ? __inet_hash_connect+0x6da/0x2000 [ 59.887747][ T6274] __inet_hash_connect+0x6da/0x2000 [ 59.887762][ T6274] ? __pfx___inet_check_established+0x10/0x10 [ 59.887780][ T6274] ? __pfx___inet_hash_connect+0x10/0x10 [ 59.887793][ T6274] ? inet_init_ehash_secret+0xd/0x60 [ 59.887809][ T6274] ? inet_hash_connect+0x9f/0x340 [ 59.887821][ T6274] tcp_v4_connect+0xeb3/0x1b40 [ 59.887852][ T6274] ? __pfx_tcp_v4_connect+0x10/0x10 [ 59.887867][ T6274] ? __lock_acquire+0x5c0/0x1f40 [ 59.887882][ T6274] __inet_stream_connect+0x208/0xf90 [ 59.887899][ T6274] ? lock_acquire+0x1d1/0x380 [ 59.887910][ T6274] ? __pfx___inet_stream_connect+0x10/0x10 [ 59.887925][ T6274] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 59.887942][ T6274] ? __local_bh_enable_ip+0xa5/0x120 [ 59.887956][ T6274] inet_stream_connect+0x57/0xa0 [ 59.887971][ T6274] __sys_connect_file+0x146/0x1a0 [ 59.887984][ T6274] __sys_connect+0x141/0x170 [ 59.887997][ T6274] ? __pfx___sys_connect+0x10/0x10 [ 59.888016][ T6274] __x64_sys_connect+0x72/0xb0 [ 59.888026][ T6274] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.888040][ T6274] do_syscall_64+0x123/0x790 [ 59.888055][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.888067][ T6274] RIP: 0033:0x7f834ff9e159 [ 59.888076][ T6274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.888086][ T6274] RSP: 002b:00007f8350ed1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 59.888097][ T6274] RAX: ffffffffffffffda RBX: 00007f8350225fa0 RCX: 00007f834ff9e159 [ 59.888104][ T6274] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000005 [ 59.888110][ T6274] RBP: 00007f835003503b R08: 0000000000000000 R09: 0000000000000000 [ 59.888116][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.888122][ T6274] R13: 00007f8350226038 R14: 00007f8350225fa0 R15: 00007ffc66aa75c8 [ 59.888136][ T6274] [ 59.896713][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 59.902026][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 59.927706][ T5595] usb 7-1: usb_control_msg returned -32 [ 59.927743][ T5595] usbtmc 7-1:16.0: can't read capabilities [ 59.944021][ T5595] usb 7-1: USB disconnect, device number 2 [ 60.796995][ T42] usb 5-1: USB disconnect, device number 3 [ 61.197073][ T6308] Process accounting resumed [ 61.447773][ T6316] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 61.558761][ T6316] md: could not open device unknown-block(1,0). [ 61.611031][ T6321] FAULT_INJECTION: forcing a failure. [ 61.611031][ T6321] name failslab, interval 1, probability 0, space 0, times 0 [ 61.611054][ T6321] CPU: 0 UID: 0 PID: 6321 Comm: syz.1.133 Not tainted syzkaller #0 PREEMPT(full) [ 61.611086][ T6321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.611093][ T6321] Call Trace: [ 61.611097][ T6321] [ 61.611102][ T6321] dump_stack_lvl+0x100/0x190 [ 61.611133][ T6321] should_fail_ex.cold+0x5/0xa [ 61.611149][ T6321] should_failslab+0xc2/0x120 [ 61.611167][ T6321] __kmalloc_cache_noprof+0x91/0x6d0 [ 61.611183][ T6321] ? cap_capable+0x107/0x430 [ 61.611200][ T6321] ? __x64_sys_futex+0x358/0x4d0 [ 61.611215][ T6321] ? fsnotify_alloc_group+0x8d/0x320 [ 61.611292][ T6321] fsnotify_alloc_group+0x8d/0x320 [ 61.611313][ T6321] __do_sys_fanotify_init+0x271/0xe30 [ 61.611331][ T6321] do_syscall_64+0x123/0x790 [ 61.611351][ T6321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.611363][ T6321] RIP: 0033:0x7f834ff9e159 [ 61.611372][ T6321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.611383][ T6321] RSP: 002b:00007f8350ed1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 61.611396][ T6321] RAX: ffffffffffffffda RBX: 00007f8350225fa0 RCX: 00007f834ff9e159 [ 61.611407][ T6321] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000200 [ 61.611413][ T6321] RBP: 00007f835003503b R08: 0000000000000000 R09: 0000000000000000 [ 61.611419][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.611426][ T6321] R13: 00007f8350226038 R14: 00007f8350225fa0 R15: 00007ffc66aa75c8 [ 61.611449][ T6321] [ 61.689083][ T5874] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.822585][ T6329] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 61.823501][ T6329] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 61.841170][ T5874] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.843171][ T5874] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.843190][ T5874] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.843203][ T5874] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 61.843214][ T5874] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.843254][ T5874] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.844632][ T5874] usb 8-1: config 0 descriptor?? [ 61.876679][ T6331] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1347990528.617856767), cmd(3) [ 62.138598][ T70] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 62.258880][ T5874] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.258909][ T5874] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.258921][ T5874] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.258933][ T5874] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.258944][ T5874] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.258956][ T5874] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.258967][ T5874] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.258979][ T5874] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.258990][ T5874] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.259002][ T5874] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.270299][ T6333] ip_tables: iptables: counters copy to user failed while replacing table [ 62.275175][ T5874] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 62.289118][ T70] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 62.289969][ T70] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 62.289988][ T70] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 62.290002][ T70] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 62.290026][ T70] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 62.290056][ T70] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 62.290075][ T70] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 62.290091][ T70] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 62.290323][ T6333] netlink: 'syz.0.139': attribute type 83 has an invalid length. [ 62.292593][ T70] usb 6-1: string descriptor 0 read error: -22 [ 62.292653][ T70] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.293961][ T70] usb 6-1: config 0 descriptor?? [ 62.299044][ T70] hub 6-1:0.0: bad descriptor, ignoring hub [ 62.299057][ T70] hub 6-1:0.0: probe with driver hub failed with error -5 [ 62.307412][ T70] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input6 [ 62.384452][ T6336] overlayfs: unescaped trailing colons in lowerdir mount option. [ 62.408034][ T6338] syz_tun: entered allmulticast mode [ 62.416948][ T6337] syz_tun: left allmulticast mode [ 62.499106][ T6344] netlink: 'syz.0.143': attribute type 1 has an invalid length. [ 62.501982][ T6331] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986356271.1886284079.1697608821), cmd(6) [ 62.507532][ T1666] usb 6-1: USB disconnect, device number 2 [ 62.509984][ T6344] netlink: 'syz.0.143': attribute type 10 has an invalid length. [ 62.509995][ T6344] netlink: 40 bytes leftover after parsing attributes in process `syz.0.143'. [ 62.510072][ T6344] dummy0: entered promiscuous mode [ 62.553900][ T5595] usb 8-1: USB disconnect, device number 3 [ 63.087132][ T6370] FAULT_INJECTION: forcing a failure. [ 63.087132][ T6370] name failslab, interval 1, probability 0, space 0, times 0 [ 63.087152][ T6370] CPU: 0 UID: 0 PID: 6370 Comm: syz.3.155 Not tainted syzkaller #0 PREEMPT(full) [ 63.087164][ T6370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.087171][ T6370] Call Trace: [ 63.087174][ T6370] [ 63.087179][ T6370] dump_stack_lvl+0x100/0x190 [ 63.087199][ T6370] should_fail_ex.cold+0x5/0xa [ 63.087215][ T6370] should_failslab+0xc2/0x120 [ 63.087253][ T6370] __kmalloc_noprof+0xfc/0x840 [ 63.087265][ T6370] ? __pfx_dynamic_dname+0x10/0x10 [ 63.087277][ T6370] ? tomoyo_encode2+0xfb/0x3c0 [ 63.087292][ T6370] tomoyo_encode2+0xfb/0x3c0 [ 63.087306][ T6370] tomoyo_encode+0x29/0x50 [ 63.087318][ T6370] tomoyo_realpath_from_path+0x18c/0x690 [ 63.087334][ T6370] tomoyo_path_number_perm+0x23c/0x580 [ 63.087350][ T6370] ? tomoyo_path_number_perm+0x22e/0x580 [ 63.087368][ T6370] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 63.087391][ T6370] ? __lock_acquire+0x5c0/0x1f40 [ 63.087409][ T6370] ? __fget_files+0x34/0x3d0 [ 63.087422][ T6370] ? find_held_lock+0x2b/0x80 [ 63.087437][ T6370] ? hook_file_ioctl_common+0x140/0x440 [ 63.087454][ T6370] ? __fget_files+0x21f/0x3d0 [ 63.087469][ T6370] security_file_ioctl+0xd3/0x230 [ 63.087482][ T6370] __x64_sys_ioctl+0xb7/0x210 [ 63.087493][ T6370] do_syscall_64+0x123/0x790 [ 63.087510][ T6370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.087522][ T6370] RIP: 0033:0x7f0dfe99e159 [ 63.087531][ T6370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.087541][ T6370] RSP: 002b:00007f0dff818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.087553][ T6370] RAX: ffffffffffffffda RBX: 00007f0dfec25fa0 RCX: 00007f0dfe99e159 [ 63.087559][ T6370] RDX: 0000200000000100 RSI: 000000004068aea3 RDI: 0000000000000004 [ 63.087566][ T6370] RBP: 00007f0dff818090 R08: 0000000000000000 R09: 0000000000000000 [ 63.087572][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.087578][ T6370] R13: 00007f0dfec26038 R14: 00007f0dfec25fa0 R15: 00007ffeed83e0f8 [ 63.087592][ T6370] [ 63.087601][ T6370] ERROR: Out of memory at tomoyo_realpath_from_path. [ 63.171532][ T6374] FAULT_INJECTION: forcing a failure. [ 63.171532][ T6374] name failslab, interval 1, probability 0, space 0, times 0 [ 63.171552][ T6374] CPU: 0 UID: 0 PID: 6374 Comm: syz.1.157 Not tainted syzkaller #0 PREEMPT(full) [ 63.171564][ T6374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.171571][ T6374] Call Trace: [ 63.171574][ T6374] [ 63.171579][ T6374] dump_stack_lvl+0x100/0x190 [ 63.171598][ T6374] should_fail_ex.cold+0x5/0xa [ 63.171615][ T6374] should_failslab+0xc2/0x120 [ 63.171630][ T6374] __kmalloc_noprof+0xfc/0x840 [ 63.171641][ T6374] ? __pfx_dynamic_dname+0x10/0x10 [ 63.171652][ T6374] ? tomoyo_encode2+0xfb/0x3c0 [ 63.171667][ T6374] tomoyo_encode2+0xfb/0x3c0 [ 63.171681][ T6374] tomoyo_encode+0x29/0x50 [ 63.171693][ T6374] tomoyo_realpath_from_path+0x18c/0x690 [ 63.171709][ T6374] tomoyo_path_number_perm+0x23c/0x580 [ 63.171727][ T6374] ? tomoyo_path_number_perm+0x22e/0x580 [ 63.171745][ T6374] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 63.171768][ T6374] ? __lock_acquire+0x5c0/0x1f40 [ 63.171786][ T6374] ? __fget_files+0x34/0x3d0 [ 63.171799][ T6374] ? find_held_lock+0x2b/0x80 [ 63.171814][ T6374] ? hook_file_ioctl_common+0x140/0x440 [ 63.171831][ T6374] ? __fget_files+0x21f/0x3d0 [ 63.171846][ T6374] security_file_ioctl+0xd3/0x230 [ 63.171865][ T6374] __x64_sys_ioctl+0xb7/0x210 [ 63.171877][ T6374] do_syscall_64+0x123/0x790 [ 63.171893][ T6374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.171904][ T6374] RIP: 0033:0x7f834ff9e159 [ 63.171914][ T6374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.171924][ T6374] RSP: 002b:00007f8350ed1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.171935][ T6374] RAX: ffffffffffffffda RBX: 00007f8350225fa0 RCX: 00007f834ff9e159 [ 63.171941][ T6374] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 63.171947][ T6374] RBP: 00007f8350ed1090 R08: 0000000000000000 R09: 0000000000000000 [ 63.171954][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.171960][ T6374] R13: 00007f8350226038 R14: 00007f8350225fa0 R15: 00007ffc66aa75c8 [ 63.171974][ T6374] [ 63.171983][ T6374] ERROR: Out of memory at tomoyo_realpath_from_path. [ 63.304808][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 63.316994][ T6386] device-mapper: table: 248:0: too large device [ 63.317003][ T6386] device-mapper: ioctl: error adding target to table [ 63.351672][ T6390] Bluetooth: ISO socket layer initialized [ 63.430213][ T6401] jffs2: notice: (6401) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 63.450526][ T6399] netlink: NAT attribute has 5 unknown bytes [ 63.450544][ T6399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.651278][ T6411] ip_tables: iptables: counters copy to user failed while replacing table [ 63.987709][ T6416] device-mapper: table: 248:0: too large device [ 63.987722][ T6416] device-mapper: ioctl: error adding target to table [ 64.036843][ T5803] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.100664][ T43] kauditd_printk_skb: 40 callbacks suppressed [ 64.100676][ T43] audit: type=1400 audit(1789128405.640:442): avc: denied { execute } for pid=6421 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.100993][ T43] audit: type=1400 audit(1789128405.640:443): avc: denied { execute_no_trans } for pid=6421 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.115994][ T43] audit: type=1400 audit(1789128405.650:444): avc: denied { mounton } for pid=6422 comm="syz.2.176" path="/39/file0" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 64.147357][ T5803] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.170024][ T5734] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.171178][ T5734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.171655][ T5734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.174601][ T5734] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.175014][ T5734] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.181000][ T5730] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.188474][ T5730] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.192385][ T5730] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.200236][ T5730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.201402][ T5730] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.221477][ T5803] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.298235][ T5803] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.417087][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 64.431427][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 64.441575][ T43] audit: type=1400 audit(1789128405.980:445): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.441603][ T43] audit: type=1400 audit(1789128405.980:446): avc: denied { search } for pid=5442 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.442018][ T43] audit: type=1400 audit(1789128405.980:447): avc: denied { search } for pid=5442 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.463567][ T6451] device-mapper: table: 248:0: too large device [ 64.463576][ T6451] device-mapper: ioctl: error adding target to table [ 64.473271][ T5803] bridge_slave_1: left allmulticast mode [ 64.473303][ T5803] bridge_slave_1: left promiscuous mode [ 64.474990][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.487054][ T5803] bridge_slave_0: left allmulticast mode [ 64.487079][ T5803] bridge_slave_0: left promiscuous mode [ 64.487524][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.618303][ T5803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.625628][ T5803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.626592][ T5803] bond0 (unregistering): Released all slaves [ 64.630582][ T5803] bond1 (unregistering): Released all slaves [ 64.710554][ T43] audit: type=1400 audit(1789128406.240:448): avc: denied { read } for pid=6462 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.710599][ T43] audit: type=1400 audit(1789128406.240:449): avc: denied { read open } for pid=6462 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.710633][ T43] audit: type=1400 audit(1789128406.240:450): avc: denied { getattr } for pid=6462 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.715431][ T43] audit: type=1400 audit(1789128406.250:451): avc: denied { write } for pid=6461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.723892][ T6464] FAULT_INJECTION: forcing a failure. [ 64.723892][ T6464] name failslab, interval 1, probability 0, space 0, times 0 [ 64.723921][ T6464] CPU: 1 UID: 0 PID: 6464 Comm: syz.2.186 Not tainted syzkaller #0 PREEMPT(full) [ 64.723941][ T6464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.723952][ T6464] Call Trace: [ 64.723959][ T6464] [ 64.723967][ T6464] dump_stack_lvl+0x100/0x190 [ 64.723998][ T6464] should_fail_ex.cold+0x5/0xa [ 64.724028][ T6464] should_failslab+0xc2/0x120 [ 64.724053][ T6464] kmem_cache_alloc_noprof+0x92/0x6a0 [ 64.724074][ T6464] ? mas_preallocate+0xc22/0xee0 [ 64.724106][ T6464] mas_preallocate+0xc22/0xee0 [ 64.724137][ T6464] ? __pfx_mas_preallocate+0x10/0x10 [ 64.724172][ T6464] ? __asan_memset+0x23/0x50 [ 64.724190][ T6464] ? init_multi_vma_prep+0x33c/0x650 [ 64.724218][ T6464] commit_merge+0x3cc/0x2150 [ 64.724272][ T6464] ? __vma_start_write+0x1c6/0x280 [ 64.724302][ T6464] ? __pfx_commit_merge+0x10/0x10 [ 64.724335][ T6464] ? __pfx___vma_start_write+0x10/0x10 [ 64.724357][ T6464] ? __pfx_mas_prev+0x10/0x10 [ 64.724385][ T6464] ? dup_anon_vma+0x74/0x2f0 [ 64.724413][ T6464] vma_modify+0xd81/0x29b0 [ 64.724449][ T6464] ? __pfx_vma_modify+0x10/0x10 [ 64.724477][ T6464] ? __pfx___might_resched+0x10/0x10 [ 64.724495][ T6464] ? change_protection+0x111e/0x1c80 [ 64.724532][ T6464] vma_modify_flags_uffd+0x312/0x470 [ 64.724562][ T6464] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 64.724603][ T6464] ? userfaultfd_rwp+0xd1/0x120 [ 64.724630][ T6464] ? __pfx_userfaultfd_rwp+0x10/0x10 [ 64.724661][ T6464] userfaultfd_clear_vma+0x3fe/0x5b0 [ 64.724693][ T6464] ? __pfx_userfaultfd_clear_vma+0x10/0x10 [ 64.724719][ T6464] ? futex_unqueue+0x13d/0x2c0 [ 64.724762][ T6464] ? __pfx___might_resched+0x10/0x10 [ 64.724786][ T6464] userfaultfd_release_all+0x2a2/0x4b0 [ 64.724816][ T6464] ? __pfx_userfaultfd_release_all+0x10/0x10 [ 64.724852][ T6464] ? __pfx_futex_wait+0x10/0x10 [ 64.724902][ T6464] userfaultfd_release+0xf3/0x1c0 [ 64.724929][ T6464] ? __pfx_userfaultfd_release+0x10/0x10 [ 64.724957][ T6464] ? __pfx___might_resched+0x10/0x10 [ 64.724975][ T6464] ? evm_file_release+0x133/0x210 [ 64.724997][ T6464] ? __pfx_userfaultfd_release+0x10/0x10 [ 64.725022][ T6464] __fput+0x3ff/0xb50 [ 64.725053][ T6464] fput_close_sync+0x118/0x250 [ 64.725080][ T6464] ? __pfx_fput_close_sync+0x10/0x10 [ 64.725112][ T6464] __x64_sys_close+0x8b/0x120 [ 64.725137][ T6464] do_syscall_64+0x123/0x790 [ 64.725164][ T6464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.725185][ T6464] RIP: 0033:0x7fdbde59e159 [ 64.725203][ T6464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.725220][ T6464] RSP: 002b:00007fdbdf4c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 64.725239][ T6464] RAX: ffffffffffffffda RBX: 00007fdbde825fa0 RCX: 00007fdbde59e159 [ 64.725251][ T6464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 64.725262][ T6464] RBP: 00007fdbde63503b R08: 0000000000000000 R09: 0000000000000000 [ 64.725273][ T6464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.725284][ T6464] R13: 00007fdbde826038 R14: 00007fdbde825fa0 R15: 00007ffe96278668 [ 64.725308][ T6464] [ 64.865138][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 64.928249][ T5803] hsr_slave_0: left promiscuous mode [ 64.931812][ T5803] hsr_slave_1: left promiscuous mode [ 64.932517][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.932536][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.933481][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.933491][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.944239][ T5803] veth1_macvtap: left promiscuous mode [ 64.944270][ T5803] veth0_macvtap: left promiscuous mode [ 64.944318][ T5803] veth1_vlan: left promiscuous mode [ 64.944420][ T5803] veth0_vlan: left promiscuous mode [ 65.133376][ T5803] team0 (unregistering): Port device team_slave_1 removed [ 65.228241][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 65.266668][ T6493] FAULT_INJECTION: forcing a failure. [ 65.266668][ T6493] name failslab, interval 1, probability 0, space 0, times 0 [ 65.266689][ T6493] CPU: 1 UID: 0 PID: 6493 Comm: syz.2.191 Not tainted syzkaller #0 PREEMPT(full) [ 65.266702][ T6493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.266709][ T6493] Call Trace: [ 65.266713][ T6493] [ 65.266717][ T6493] dump_stack_lvl+0x100/0x190 [ 65.266736][ T6493] should_fail_ex.cold+0x5/0xa [ 65.266752][ T6493] should_failslab+0xc2/0x120 [ 65.266766][ T6493] __kmalloc_noprof+0xfc/0x840 [ 65.266778][ T6493] ? tomoyo_encode2+0xfb/0x3c0 [ 65.266807][ T6493] tomoyo_encode2+0xfb/0x3c0 [ 65.266821][ T6493] tomoyo_encode+0x29/0x50 [ 65.266833][ T6493] tomoyo_realpath_from_path+0x18c/0x690 [ 65.266849][ T6493] tomoyo_path_number_perm+0x23c/0x580 [ 65.266866][ T6493] ? tomoyo_path_number_perm+0x22e/0x580 [ 65.266885][ T6493] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 65.266907][ T6493] ? __lock_acquire+0x5c0/0x1f40 [ 65.266925][ T6493] ? __fget_files+0x34/0x3d0 [ 65.266939][ T6493] ? find_held_lock+0x2b/0x80 [ 65.266954][ T6493] ? hook_file_ioctl_common+0x140/0x440 [ 65.266971][ T6493] ? __fget_files+0x21f/0x3d0 [ 65.266986][ T6493] security_file_ioctl+0xd3/0x230 [ 65.266999][ T6493] __x64_sys_ioctl+0xb7/0x210 [ 65.267010][ T6493] do_syscall_64+0x123/0x790 [ 65.267026][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.267038][ T6493] RIP: 0033:0x7fdbde59e159 [ 65.267047][ T6493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.267057][ T6493] RSP: 002b:00007fdbdf4c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.267068][ T6493] RAX: ffffffffffffffda RBX: 00007fdbde825fa0 RCX: 00007fdbde59e159 [ 65.267075][ T6493] RDX: 0000200000000080 RSI: 00000000c0185879 RDI: 0000000000000003 [ 65.267081][ T6493] RBP: 00007fdbdf4c3090 R08: 0000000000000000 R09: 0000000000000000 [ 65.267087][ T6493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.267094][ T6493] R13: 00007fdbde826038 R14: 00007fdbde825fa0 R15: 00007ffe96278668 [ 65.267107][ T6493] [ 65.267117][ T6493] ERROR: Out of memory at tomoyo_realpath_from_path. [ 65.374655][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.374700][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.374801][ T6424] bridge_slave_0: entered allmulticast mode [ 65.389295][ T6424] bridge_slave_0: entered promiscuous mode [ 65.400664][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.400738][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.401253][ T6424] bridge_slave_1: entered allmulticast mode [ 65.403044][ T6424] bridge_slave_1: entered promiscuous mode [ 65.425374][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.427011][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.450302][ T6503] Zero length message leads to an empty skb [ 65.472691][ T6424] team0: Port device team_slave_0 added [ 65.473988][ T6424] team0: Port device team_slave_1 added [ 65.485586][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.485597][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.485609][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.486397][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.486405][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.486417][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.501871][ T6518] FAULT_INJECTION: forcing a failure. [ 65.501871][ T6518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.501899][ T6518] CPU: 2 UID: 0 PID: 6518 Comm: syz.2.194 Not tainted syzkaller #0 PREEMPT(full) [ 65.501911][ T6518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.501917][ T6518] Call Trace: [ 65.501921][ T6518] [ 65.501926][ T6518] dump_stack_lvl+0x100/0x190 [ 65.501946][ T6518] should_fail_ex.cold+0x5/0xa [ 65.501963][ T6518] _copy_to_iter+0x1f3/0x1720 [ 65.501975][ T6518] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 65.501999][ T6518] ? __pfx__copy_to_iter+0x10/0x10 [ 65.502010][ T6518] ? __pfx_avc_has_perm+0x10/0x10 [ 65.502026][ T6518] ? lock_acquire+0x1d1/0x380 [ 65.502037][ T6518] ? unwind_next_frame+0xbd/0x2090 [ 65.502054][ T6518] udp_recvmsg+0xa1e/0xf80 [ 65.502071][ T6518] ? __pfx_udp_recvmsg+0x10/0x10 [ 65.502085][ T6518] ? is_bpf_text_address+0x94/0x1a0 [ 65.502100][ T6518] ? kernel_text_address+0x8d/0x100 [ 65.502118][ T6518] ? __pfx_udp_recvmsg+0x10/0x10 [ 65.502130][ T6518] inet_recvmsg+0x277/0x4c0 [ 65.502145][ T6518] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 65.502157][ T6518] ? __pfx_inet_recvmsg+0x10/0x10 [ 65.502172][ T6518] sock_recvmsg+0x1b8/0x220 [ 65.502188][ T6518] ____sys_recvmsg+0x21e/0x670 [ 65.502206][ T6518] ? __pfx_____sys_recvmsg+0x10/0x10 [ 65.502226][ T6518] ? __lock_acquire+0x5c0/0x1f40 [ 65.502239][ T6518] ___sys_recvmsg+0x16a/0x1a0 [ 65.502256][ T6518] ? __pfx____sys_recvmsg+0x10/0x10 [ 65.502272][ T6518] ? lock_acquire+0x1d1/0x380 [ 65.502293][ T6518] do_recvmmsg+0x2f3/0x740 [ 65.502311][ T6518] ? __pfx_do_recvmmsg+0x10/0x10 [ 65.502327][ T6518] ? lock_acquire+0x1d1/0x380 [ 65.502339][ T6518] ? __mutex_unlock_slowpath+0x35d/0x930 [ 65.502358][ T6518] ? __fget_files+0x21f/0x3d0 [ 65.502374][ T6518] __x64_sys_recvmmsg+0x22a/0x280 [ 65.502388][ T6518] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 65.502405][ T6518] do_syscall_64+0x123/0x790 [ 65.502421][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.502432][ T6518] RIP: 0033:0x7fdbde59e159 [ 65.502441][ T6518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.502468][ T6518] RSP: 002b:00007fdbdf4a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 65.502480][ T6518] RAX: ffffffffffffffda RBX: 00007fdbde826090 RCX: 00007fdbde59e159 [ 65.502487][ T6518] RDX: 04000000000000f1 RSI: 0000200000000400 RDI: 0000000000000003 [ 65.502493][ T6518] RBP: 00007fdbdf4a2090 R08: 0000000000000000 R09: 0000000000000000 [ 65.502499][ T6518] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000001 [ 65.502506][ T6518] R13: 00007fdbde826128 R14: 00007fdbde826090 R15: 00007ffe96278668 [ 65.502520][ T6518] [ 65.508357][ T6424] hsr_slave_0: entered promiscuous mode [ 65.512115][ T6424] hsr_slave_1: entered promiscuous mode [ 65.512750][ T6424] debugfs: 'hsr0' already exists in 'hsr' [ 65.512767][ T6424] Cannot create hsr debugfs directory [ 65.698405][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 65.789663][ T6523] device-mapper: table: 248:0: too large device [ 65.789676][ T6523] device-mapper: ioctl: error adding target to table [ 65.943163][ T6424] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.946217][ T6424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.949888][ T6424] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.965266][ T6424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.965829][ T6424] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.979870][ T6424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.984293][ T6424] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.005180][ T6424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.072551][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 66.089228][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.097535][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.115835][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.115883][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.123123][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.123170][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.197853][ T6562] device-mapper: table: 248:0: too large device [ 66.197867][ T6562] device-mapper: ioctl: error adding target to table [ 66.219137][ T5730] Bluetooth: hci3: command tx timeout [ 66.465083][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.494885][ T6596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6596 comm=syz.2.212 [ 66.534921][ T6601] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 66.608693][ T5803] netdevsim netdevsim14 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.625779][ T6424] veth0_vlan: entered promiscuous mode [ 66.634720][ T6424] veth1_vlan: entered promiscuous mode [ 66.660343][ T6424] veth0_macvtap: entered promiscuous mode [ 66.664112][ T6424] veth1_macvtap: entered promiscuous mode [ 66.672865][ T6600] FAULT_INJECTION: forcing a failure. [ 66.672865][ T6600] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 66.672886][ T6600] CPU: 2 UID: 0 PID: 6600 Comm: syz.3.213 Not tainted syzkaller #0 PREEMPT(full) [ 66.672899][ T6600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.672905][ T6600] Call Trace: [ 66.672910][ T6600] [ 66.672914][ T6600] dump_stack_lvl+0x100/0x190 [ 66.672944][ T6600] should_fail_ex.cold+0x5/0xa [ 66.672957][ T6600] ? prepare_alloc_pages+0x16d/0x5b0 [ 66.672976][ T6600] should_fail_alloc_page+0xeb/0x140 [ 66.672991][ T6600] prepare_alloc_pages+0x1f0/0x5b0 [ 66.673004][ T6600] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 66.673037][ T6600] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 66.673056][ T6600] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 66.673070][ T6600] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 66.673083][ T6600] ? rcu_is_watching+0x13/0xc0 [ 66.673098][ T6600] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 66.673110][ T6600] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.673128][ T6600] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 66.673143][ T6600] ? rcu_is_watching+0x13/0xc0 [ 66.673157][ T6600] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 66.673176][ T6600] ? __lock_acquire+0x5c0/0x1f40 [ 66.673193][ T6600] ? lock_acquire+0x1d1/0x380 [ 66.673205][ T6600] ? find_held_lock+0x2b/0x80 [ 66.673220][ T6600] ? schedule+0x225/0x2c0 [ 66.673234][ T6600] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.673247][ T6600] ? policy_nodemask+0xed/0x4f0 [ 66.673263][ T6600] alloc_pages_mpol+0x201/0x550 [ 66.673278][ T6600] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 66.673292][ T6600] ? __pfx_handle_userfault+0x10/0x10 [ 66.673306][ T6600] folio_alloc_mpol_noprof+0x36/0x260 [ 66.673323][ T6600] vma_alloc_folio_noprof+0xed/0x1d0 [ 66.673340][ T6600] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 66.673356][ T6600] ? rcu_read_unlock+0x2d/0xb0 [ 66.673375][ T6600] do_anonymous_page+0xac9/0x2050 [ 66.673394][ T6600] ? __pfx_do_anonymous_page+0x10/0x10 [ 66.673408][ T6600] ? rcu_read_unlock+0x2d/0xb0 [ 66.673423][ T6600] ? rcu_read_unlock+0x2d/0xb0 [ 66.673439][ T6600] ? __pte_offset_map+0x179/0x310 [ 66.673452][ T6600] __handle_mm_fault+0x1ff3/0x2f60 [ 66.673471][ T6600] ? __pfx___handle_mm_fault+0x10/0x10 [ 66.673485][ T6600] ? __pfx_mt_find+0x10/0x10 [ 66.673508][ T6600] ? find_vma+0xbf/0x140 [ 66.673519][ T6600] ? __pfx_find_vma+0x10/0x10 [ 66.673531][ T6600] handle_mm_fault+0x363/0xa20 [ 66.673549][ T6600] do_user_addr_fault+0x745/0x12f0 [ 66.673568][ T6600] exc_page_fault+0x6f/0xd0 [ 66.673582][ T6600] asm_exc_page_fault+0x26/0x30 [ 66.673593][ T6600] RIP: 0033:0x7f0dfe96e770 [ 66.673603][ T6600] Code: fa 08 73 36 48 83 ea 04 73 e0 83 fa fd 7c 10 8a 0e 74 0a 0f b7 74 16 02 66 89 74 17 02 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 fa 7f 07 c5 fa 7f 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48 [ 66.673613][ T6600] RSP: 002b:00007f0dff818018 EFLAGS: 00010202 [ 66.673622][ T6600] RAX: 0000200000ffb020 RBX: 00007f0dfec25fa0 RCX: 0000000000000018 [ 66.673629][ T6600] RDX: 0000000000000018 RSI: 0000200000000100 RDI: 0000200000ffb020 [ 66.673636][ T6600] RBP: 00007f0dff818090 R08: 0000000000000018 R09: 0000000000000000 [ 66.673642][ T6600] R10: 0000200000ffb000 R11: 0000200000000100 R12: 0000000000000001 [ 66.673649][ T6600] R13: 00007f0dfec26038 R14: 00007f0dfec25fa0 R15: 00007ffeed83e0f8 [ 66.673663][ T6600] [ 66.673796][ T6600] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 66.681390][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.688031][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.712003][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.712042][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.712070][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.712098][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.786380][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.786401][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.829058][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.829078][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.840691][ T6619] base or size exceeds the MTRR width [ 67.117116][ T6635] device-mapper: table: 248:0: too large device [ 67.117126][ T6635] device-mapper: ioctl: error adding target to table [ 67.165498][ T6639] FAULT_INJECTION: forcing a failure. [ 67.165498][ T6639] name failslab, interval 1, probability 0, space 0, times 0 [ 67.165526][ T6639] CPU: 3 UID: 0 PID: 6639 Comm: syz.3.223 Not tainted syzkaller #0 PREEMPT(full) [ 67.165545][ T6639] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.165556][ T6639] Call Trace: [ 67.165562][ T6639] [ 67.165569][ T6639] dump_stack_lvl+0x100/0x190 [ 67.165609][ T6639] should_fail_ex.cold+0x5/0xa [ 67.165634][ T6639] should_failslab+0xc2/0x120 [ 67.165661][ T6639] kmem_cache_alloc_noprof+0x92/0x6a0 [ 67.165679][ T6639] ? do_getname+0x35/0x390 [ 67.165709][ T6639] do_getname+0x35/0x390 [ 67.165734][ T6639] path_setxattrat+0x360/0x3b0 [ 67.165766][ T6639] ? __pfx_path_setxattrat+0x10/0x10 [ 67.165809][ T6639] ? ksys_write+0x190/0x250 [ 67.165826][ T6639] ? ksys_write+0x190/0x250 [ 67.165855][ T6639] ? fput+0x7c/0x100 [ 67.165876][ T6639] ? ksys_write+0x1ac/0x250 [ 67.165893][ T6639] ? __pfx_ksys_write+0x10/0x10 [ 67.165914][ T6639] __x64_sys_lsetxattr+0xc9/0x140 [ 67.165938][ T6639] ? do_syscall_64+0xae/0x790 [ 67.165966][ T6639] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.165989][ T6639] do_syscall_64+0x123/0x790 [ 67.166014][ T6639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.166034][ T6639] RIP: 0033:0x7f0dfe99e159 [ 67.166049][ T6639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.166066][ T6639] RSP: 002b:00007f0dff818028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 67.166086][ T6639] RAX: ffffffffffffffda RBX: 00007f0dfec25fa0 RCX: 00007f0dfe99e159 [ 67.166096][ T6639] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000200000001080 [ 67.166106][ T6639] RBP: 00007f0dff818090 R08: 0000000000000002 R09: 0000000000000000 [ 67.166118][ T6639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.166128][ T6639] R13: 00007f0dfec26038 R14: 00007f0dfec25fa0 R15: 00007ffeed83e0f8 [ 67.166149][ T6639] [ 67.273531][ T6647] FAULT_INJECTION: forcing a failure. [ 67.273531][ T6647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.273561][ T6647] CPU: 1 UID: 0 PID: 6647 Comm: syz.2.227 Not tainted syzkaller #0 PREEMPT(full) [ 67.273579][ T6647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.273588][ T6647] Call Trace: [ 67.273595][ T6647] [ 67.273621][ T6647] dump_stack_lvl+0x100/0x190 [ 67.273652][ T6647] should_fail_ex.cold+0x5/0xa [ 67.273677][ T6647] _copy_from_user+0x2e/0xd0 [ 67.273696][ T6647] memdup_user+0x6b/0xe0 [ 67.273721][ T6647] strndup_user+0x78/0xe0 [ 67.273747][ T6647] __x64_sys_mount+0x136/0x310 [ 67.273774][ T6647] ? __pfx___x64_sys_mount+0x10/0x10 [ 67.273806][ T6647] do_syscall_64+0x123/0x790 [ 67.273828][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.273847][ T6647] RIP: 0033:0x7fdbde59e159 [ 67.273862][ T6647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.273879][ T6647] RSP: 002b:00007fdbdf4c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 67.273903][ T6647] RAX: ffffffffffffffda RBX: 00007fdbde825fa0 RCX: 00007fdbde59e159 [ 67.273915][ T6647] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 67.273927][ T6647] RBP: 00007fdbdf4c3090 R08: 0000200000000380 R09: 0000000000000000 [ 67.273937][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.273946][ T6647] R13: 00007fdbde826038 R14: 00007fdbde825fa0 R15: 00007ffe96278668 [ 67.273970][ T6647] [ 67.314721][ T6650] No source specified [ 67.391511][ T6656] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.470015][ T6658] device-mapper: table: 248:0: too large device [ 67.470026][ T6658] device-mapper: ioctl: error adding target to table [ 67.573481][ T6667] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 67.774269][ T6687] device-mapper: table: 248:0: too large device [ 67.774284][ T6687] device-mapper: ioctl: error adding target to table [ 67.925511][ T6701] jffs2: notice: (6701) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 68.298700][ T5730] Bluetooth: hci3: command tx timeout [ 68.593828][ T6690] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 68.769477][ T6713] evm: overlay not supported [ 69.065781][ T6730] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 69.313628][ T6738] jffs2: notice: (6738) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 69.314582][ T43] kauditd_printk_skb: 43 callbacks suppressed [ 69.314592][ T43] audit: type=1400 audit(1789128410.850:495): avc: denied { write } for pid=6735 comm="syz.4.258" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.764609][ T6754] FAULT_INJECTION: forcing a failure. [ 69.764609][ T6754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.764641][ T6754] CPU: 1 UID: 0 PID: 6754 Comm: syz.3.264 Not tainted syzkaller #0 PREEMPT(full) [ 69.764664][ T6754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.764676][ T6754] Call Trace: [ 69.764692][ T6754] [ 69.764700][ T6754] dump_stack_lvl+0x100/0x190 [ 69.764747][ T6754] should_fail_ex.cold+0x5/0xa [ 69.764776][ T6754] _copy_from_user+0x2e/0xd0 [ 69.764809][ T6754] __sys_bpf+0x33b5/0x4a30 [ 69.764836][ T6754] ? __pfx___sys_bpf+0x10/0x10 [ 69.764855][ T6754] ? find_held_lock+0x2b/0x80 [ 69.764905][ T6754] ? get_pid_task+0xfc/0x250 [ 69.764932][ T6754] ? get_pid_task+0xfc/0x250 [ 69.764966][ T6754] ? find_held_lock+0x2b/0x80 [ 69.764997][ T6754] ? rcu_read_lock_any_held+0x6a/0x90 [ 69.765044][ T6754] ? fput+0x7c/0x100 [ 69.765067][ T6754] ? ksys_write+0x1ac/0x250 [ 69.765089][ T6754] ? __x64_sys_bpf+0xce/0x140 [ 69.765105][ T6754] __x64_sys_bpf+0xce/0x140 [ 69.765121][ T6754] ? do_syscall_64+0xae/0x790 [ 69.765150][ T6754] do_syscall_64+0x123/0x790 [ 69.765173][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.765192][ T6754] RIP: 0033:0x7f0dfe99e159 [ 69.765208][ T6754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.765225][ T6754] RSP: 002b:00007f0dff818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.765249][ T6754] RAX: ffffffffffffffda RBX: 00007f0dfec25fa0 RCX: 00007f0dfe99e159 [ 69.765261][ T6754] RDX: 0000000000000010 RSI: 0000200000001c40 RDI: 000000000000000f [ 69.765272][ T6754] RBP: 00007f0dff818090 R08: 0000000000000000 R09: 0000000000000000 [ 69.765282][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.765293][ T6754] R13: 00007f0dfec26038 R14: 00007f0dfec25fa0 R15: 00007ffeed83e0f8 [ 69.765319][ T6754] [ 69.812860][ T43] audit: type=1400 audit(1789128411.350:496): avc: denied { getopt } for pid=6755 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.862412][ T43] audit: type=1400 audit(1789128411.400:497): avc: denied { write } for pid=6757 comm="syz.3.266" path="socket:[17556]" dev="sockfs" ino=17556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.950368][ T43] audit: type=1400 audit(1789128411.490:498): avc: denied { create } for pid=6764 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 69.950711][ T43] audit: type=1400 audit(1789128411.490:499): avc: denied { bind } for pid=6764 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 69.951245][ T43] audit: type=1400 audit(1789128411.490:500): avc: denied { ioctl } for pid=6764 comm="syz.0.268" path="socket:[16751]" dev="sockfs" ino=16751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 70.027294][ T43] audit: type=1400 audit(1789128411.560:501): avc: denied { connect } for pid=6769 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.030988][ T6773] overlay: Unknown parameter 'permit_directio' [ 70.034191][ T43] audit: type=1400 audit(1789128411.570:502): avc: denied { ioctl } for pid=6769 comm="syz.3.271" path="socket:[18487]" dev="sockfs" ino=18487 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.037944][ T6773] syzkaller0: entered promiscuous mode [ 70.037956][ T6773] syzkaller0: entered allmulticast mode [ 70.291781][ T6786] base or size exceeds the MTRR width [ 70.389103][ T5730] Bluetooth: hci3: command tx timeout [ 70.811081][ T6809] FAULT_INJECTION: forcing a failure. [ 70.811081][ T6809] name failslab, interval 1, probability 0, space 0, times 0 [ 70.811110][ T6809] CPU: 2 UID: 0 PID: 6809 Comm: syz.0.279 Not tainted syzkaller #0 PREEMPT(full) [ 70.811130][ T6809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.811141][ T6809] Call Trace: [ 70.811147][ T6809] [ 70.811155][ T6809] dump_stack_lvl+0x100/0x190 [ 70.811186][ T6809] should_fail_ex.cold+0x5/0xa [ 70.811237][ T6809] should_failslab+0xc2/0x120 [ 70.811260][ T6809] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 70.811287][ T6809] ? sock_alloc_inode+0x26/0x2c0 [ 70.811321][ T6809] ? __pfx_sock_alloc_inode+0x10/0x10 [ 70.811346][ T6809] sock_alloc_inode+0x26/0x2c0 [ 70.811368][ T6809] ? __pfx_sock_alloc_inode+0x10/0x10 [ 70.811390][ T6809] alloc_inode+0x68/0x250 [ 70.811408][ T6809] sock_alloc+0x44/0x280 [ 70.811428][ T6809] ? security_socket_create+0x7f/0x250 [ 70.811457][ T6809] __sock_create+0xc2/0x860 [ 70.811487][ T6809] __sys_socket+0x14d/0x260 [ 70.811512][ T6809] ? __pfx___sys_socket+0x10/0x10 [ 70.811546][ T6809] __x64_sys_socket+0x72/0xb0 [ 70.811571][ T6809] ? lockdep_hardirqs_on+0x7d/0x110 [ 70.811595][ T6809] do_syscall_64+0x123/0x790 [ 70.811621][ T6809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.811640][ T6809] RIP: 0033:0x7fd0f579f9c7 [ 70.811655][ T6809] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.811672][ T6809] RSP: 002b:00007fd0f66d1f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 70.811690][ T6809] RAX: ffffffffffffffda RBX: 00007fd0f5a26090 RCX: 00007fd0f579f9c7 [ 70.811702][ T6809] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 70.811713][ T6809] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 70.811724][ T6809] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000001 [ 70.811735][ T6809] R13: 00007fd0f5a26128 R14: 00007fd0f5a26090 R15: 00007fff6423b458 [ 70.811759][ T6809] [ 70.811768][ T6809] socket: no more sockets [ 70.865117][ T6813] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 70.927039][ T43] audit: type=1400 audit(1789128412.460:503): avc: denied { create } for pid=6819 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.928156][ T6821] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 70.928451][ T43] audit: type=1400 audit(1789128412.460:504): avc: denied { write } for pid=6819 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.018494][ T6829] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 71.042647][ T6832] base or size exceeds the MTRR width [ 71.053150][ T6829] md: personality for level is not loaded! [ 71.074521][ T6834] FAULT_INJECTION: forcing a failure. [ 71.074521][ T6834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.074541][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.0.286 Not tainted syzkaller #0 PREEMPT(full) [ 71.074553][ T6834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.074561][ T6834] Call Trace: [ 71.074564][ T6834] [ 71.074569][ T6834] dump_stack_lvl+0x100/0x190 [ 71.074589][ T6834] should_fail_ex.cold+0x5/0xa [ 71.074605][ T6834] _copy_to_user+0x32/0xd0 [ 71.074618][ T6834] simple_read_from_buffer+0xcb/0x170 [ 71.074634][ T6834] proc_fail_nth_read+0x1af/0x230 [ 71.074648][ T6834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.074662][ T6834] ? rw_verify_area+0xce/0x6d0 [ 71.074678][ T6834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.074691][ T6834] vfs_read+0x1e4/0xb40 [ 71.074703][ T6834] ? lock_acquire+0x1d1/0x380 [ 71.074714][ T6834] ? __fget_files+0x34/0x3d0 [ 71.074752][ T6834] ? __pfx_vfs_read+0x10/0x10 [ 71.074762][ T6834] ? find_held_lock+0x2b/0x80 [ 71.074778][ T6834] ? __fget_files+0x215/0x3d0 [ 71.074795][ T6834] ? __fget_files+0x21f/0x3d0 [ 71.074812][ T6834] ksys_read+0x12a/0x250 [ 71.074822][ T6834] ? __pfx_ksys_read+0x10/0x10 [ 71.074837][ T6834] do_syscall_64+0x123/0x790 [ 71.074854][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.074865][ T6834] RIP: 0033:0x7fd0f575e98e [ 71.074875][ T6834] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 71.074885][ T6834] RSP: 002b:00007fd0f66f3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.074896][ T6834] RAX: ffffffffffffffda RBX: 00007fd0f66f46c0 RCX: 00007fd0f575e98e [ 71.074903][ T6834] RDX: 000000000000000f RSI: 00007fd0f66f40a0 RDI: 0000000000000005 [ 71.074910][ T6834] RBP: 00007fd0f66f4090 R08: 0000000000000000 R09: 0000000000000000 [ 71.074917][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.074924][ T6834] R13: 00007fd0f5a26038 R14: 00007fd0f5a25fa0 R15: 00007fff6423b458 [ 71.074938][ T6834] [ 71.126096][ T6836] netlink: 'syz.4.287': attribute type 1 has an invalid length. [ 71.186078][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.186133][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.241888][ T6844] openvswitch: netlink: EtherType 300 is less than min 600 [ 71.254991][ T6846] FAULT_INJECTION: forcing a failure. [ 71.254991][ T6846] name failslab, interval 1, probability 0, space 0, times 0 [ 71.255009][ T6846] CPU: 3 UID: 0 PID: 6846 Comm: syz.0.292 Not tainted syzkaller #0 PREEMPT(full) [ 71.255022][ T6846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.255028][ T6846] Call Trace: [ 71.255032][ T6846] [ 71.255037][ T6846] dump_stack_lvl+0x100/0x190 [ 71.255058][ T6846] should_fail_ex.cold+0x5/0xa [ 71.255074][ T6846] should_failslab+0xc2/0x120 [ 71.255089][ T6846] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 71.255101][ T6846] ? __alloc_skb+0x5b7/0x710 [ 71.255113][ T6846] ? __alloc_skb+0x140/0x710 [ 71.255126][ T6846] __alloc_skb+0x140/0x710 [ 71.255136][ T6846] ? __alloc_skb+0x5b7/0x710 [ 71.255147][ T6846] ? __pfx___alloc_skb+0x10/0x10 [ 71.255163][ T6846] netlink_alloc_large_skb+0x69/0x150 [ 71.255176][ T6846] netlink_sendmsg+0x680/0xda0 [ 71.255212][ T6846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.255227][ T6846] ? selinux_socket_sendmsg+0x198/0x2f0 [ 71.255248][ T6846] ____sys_sendmsg+0xa4d/0xbe0 [ 71.255262][ T6846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.255275][ T6846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.255293][ T6846] ? lock_acquire+0x1d1/0x380 [ 71.255309][ T6846] ? get_pid_task+0x2a/0x250 [ 71.255325][ T6846] ___sys_sendmsg+0x190/0x1e0 [ 71.255343][ T6846] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.255359][ T6846] ? get_pid_task+0x106/0x250 [ 71.255378][ T6846] ? find_held_lock+0x2b/0x80 [ 71.255401][ T6846] __sys_sendmsg+0x160/0x210 [ 71.255415][ T6846] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.255434][ T6846] do_syscall_64+0x123/0x790 [ 71.255450][ T6846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.255462][ T6846] RIP: 0033:0x7fd0f579e159 [ 71.255471][ T6846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.255482][ T6846] RSP: 002b:00007fd0f66f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.255493][ T6846] RAX: ffffffffffffffda RBX: 00007fd0f5a25fa0 RCX: 00007fd0f579e159 [ 71.255500][ T6846] RDX: 0000000000008080 RSI: 0000200000001180 RDI: 0000000000000003 [ 71.255507][ T6846] RBP: 00007fd0f66f4090 R08: 0000000000000000 R09: 0000000000000000 [ 71.255513][ T6846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.255520][ T6846] R13: 00007fd0f5a26038 R14: 00007fd0f5a25fa0 R15: 00007fff6423b458 [ 71.255533][ T6846] [ 72.477148][ T5730] Bluetooth: hci3: command tx timeout [ 72.541043][ T6873] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 72.580665][ T6873] md: personality for level is not loaded! [ 73.343219][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 73.343251][ T6875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.300'. [ 73.347141][ T6875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.354510][ T6875] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 73.360333][ T6875] FAULT_INJECTION: forcing a failure. [ 73.360333][ T6875] name failslab, interval 1, probability 0, space 0, times 0 [ 73.360352][ T6875] CPU: 2 UID: 0 PID: 6875 Comm: syz.0.300 Not tainted syzkaller #0 PREEMPT(full) [ 73.360365][ T6875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.360371][ T6875] Call Trace: [ 73.360375][ T6875] [ 73.360379][ T6875] dump_stack_lvl+0x100/0x190 [ 73.360398][ T6875] should_fail_ex.cold+0x5/0xa [ 73.360415][ T6875] should_failslab+0xc2/0x120 [ 73.360430][ T6875] kmem_cache_alloc_noprof+0x92/0x6a0 [ 73.360442][ T6875] ? prepare_creds+0x2c/0x950 [ 73.360455][ T6875] prepare_creds+0x2c/0x950 [ 73.360466][ T6875] set_current_groups+0x15/0xd0 [ 73.360483][ T6875] __do_sys_setgroups+0x3e2/0x4f0 [ 73.360501][ T6875] do_syscall_64+0x123/0x790 [ 73.360516][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.360528][ T6875] RIP: 0033:0x7fd0f579e159 [ 73.360538][ T6875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.360548][ T6875] RSP: 002b:00007fd0f66f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 73.360559][ T6875] RAX: ffffffffffffffda RBX: 00007fd0f5a25fa0 RCX: 00007fd0f579e159 [ 73.360566][ T6875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.360572][ T6875] RBP: 00007fd0f583503b R08: 0000000000000000 R09: 0000000000000000 [ 73.360578][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.360584][ T6875] R13: 00007fd0f5a26038 R14: 00007fd0f5a25fa0 R15: 00007fff6423b458 [ 73.360598][ T6875] [ 73.372752][ T6877] FAULT_INJECTION: forcing a failure. [ 73.372752][ T6877] name fail_futex, interval 1, probability 0, space 0, times 1 [ 73.372781][ T6877] CPU: 0 UID: 0 PID: 6877 Comm: syz.4.299 Not tainted syzkaller #0 PREEMPT(full) [ 73.372809][ T6877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.372820][ T6877] Call Trace: [ 73.372827][ T6877] [ 73.372834][ T6877] dump_stack_lvl+0x100/0x190 [ 73.372867][ T6877] should_fail_ex.cold+0x5/0xa [ 73.372894][ T6877] get_futex_key+0x293/0x14f0 [ 73.372946][ T6877] ? __pfx_get_futex_key+0x10/0x10 [ 73.372970][ T6877] ? __lock_acquire+0x5c0/0x1f40 [ 73.372989][ T6877] ? _parse_integer_limit+0x1ac/0x220 [ 73.373020][ T6877] futex_wait_requeue_pi+0x207/0x8a0 [ 73.373052][ T6877] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 73.373095][ T6877] ? lock_acquire+0x1d1/0x380 [ 73.373127][ T6877] ? __pfx_futex_wake_mark+0x10/0x10 [ 73.373161][ T6877] ? rcu_read_lock_any_held+0x6a/0x90 [ 73.373188][ T6877] ? find_held_lock+0x2b/0x80 [ 73.373213][ T6877] ? ksys_write+0x190/0x250 [ 73.373232][ T6877] ? ksys_write+0x190/0x250 [ 73.373254][ T6877] do_futex+0x414/0x440 [ 73.373279][ T6877] ? __pfx_do_futex+0x10/0x10 [ 73.373304][ T6877] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 73.373334][ T6877] __x64_sys_futex+0x34f/0x4d0 [ 73.373360][ T6877] ? fput+0x7c/0x100 [ 73.373382][ T6877] ? __pfx___x64_sys_futex+0x10/0x10 [ 73.373405][ T6877] ? ksys_write+0x1ac/0x250 [ 73.373422][ T6877] ? __pfx_ksys_write+0x10/0x10 [ 73.373447][ T6877] do_syscall_64+0x123/0x790 [ 73.373473][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.373492][ T6877] RIP: 0033:0x7f04bd19e159 [ 73.373506][ T6877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.373520][ T6877] RSP: 002b:00007f04be02d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 73.373534][ T6877] RAX: ffffffffffffffda RBX: 00007f04bd425fa0 RCX: 00007f04bd19e159 [ 73.373543][ T6877] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000020000000cffc [ 73.373551][ T6877] RBP: 00007f04be02d090 R08: 0000200000048000 R09: 0000000000000000 [ 73.373559][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.373568][ T6877] R13: 00007f04bd426038 R14: 00007f04bd425fa0 R15: 00007ffc43f13cd8 [ 73.373588][ T6877] [ 73.985151][ T6893] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.215847][ T6909] FAULT_INJECTION: forcing a failure. [ 74.215847][ T6909] name failslab, interval 1, probability 0, space 0, times 0 [ 74.215879][ T6909] CPU: 0 UID: 0 PID: 6909 Comm: syz.0.311 Not tainted syzkaller #0 PREEMPT(full) [ 74.215898][ T6909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.215908][ T6909] Call Trace: [ 74.215918][ T6909] [ 74.215925][ T6909] dump_stack_lvl+0x100/0x190 [ 74.215959][ T6909] should_fail_ex.cold+0x5/0xa [ 74.215982][ T6909] should_failslab+0xc2/0x120 [ 74.216007][ T6909] __kmalloc_noprof+0xfc/0x840 [ 74.216024][ T6909] ? __pfx_dynamic_dname+0x10/0x10 [ 74.216041][ T6909] ? tomoyo_encode2+0xfb/0x3c0 [ 74.216063][ T6909] tomoyo_encode2+0xfb/0x3c0 [ 74.216084][ T6909] tomoyo_encode+0x29/0x50 [ 74.216121][ T6909] tomoyo_realpath_from_path+0x18c/0x690 [ 74.216146][ T6909] tomoyo_path_number_perm+0x23c/0x580 [ 74.216170][ T6909] ? tomoyo_path_number_perm+0x22e/0x580 [ 74.216196][ T6909] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 74.216229][ T6909] ? __lock_acquire+0x5c0/0x1f40 [ 74.216258][ T6909] ? __fget_files+0x34/0x3d0 [ 74.216284][ T6909] ? find_held_lock+0x2b/0x80 [ 74.216305][ T6909] ? hook_file_ioctl_common+0x140/0x440 [ 74.216330][ T6909] ? __fget_files+0x21f/0x3d0 [ 74.216356][ T6909] security_file_ioctl+0xd3/0x230 [ 74.216376][ T6909] __x64_sys_ioctl+0xb7/0x210 [ 74.216394][ T6909] do_syscall_64+0x123/0x790 [ 74.216422][ T6909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.216439][ T6909] RIP: 0033:0x7fd0f579e159 [ 74.216476][ T6909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.216497][ T6909] RSP: 002b:00007fd0f66f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.216524][ T6909] RAX: ffffffffffffffda RBX: 00007fd0f5a25fa0 RCX: 00007fd0f579e159 [ 74.216535][ T6909] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 74.216545][ T6909] RBP: 00007fd0f66f4090 R08: 0000000000000000 R09: 0000000000000000 [ 74.216555][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.216564][ T6909] R13: 00007fd0f5a26038 R14: 00007fd0f5a25fa0 R15: 00007fff6423b458 [ 74.216586][ T6909] [ 74.216667][ T6909] ERROR: Out of memory at tomoyo_realpath_from_path. [ 74.364808][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 74.364821][ T43] audit: type=1400 audit(1789128415.900:517): avc: denied { open } for pid=6915 comm="syz.0.314" path="/dev/ttyq5" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 74.365734][ T43] audit: type=1400 audit(1789128415.900:518): avc: denied { ioctl } for pid=6915 comm="syz.0.314" path="socket:[16327]" dev="sockfs" ino=16327 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.367930][ T43] audit: type=1400 audit(1789128415.900:519): avc: denied { listen } for pid=6915 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.547745][ T43] audit: type=1400 audit(1789128416.080:520): avc: denied { write } for pid=6923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.625002][ T43] audit: type=1400 audit(1789128416.160:521): avc: denied { write } for pid=6929 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.684420][ T6928] Bluetooth: MGMT ver 1.23 [ 74.684837][ T6928] block2mtd: illegal erase size [ 74.685852][ T6928] netlink: 80 bytes leftover after parsing attributes in process `syz.0.316'. [ 74.736429][ T43] audit: type=1400 audit(1789128416.270:522): avc: denied { write } for pid=6935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.789747][ T43] audit: type=1400 audit(1789128416.330:523): avc: denied { write } for pid=6940 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.822362][ T43] audit: type=1400 audit(1789128416.360:524): avc: denied { setopt } for pid=6943 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.835581][ T43] audit: type=1400 audit(1789128416.370:525): avc: denied { read } for pid=6943 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.891336][ T43] audit: type=1400 audit(1789128416.430:526): avc: denied { write } for pid=6946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.743906][ T6965] base or size exceeds the MTRR width [ 75.933918][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 75.961413][ T6978] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 75.962153][ T6978] FAULT_INJECTION: forcing a failure. [ 75.962153][ T6978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.962172][ T6978] CPU: 3 UID: 0 PID: 6978 Comm: syz.4.326 Not tainted syzkaller #0 PREEMPT(full) [ 75.962186][ T6978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.962193][ T6978] Call Trace: [ 75.962197][ T6978] [ 75.962202][ T6978] dump_stack_lvl+0x100/0x190 [ 75.962223][ T6978] should_fail_ex.cold+0x5/0xa [ 75.962240][ T6978] strncpy_from_user+0x3b/0x2d0 [ 75.962256][ T6978] do_getname+0x78/0x390 [ 75.962274][ T6978] __x64_sys_mkdirat+0x78/0xc0 [ 75.962290][ T6978] do_syscall_64+0x123/0x790 [ 75.962307][ T6978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.962319][ T6978] RIP: 0033:0x7f04bd19e159 [ 75.962329][ T6978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.962340][ T6978] RSP: 002b:00007f04be02d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 75.962353][ T6978] RAX: ffffffffffffffda RBX: 00007f04bd425fa0 RCX: 00007f04bd19e159 [ 75.962360][ T6978] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 75.962367][ T6978] RBP: 00007f04be02d090 R08: 0000000000000000 R09: 0000000000000000 [ 75.962374][ T6978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.962381][ T6978] R13: 00007f04bd426038 R14: 00007f04bd425fa0 R15: 00007ffc43f13cd8 [ 75.962395][ T6978] [ 76.064826][ T6984] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(125855.24.0), cmd(3) [ 76.220225][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 76.333444][ T10] cfg80211: failed to load regulatory.db [ 76.364054][ T6998] jffs2: notice: (6998) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 76.672333][ T7021] FAULT_INJECTION: forcing a failure. [ 76.672333][ T7021] name failslab, interval 1, probability 0, space 0, times 0 [ 76.672355][ T7021] CPU: 3 UID: 0 PID: 7021 Comm: syz.4.339 Not tainted syzkaller #0 PREEMPT(full) [ 76.672368][ T7021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.672376][ T7021] Call Trace: [ 76.672379][ T7021] [ 76.672384][ T7021] dump_stack_lvl+0x100/0x190 [ 76.672404][ T7021] should_fail_ex.cold+0x5/0xa [ 76.672421][ T7021] should_failslab+0xc2/0x120 [ 76.672438][ T7021] __kmalloc_cache_noprof+0x91/0x6d0 [ 76.672455][ T7021] ? avc_has_extended_perms+0x33a/0x1080 [ 76.672470][ T7021] ? snd_mixer_oss_get_volume1_vol.constprop.0.isra.0+0xff/0x580 [ 76.672499][ T7021] snd_mixer_oss_get_volume1_vol.constprop.0.isra.0+0xff/0x580 [ 76.672518][ T7021] snd_mixer_oss_get_volume1+0x236/0x610 [ 76.672535][ T7021] snd_mixer_oss_ioctl1+0x290/0x1bb0 [ 76.672549][ T7021] ? __pfx_snd_mixer_oss_get_volume1+0x10/0x10 [ 76.672564][ T7021] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 76.672578][ T7021] ? tomoyo_path_number_perm+0x28f/0x580 [ 76.672604][ T7021] ? tomoyo_path_number_perm+0x188/0x580 [ 76.672625][ T7021] ? __pfx_futex_wait+0x10/0x10 [ 76.672649][ T7021] snd_mixer_oss_ioctl_card+0x102/0x170 [ 76.672662][ T7021] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 76.672676][ T7021] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 76.672691][ T7021] snd_pcm_oss_ioctl+0x34d/0x3790 [ 76.672708][ T7021] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 76.672725][ T7021] ? selinux_file_ioctl+0x13b/0x290 [ 76.672736][ T7021] ? selinux_file_ioctl+0xb6/0x290 [ 76.672748][ T7021] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 76.672763][ T7021] __x64_sys_ioctl+0x18e/0x210 [ 76.672775][ T7021] do_syscall_64+0x123/0x790 [ 76.672799][ T7021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.672811][ T7021] RIP: 0033:0x7f04bd19e159 [ 76.672821][ T7021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.672832][ T7021] RSP: 002b:00007f04be02d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.672845][ T7021] RAX: ffffffffffffffda RBX: 00007f04bd425fa0 RCX: 00007f04bd19e159 [ 76.672852][ T7021] RDX: 0000200000000040 RSI: 0000000080044d07 RDI: 0000000000000005 [ 76.672860][ T7021] RBP: 00007f04bd23503b R08: 0000000000000000 R09: 0000000000000000 [ 76.672867][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.672874][ T7021] R13: 00007f04bd426038 R14: 00007f04bd425fa0 R15: 00007ffc43f13cd8 [ 76.672890][ T7021] [ 76.673579][ T7021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.339'. [ 76.825532][ T7028] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.148693][ T5832] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 77.298631][ T5832] usb 9-1: Using ep0 maxpacket: 16 [ 77.299214][ T5832] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 77.301950][ T5832] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 77.301973][ T5832] usb 9-1: config 0 has no interface number 0 [ 77.305899][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.305922][ T5832] usb 9-1: Product: syz [ 77.305934][ T5832] usb 9-1: Manufacturer: syz [ 77.305946][ T5832] usb 9-1: SerialNumber: syz [ 77.313005][ T5832] usb 9-1: config 0 descriptor?? [ 77.317054][ T5832] hub 9-1:0.132: bad descriptor, ignoring hub [ 77.317078][ T5832] hub 9-1:0.132: probe with driver hub failed with error -5 [ 77.317094][ T7036] FAULT_INJECTION: forcing a failure. [ 77.317094][ T7036] name failslab, interval 1, probability 0, space 0, times 0 [ 77.317113][ T7036] CPU: 0 UID: 0 PID: 7036 Comm: syz.0.342 Not tainted syzkaller #0 PREEMPT(full) [ 77.317125][ T7036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.317132][ T7036] Call Trace: [ 77.317135][ T7036] [ 77.317140][ T7036] dump_stack_lvl+0x100/0x190 [ 77.317159][ T7036] should_fail_ex.cold+0x5/0xa [ 77.317176][ T7036] should_failslab+0xc2/0x120 [ 77.317197][ T7036] __kmalloc_noprof+0xfc/0x840 [ 77.317209][ T7036] ? __pfx_dynamic_dname+0x10/0x10 [ 77.317220][ T7036] ? tomoyo_encode2+0xfb/0x3c0 [ 77.317236][ T7036] tomoyo_encode2+0xfb/0x3c0 [ 77.317250][ T7036] tomoyo_encode+0x29/0x50 [ 77.317262][ T7036] tomoyo_realpath_from_path+0x18c/0x690 [ 77.317278][ T7036] tomoyo_path_number_perm+0x23c/0x580 [ 77.317296][ T7036] ? tomoyo_path_number_perm+0x22e/0x580 [ 77.317314][ T7036] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 77.317337][ T7036] ? __lock_acquire+0x5c0/0x1f40 [ 77.317356][ T7036] ? __fget_files+0x34/0x3d0 [ 77.317369][ T7036] ? find_held_lock+0x2b/0x80 [ 77.317384][ T7036] ? hook_file_ioctl_common+0x140/0x440 [ 77.317402][ T7036] ? __fget_files+0x21f/0x3d0 [ 77.317418][ T7036] security_file_ioctl+0xd3/0x230 [ 77.317431][ T7036] __x64_sys_ioctl+0xb7/0x210 [ 77.317443][ T7036] do_syscall_64+0x123/0x790 [ 77.317459][ T7036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.317471][ T7036] RIP: 0033:0x7fd0f579e159 [ 77.317480][ T7036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.317491][ T7036] RSP: 002b:00007fd0f66f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.317502][ T7036] RAX: ffffffffffffffda RBX: 00007fd0f5a25fa0 RCX: 00007fd0f579e159 [ 77.317509][ T7036] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 77.317516][ T7036] RBP: 00007fd0f66f4090 R08: 0000000000000000 R09: 0000000000000000 [ 77.317522][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.317528][ T7036] R13: 00007fd0f5a26038 R14: 00007fd0f5a25fa0 R15: 00007fff6423b458 [ 77.317543][ T7036] [ 77.317551][ T7036] ERROR: Out of memory at tomoyo_realpath_from_path. [ 77.326773][ T5832] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.132/input/input7 [ 77.456334][ T7043] FAULT_INJECTION: forcing a failure. [ 77.456334][ T7043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.456373][ T7043] CPU: 1 UID: 0 PID: 7043 Comm: syz.0.343 Not tainted syzkaller #0 PREEMPT(full) [ 77.456394][ T7043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.456405][ T7043] Call Trace: [ 77.456412][ T7043] [ 77.456420][ T7043] dump_stack_lvl+0x100/0x190 [ 77.456448][ T7043] should_fail_ex.cold+0x5/0xa [ 77.456489][ T7043] _copy_from_iter+0x1f4/0x1690 [ 77.456507][ T7043] ? __asan_memset+0x23/0x50 [ 77.456522][ T7043] ? __pfx__copy_from_iter+0x10/0x10 [ 77.456537][ T7043] ? __pfx___alloc_skb+0x10/0x10 [ 77.456562][ T7043] netlink_sendmsg+0x808/0xda0 [ 77.456581][ T7043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.456598][ T7043] ? selinux_socket_sendmsg+0x198/0x2f0 [ 77.456625][ T7043] ____sys_sendmsg+0xa4d/0xbe0 [ 77.456644][ T7043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.456661][ T7043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.456685][ T7043] ? lock_acquire+0x1d1/0x380 [ 77.456700][ T7043] ? get_pid_task+0x2a/0x250 [ 77.456722][ T7043] ___sys_sendmsg+0x190/0x1e0 [ 77.456743][ T7043] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.456764][ T7043] ? get_pid_task+0x106/0x250 [ 77.456791][ T7043] ? find_held_lock+0x2b/0x80 [ 77.456824][ T7043] __sys_sendmsg+0x160/0x210 [ 77.456841][ T7043] ? __pfx___sys_sendmsg+0x10/0x10 [ 77.456869][ T7043] do_syscall_64+0x123/0x790 [ 77.456891][ T7043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.456907][ T7043] RIP: 0033:0x7fd0f579e159 [ 77.456920][ T7043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.456933][ T7043] RSP: 002b:00007fd0f66f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.456949][ T7043] RAX: ffffffffffffffda RBX: 00007fd0f5a25fa0 RCX: 00007fd0f579e159 [ 77.456959][ T7043] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000009 [ 77.456968][ T7043] RBP: 00007fd0f66f4090 R08: 0000000000000000 R09: 0000000000000000 [ 77.456976][ T7043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.456985][ T7043] R13: 00007fd0f5a26038 R14: 00007fd0f5a25fa0 R15: 00007fff6423b458 [ 77.457006][ T7043] [ 77.585919][ T7060] Illegal XDP return value 65535 on prog (id 34) dev N/A, expect packet loss! [ 77.620756][ T7064] jffs2: notice: (7064) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 77.691540][ T7069] netlink: 'syz.0.347': attribute type 1 has an invalid length. [ 77.708269][ T7069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.717302][ T7069] bond1: (slave veth0_to_bond): making interface the new active one [ 77.718178][ T7069] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 77.730947][ T7069] bond1: entered promiscuous mode [ 77.730969][ T7069] veth0_to_bond: entered promiscuous mode [ 77.731199][ T7069] bond1: entered allmulticast mode [ 77.731214][ T7069] veth0_to_bond: entered allmulticast mode [ 77.738086][ T7069] macvlan2: entered promiscuous mode [ 77.738100][ T7069] macvlan2: entered allmulticast mode [ 77.741586][ T7069] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.745621][ T7069] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 77.861699][ T5595] usb 9-1: USB disconnect, device number 3 [ 78.013085][ T7079] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 78.236692][ T7086] FAULT_INJECTION: forcing a failure. [ 78.236692][ T7086] name failslab, interval 1, probability 0, space 0, times 0 [ 78.236713][ T7086] CPU: 0 UID: 0 PID: 7086 Comm: syz.0.353 Not tainted syzkaller #0 PREEMPT(full) [ 78.236726][ T7086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.236748][ T7086] Call Trace: [ 78.236753][ T7086] [ 78.236757][ T7086] dump_stack_lvl+0x100/0x190 [ 78.236778][ T7086] should_fail_ex.cold+0x5/0xa [ 78.236794][ T7086] should_failslab+0xc2/0x120 [ 78.236808][ T7086] __kmalloc_noprof+0xfc/0x840 [ 78.236819][ T7086] ? __pfx_dynamic_dname+0x10/0x10 [ 78.236836][ T7086] ? tomoyo_encode2+0xfb/0x3c0 [ 78.236851][ T7086] tomoyo_encode2+0xfb/0x3c0 [ 78.236868][ T7086] tomoyo_encode+0x29/0x50 [ 78.236886][ T7086] tomoyo_realpath_from_path+0x18c/0x690 [ 78.236910][ T7086] tomoyo_path_number_perm+0x23c/0x580 [ 78.236937][ T7086] ? tomoyo_path_number_perm+0x22e/0x580 [ 78.236964][ T7086] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 78.236998][ T7086] ? __lock_acquire+0x5c0/0x1f40 [ 78.237028][ T7086] ? __fget_files+0x34/0x3d0 [ 78.237050][ T7086] ? find_held_lock+0x2b/0x80 [ 78.237074][ T7086] ? hook_file_ioctl_common+0x140/0x440 [ 78.237103][ T7086] ? __fget_files+0x21f/0x3d0 [ 78.237128][ T7086] security_file_ioctl+0xd3/0x230 [ 78.237148][ T7086] __x64_sys_ioctl+0xb7/0x210 [ 78.237169][ T7086] do_syscall_64+0x123/0x790 [ 78.237194][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.237213][ T7086] RIP: 0033:0x7fd0f579e159 [ 78.237228][ T7086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.237244][ T7086] RSP: 002b:00007fd0f66f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.237262][ T7086] RAX: ffffffffffffffda RBX: 00007fd0f5a25fa0 RCX: 00007fd0f579e159 [ 78.237273][ T7086] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 78.237284][ T7086] RBP: 00007fd0f66f4090 R08: 0000000000000000 R09: 0000000000000000 [ 78.237294][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.237305][ T7086] R13: 00007fd0f5a26038 R14: 00007fd0f5a25fa0 R15: 00007fff6423b458 [ 78.237330][ T7086] [ 78.237395][ T7086] ERROR: Out of memory at tomoyo_realpath_from_path. [ 78.403783][ T7091] XFS (nbd4): SB validate failed with error -5. [ 78.638753][ T42] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 78.768886][ T42] usb 5-1: device descriptor read/64, error -71 [ 79.028672][ T42] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 79.178640][ T42] usb 5-1: device descriptor read/64, error -71 [ 79.299076][ T42] usb usb5-port1: attempt power cycle [ 79.526493][ T7010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 79.620665][ T7108] base or size exceeds the MTRR width [ 79.648957][ T42] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 79.683391][ T42] usb 5-1: device descriptor read/8, error -71 [ 79.730201][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 79.730213][ T43] audit: type=1400 audit(1789128421.270:545): avc: denied { connect } for pid=7115 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.800912][ T7120] nsutils-0289 ns_build_internal_name: Returning [ffff8880232d1980] (rel) "_EJ0" [ 79.800943][ T7120] nsaccess-0399 ns_lookup : Searching relative to prefix scope [SFB_] (ffff88802304a1c0) [ 79.800962][ T7120] nsaccess-0522 ns_lookup : Simple Pathname (1 segment, Flags=2) [ 79.800980][ T7120] nsdump-0064 ns_print_pathname : [_EJ0] [ 79.801030][ T7120] acpi_ns_get_normalized_pathname: Path "\_SB.PCI0.SFB" [ 79.801039][ T7120] nssearch-0074 ns_search_one_scope : Searching \_SB.PCI0.SFB (ffff88802304a1c0) For [_EJ0] (Untyped) [ 79.801132][ T7120] nssearch-0126 ns_search_one_scope : Name [_EJ0] (Untyped) not found in search in scope [SFB_] ffff88802304a1c0 first child ffff88802304a180 [ 79.801167][ T7120] nssearch-0364 ns_search_and_enter : _EJ0 Not found in ffff88802304a1c0 [Not adding] [ 79.801197][ T7120] nsaccess-0605 ns_lookup : Name [_EJ0] not found in scope [SFB_] ffff88802304a1c0 [ 79.801237][ T7120] nsutils-0682 ns_get_node_unlocked : _EJ0, AE_NOT_FOUND [ 79.805521][ T7120] pi3usb30532 0-0005: Error reading config register -6 [ 79.813023][ T7120] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 79.930140][ T42] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 79.949439][ T42] usb 5-1: device descriptor read/8, error -71 [ 80.060072][ T42] usb usb5-port1: unable to enumerate USB device [ 80.233816][ T43] audit: type=1400 audit(1789128421.770:546): avc: denied { write } for pid=7142 comm="syz.4.372" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.235580][ T43] audit: type=1400 audit(1789128421.770:547): avc: denied { open } for pid=7142 comm="syz.4.372" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.236068][ T43] audit: type=1400 audit(1789128421.770:548): avc: denied { ioctl } for pid=7142 comm="syz.4.372" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.905589][ T7151] md: personality for level is not loaded! [ 81.135846][ T7164] base or size exceeds the MTRR width [ 81.186355][ T7170] jffs2: notice: (7170) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 81.191914][ T43] audit: type=1400 audit(1789128422.720:549): avc: denied { write } for pid=7169 comm="syz.3.381" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.239000][ T7173] jffs2: notice: (7173) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 81.242402][ T43] audit: type=1400 audit(1789128422.780:550): avc: denied { write } for pid=7172 comm="syz.3.382" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.355977][ T7177] jffs2: notice: (7177) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 81.357133][ T43] audit: type=1400 audit(1789128422.890:551): avc: denied { write } for pid=7175 comm="syz.3.383" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.434419][ T43] audit: type=1400 audit(1789128422.970:552): avc: denied { read } for pid=7179 comm="syz.0.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.480132][ T7182] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 81.480149][ T7182] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 81.482043][ T7182] vhci_hcd vhci_hcd.0: Device attached [ 81.485318][ T7183] vhci_hcd: cannot find the pending unlink 8 [ 81.497910][ T7182] binder: 7181:7182 ioctl 400c620e 200000000080 returned -22 [ 81.730929][ T50] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 81.922096][ T43] audit: type=1400 audit(1789128423.460:553): avc: denied { setopt } for pid=7186 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.079444][ T43] audit: type=1400 audit(1789128423.620:554): avc: denied { create } for pid=7186 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.241594][ T7207] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 82.258333][ T7207] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.274465][ T7207] bond1: (slave veth0_to_bond): Releasing active interface [ 82.274485][ T7207] veth0_to_bond: left promiscuous mode [ 82.274572][ T7207] veth0_to_bond: left allmulticast mode [ 82.293672][ T7207] bond2: (slave veth0_to_bond): making interface the new active one [ 82.296533][ T7207] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 82.307640][ T7207] bond2: entered promiscuous mode [ 82.307657][ T7207] veth0_to_bond: entered promiscuous mode [ 82.307767][ T7207] bond2: entered allmulticast mode [ 82.307777][ T7207] veth0_to_bond: entered allmulticast mode [ 82.319882][ T7211] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 82.420521][ T7215] ip_tables: iptables: counters copy to user failed while replacing table [ 82.430820][ T7215] netlink: 'syz.4.395': attribute type 83 has an invalid length. [ 82.528203][ T7223] FAULT_INJECTION: forcing a failure. [ 82.528203][ T7223] name failslab, interval 1, probability 0, space 0, times 0 [ 82.528235][ T7223] CPU: 3 UID: 0 PID: 7223 Comm: syz.3.398 Not tainted syzkaller #0 PREEMPT(full) [ 82.528256][ T7223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.528268][ T7223] Call Trace: [ 82.528274][ T7223] [ 82.528281][ T7223] dump_stack_lvl+0x100/0x190 [ 82.528326][ T7223] should_fail_ex.cold+0x5/0xa [ 82.528354][ T7223] should_failslab+0xc2/0x120 [ 82.528417][ T7223] __kmalloc_cache_noprof+0x91/0x6d0 [ 82.528448][ T7223] ? avc_has_extended_perms+0x33a/0x1080 [ 82.528475][ T7223] ? snd_mixer_oss_get_volume1_vol.constprop.0.isra.0+0xff/0x580 [ 82.528513][ T7223] snd_mixer_oss_get_volume1_vol.constprop.0.isra.0+0xff/0x580 [ 82.528563][ T7223] snd_mixer_oss_get_volume1+0x236/0x610 [ 82.528591][ T7223] snd_mixer_oss_ioctl1+0x290/0x1bb0 [ 82.528615][ T7223] ? __pfx_snd_mixer_oss_get_volume1+0x10/0x10 [ 82.528645][ T7223] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 82.528667][ T7223] ? tomoyo_path_number_perm+0x28f/0x580 [ 82.528699][ T7223] ? tomoyo_path_number_perm+0x188/0x580 [ 82.528733][ T7223] ? __pfx_futex_wait+0x10/0x10 [ 82.528768][ T7223] snd_mixer_oss_ioctl_card+0x102/0x170 [ 82.528795][ T7223] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 82.528810][ T7223] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 82.528828][ T7223] snd_pcm_oss_ioctl+0x34d/0x3790 [ 82.528847][ T7223] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 82.528868][ T7223] ? selinux_file_ioctl+0x13b/0x290 [ 82.528880][ T7223] ? selinux_file_ioctl+0xb6/0x290 [ 82.528893][ T7223] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 82.528910][ T7223] __x64_sys_ioctl+0x18e/0x210 [ 82.528926][ T7223] do_syscall_64+0x123/0x790 [ 82.528956][ T7223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.528973][ T7223] RIP: 0033:0x7f0dfe99e159 [ 82.528988][ T7223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.529004][ T7223] RSP: 002b:00007f0dff818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.529023][ T7223] RAX: ffffffffffffffda RBX: 00007f0dfec25fa0 RCX: 00007f0dfe99e159 [ 82.529032][ T7223] RDX: 0000200000000040 RSI: 0000000080044d07 RDI: 0000000000000005 [ 82.529039][ T7223] RBP: 00007f0dfea3503b R08: 0000000000000000 R09: 0000000000000000 [ 82.529047][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.529054][ T7223] R13: 00007f0dfec26038 R14: 00007f0dfec25fa0 R15: 00007ffeed83e0f8 [ 82.529070][ T7223] [ 82.541137][ T7223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.398'. [ 83.337419][ T7238] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 83.422546][ T7242] capability: warning: `syz.0.405' uses deprecated v2 capabilities in a way that may be insecure [ 83.630613][ T5734] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.633603][ T5734] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.636916][ T5734] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.639180][ T5734] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.646263][ T5734] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.650503][ T7240] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 83.650520][ T7240] device-mapper: ioctl: error adding target to table [ 83.701903][ T7258] program syz.0.411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.703182][ T7258] binder: 7257:7258 ioctl c0306201 200000000040 returned -14 [ 83.703307][ T7258] binder: 7257:7258 unknown command 0 [ 83.703316][ T7258] binder: 7257:7258 ioctl c0306201 200000000640 returned -22 [ 84.073540][ T7251] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.073873][ T7251] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.073992][ T7251] bridge_slave_0: entered allmulticast mode [ 84.074773][ T7251] bridge_slave_0: entered promiscuous mode [ 84.077037][ T7251] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.077216][ T7251] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.077276][ T7251] bridge_slave_1: entered allmulticast mode [ 84.078280][ T7251] bridge_slave_1: entered promiscuous mode [ 84.094494][ T7251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.096325][ T7251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.110198][ T7251] team0: Port device team_slave_0 added [ 84.111589][ T7251] team0: Port device team_slave_1 added [ 84.131602][ T7251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.131615][ T7251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.131629][ T7251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.132576][ T7251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.132585][ T7251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.132597][ T7251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.166111][ T7251] hsr_slave_0: entered promiscuous mode [ 84.166867][ T7251] hsr_slave_1: entered promiscuous mode [ 84.167469][ T7251] debugfs: 'hsr0' already exists in 'hsr' [ 84.167481][ T7251] Cannot create hsr debugfs directory [ 84.211526][ T7287] autofs: Unknown parameter '½\Óìɓ߂:šjœ™”m4ŠÑñÃ+' [ 84.238667][ T1666] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 84.360455][ T7251] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.366614][ T7251] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.367621][ T7251] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.373066][ T7251] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.374399][ T7251] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.380256][ T7251] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.380992][ T7251] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.387662][ T7251] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.400735][ T1666] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.401646][ T1666] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.401663][ T1666] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.401689][ T1666] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.472289][ T7251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.486994][ T7251] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.494926][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.494978][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.505800][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.505884][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.611940][ T1666] usb 9-1: usb_control_msg returned -32 [ 84.611965][ T1666] usbtmc 9-1:16.0: can't read capabilities [ 84.642194][ T1666] usb 9-1: USB disconnect, device number 4 [ 84.787352][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 84.787369][ T43] audit: type=1400 audit(1789128426.320:563): avc: denied { append } for pid=7310 comm="syz.3.420" name="frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.821402][ T7251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.983334][ T7251] veth0_vlan: entered promiscuous mode [ 84.990100][ T7251] veth1_vlan: entered promiscuous mode [ 84.995318][ T43] audit: type=1400 audit(1789128426.530:564): avc: denied { bind } for pid=7324 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.016008][ T7251] veth0_macvtap: entered promiscuous mode [ 85.020534][ T7251] veth1_macvtap: entered promiscuous mode [ 85.027867][ T7251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.036423][ T7251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.118388][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.118406][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.140710][ T110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.140730][ T110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.149572][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.149793][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.149818][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.149836][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.153168][ T43] audit: type=1400 audit(1789128426.690:565): avc: denied { mounton } for pid=7251 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 85.237917][ T7338] ip_tables: iptables: counters copy to user failed while replacing table [ 85.253064][ T7338] netlink: 'syz.5.407': attribute type 83 has an invalid length. [ 85.352925][ T7347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.424'. [ 85.366600][ T7345] netlink: 34 bytes leftover after parsing attributes in process `syz.5.426'. [ 85.612828][ T7356] netlink: 'syz.5.429': attribute type 12 has an invalid length. [ 85.654516][ T7359] device-mapper: ioctl: name not supplied when creating device [ 85.749702][ T5734] Bluetooth: hci4: command tx timeout [ 85.953610][ T43] audit: type=1400 audit(1789128427.490:566): avc: denied { read } for pid=7368 comm="syz.3.435" path="socket:[19219]" dev="sockfs" ino=19219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.961330][ T7371] ip_tables: iptables: counters copy to user failed while replacing table [ 85.992211][ T7371] netlink: 'syz.5.434': attribute type 83 has an invalid length. [ 86.084968][ T7378] netlink: 20 bytes leftover after parsing attributes in process `syz.5.438'. [ 86.103345][ T7378] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.153117][ T43] audit: type=1326 audit(1789128427.690:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.4.437" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04bd19e159 code=0x0 [ 86.188349][ T7382] device-mapper: ioctl: name not supplied when creating device [ 86.273403][ T7390] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 86.448221][ T43] audit: type=1400 audit(1789128427.980:568): avc: denied { read } for pid=7394 comm="syz.0.443" path="socket:[20249]" dev="sockfs" ino=20249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 86.606632][ T7406] binder: 7405:7406 ioctl c0306201 2000000003c0 returned -14 [ 86.607566][ T43] audit: type=1400 audit(1789128428.140:569): avc: denied { read write } for pid=7405 comm="syz.0.448" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.608122][ T43] audit: type=1400 audit(1789128428.140:570): avc: denied { open } for pid=7405 comm="syz.0.448" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.613207][ T7408] device-mapper: ioctl: name not supplied when creating device [ 86.656791][ T5595] lg-g15 0003:046D:0A07.0003: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 86.661541][ T5595] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0003/input/input8 [ 86.667958][ T43] audit: type=1400 audit(1789128428.200:571): avc: denied { ioctl } for pid=5125 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2914 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.668795][ T7410] netlink: 'syz.5.450': attribute type 1 has an invalid length. [ 86.718158][ T7411] fido_id[7411]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 86.870642][ T7417] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 86.884459][ T7417] bond1: entered promiscuous mode [ 86.884793][ T7417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.894270][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.454'. [ 86.894296][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.454'. [ 87.086969][ T7417] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 87.086994][ T7417] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 87.087008][ T7417] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 87.168833][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.168875][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.168902][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.168929][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.234160][ T7430] 9pnet_fd: p9_fd_create_unix (7430): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 87.300700][ T7430] input: syz1 as /devices/virtual/input/input9 [ 87.819226][ T5734] Bluetooth: hci4: command tx timeout [ 88.170835][ T7451] jffs2: notice: (7451) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 88.174686][ T43] audit: type=1400 audit(1789128429.710:572): avc: denied { write } for pid=7446 comm="syz.4.462" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.220551][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.463'. [ 88.294951][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 88.296805][ T7460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.465'. [ 88.594467][ T7472] netlink: 'syz.0.469': attribute type 49 has an invalid length. [ 88.598313][ T7472] bond0: (slave bond_slave_0): Releasing backup interface [ 88.664287][ T7472] bond_slave_0: entered promiscuous mode [ 88.664314][ T7472] bond_slave_0: entered allmulticast mode [ 89.251974][ T7503] netlink: 84 bytes leftover after parsing attributes in process `syz.4.476'. [ 89.526767][ T7513] jffs2: notice: (7513) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 89.899070][ T5734] Bluetooth: hci4: command tx timeout [ 90.319401][ T7518] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 90.378088][ T7524] ip_tables: iptables: counters copy to user failed while replacing table [ 90.390281][ T7524] netlink: 'syz.4.483': attribute type 83 has an invalid length. [ 90.432407][ T7527] synth uevent: /bus/acpi: unknown uevent action string [ 90.432740][ T7527] syzkaller1: entered promiscuous mode [ 90.432755][ T7527] syzkaller1: entered allmulticast mode [ 90.435570][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 90.435583][ T43] audit: type=1400 audit(1789128431.970:581): avc: denied { read } for pid=7526 comm="syz.3.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.495293][ T43] audit: type=1400 audit(1789128432.030:582): avc: denied { view } for pid=7523 comm="syz.0.484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 90.561669][ T43] audit: type=1400 audit(1789128432.100:583): avc: denied { listen } for pid=7532 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.595002][ T7539] Cannot find set identified by id 0 to match [ 90.655031][ T7541] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.769437][ T43] audit: type=1400 audit(1789128432.310:584): avc: denied { remount } for pid=7556 comm="syz.0.496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.846672][ T7564] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 90.847974][ T43] audit: type=1400 audit(1789128432.380:585): avc: denied { map } for pid=7556 comm="syz.0.496" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 90.865872][ T7564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7564 comm=syz.5.498 [ 90.866400][ T43] audit: type=1400 audit(1789128432.400:586): avc: denied { bind } for pid=7560 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.868392][ T7564] netlink: 44 bytes leftover after parsing attributes in process `syz.5.498'. [ 91.030574][ T7579] FAULT_INJECTION: forcing a failure. [ 91.030574][ T7579] name failslab, interval 1, probability 0, space 0, times 0 [ 91.030604][ T7579] CPU: 1 UID: 0 PID: 7579 Comm: syz.4.504 Not tainted syzkaller #0 PREEMPT(full) [ 91.030623][ T7579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.030633][ T7579] Call Trace: [ 91.030639][ T7579] [ 91.030646][ T7579] dump_stack_lvl+0x100/0x190 [ 91.030689][ T7579] should_fail_ex.cold+0x5/0xa [ 91.030716][ T7579] should_failslab+0xc2/0x120 [ 91.030744][ T7579] kmem_cache_alloc_noprof+0x92/0x6a0 [ 91.030761][ T7579] ? rcu_is_watching+0x13/0xc0 [ 91.030783][ T7579] ? vm_area_dup+0x27/0x9d0 [ 91.030809][ T7579] vm_area_dup+0x27/0x9d0 [ 91.030833][ T7579] __split_vma+0x19c/0x1de0 [ 91.030856][ T7579] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 91.030879][ T7579] ? rcu_is_watching+0x13/0xc0 [ 91.030900][ T7579] ? __pfx___split_vma+0x10/0x10 [ 91.030923][ T7579] ? lockdep_hardirqs_on+0x7d/0x110 [ 91.030957][ T7579] ? trace_sched_exit_tp+0x120/0x160 [ 91.030987][ T7579] vms_gather_munmap_vmas+0x1d2/0x1720 [ 91.031017][ T7579] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 91.031042][ T7579] ? lock_acquire+0x1d1/0x380 [ 91.031059][ T7579] ? futex_unqueue+0x29/0x2c0 [ 91.031081][ T7579] ? find_held_lock+0x2b/0x80 [ 91.031131][ T7579] ? futex_unqueue+0x133/0x2c0 [ 91.031153][ T7579] ? futex_unqueue+0x133/0x2c0 [ 91.031178][ T7579] ? futex_unqueue+0x13d/0x2c0 [ 91.031203][ T7579] do_vmi_align_munmap+0x287/0x5f0 [ 91.031232][ T7579] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 91.031264][ T7579] ? __pfx_futex_wake_mark+0x10/0x10 [ 91.031297][ T7579] ? __lock_acquire+0x5c0/0x1f40 [ 91.031335][ T7579] ? mas_walk+0x260/0x310 [ 91.031360][ T7579] do_vmi_munmap+0x1f8/0x3e0 [ 91.031389][ T7579] __vm_munmap+0x196/0x390 [ 91.031407][ T7579] ? __pfx___vm_munmap+0x10/0x10 [ 91.031439][ T7579] __x64_sys_munmap+0x59/0x80 [ 91.031460][ T7579] do_syscall_64+0x123/0x790 [ 91.031484][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.031502][ T7579] RIP: 0033:0x7f04bd19e159 [ 91.031516][ T7579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.031533][ T7579] RSP: 002b:00007f04be02d028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 91.031552][ T7579] RAX: ffffffffffffffda RBX: 00007f04bd425fa0 RCX: 00007f04bd19e159 [ 91.031565][ T7579] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000001000 [ 91.031576][ T7579] RBP: 00007f04bd23503b R08: 0000000000000000 R09: 0000000000000000 [ 91.031586][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.031596][ T7579] R13: 00007f04bd426038 R14: 00007f04bd425fa0 R15: 00007ffc43f13cd8 [ 91.031620][ T7579] [ 91.130731][ T7577] FAULT_INJECTION: forcing a failure. [ 91.130731][ T7577] name failslab, interval 1, probability 0, space 0, times 0 [ 91.130758][ T7577] CPU: 3 UID: 0 PID: 7577 Comm: syz.5.503 Not tainted syzkaller #0 PREEMPT(full) [ 91.130777][ T7577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.130787][ T7577] Call Trace: [ 91.130792][ T7577] [ 91.130799][ T7577] dump_stack_lvl+0x100/0x190 [ 91.130827][ T7577] should_fail_ex.cold+0x5/0xa [ 91.130852][ T7577] should_failslab+0xc2/0x120 [ 91.130872][ T7577] kmem_cache_alloc_noprof+0x92/0x6a0 [ 91.130890][ T7577] ? __pfx_vma_is_special_huge+0x10/0x10 [ 91.130910][ T7577] ? ptlock_alloc+0x1f/0x70 [ 91.130938][ T7577] ptlock_alloc+0x1f/0x70 [ 91.130959][ T7577] pte_alloc_one+0x82/0x3d0 [ 91.130984][ T7577] __do_fault+0x26c/0x440 [ 91.131002][ T7577] do_fault+0x585/0x1830 [ 91.131020][ T7577] ? __pfx_filemap_map_pages+0x10/0x10 [ 91.131042][ T7577] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 91.131067][ T7577] ? __pfx_do_fault+0x10/0x10 [ 91.131085][ T7577] ? pgd_none+0x9f/0xe0 [ 91.131135][ T7577] ? __pfx_pgd_none+0x10/0x10 [ 91.131157][ T7577] ? lock_acquire+0x1d1/0x380 [ 91.131176][ T7577] __handle_mm_fault+0x150b/0x2f60 [ 91.131203][ T7577] ? lock_vma_under_rcu+0x11d/0x590 [ 91.131226][ T7577] ? __pfx___handle_mm_fault+0x10/0x10 [ 91.131253][ T7577] ? lock_vma_under_rcu+0x17c/0x590 [ 91.131290][ T7577] handle_mm_fault+0x363/0xa20 [ 91.131314][ T7577] do_user_addr_fault+0x59c/0x12f0 [ 91.131341][ T7577] exc_page_fault+0x6f/0xd0 [ 91.131362][ T7577] asm_exc_page_fault+0x26/0x30 [ 91.131378][ T7577] RIP: 0033:0x7f184b96e770 [ 91.131392][ T7577] Code: fa 08 73 36 48 83 ea 04 73 e0 83 fa fd 7c 10 8a 0e 74 0a 0f b7 74 16 02 66 89 74 17 02 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 fa 7f 07 c5 fa 7f 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48 [ 91.131408][ T7577] RSP: 002b:00007f184c81a018 EFLAGS: 00010202 [ 91.131421][ T7577] RAX: 0000200000ffb020 RBX: 00007f184bc25fa0 RCX: 0000000000000018 [ 91.131432][ T7577] RDX: 0000000000000018 RSI: 0000200000000100 RDI: 0000200000ffb020 [ 91.131442][ T7577] RBP: 00007f184c81a090 R08: 0000000000000018 R09: 0000000000000000 [ 91.131469][ T7577] R10: 0000200000ffb000 R11: 0000200000000100 R12: 0000000000000001 [ 91.131481][ T7577] R13: 00007f184bc26038 R14: 00007f184bc25fa0 R15: 00007fffad61d7e8 [ 91.131505][ T7577] [ 91.131563][ T7577] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 91.458123][ T7593] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.490012][ T7590] infiniband syz0: set active [ 91.490026][ T7590] infiniband syz0: added bond0 [ 91.498479][ T7590] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 91.498502][ T7590] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 91.498524][ T7590] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 91.518490][ T7593] md: array md0 already has disks! [ 91.529837][ T7593] md: personality for level is not loaded! [ 91.535503][ T7590] RDS/IB: syz0: added [ 91.535702][ T7590] smc: adding ib device syz0 with port count 1 [ 91.535750][ T7590] smc: ib device syz0 port 1 has no pnetid [ 91.699738][ T7605] FAULT_INJECTION: forcing a failure. [ 91.699738][ T7605] name failslab, interval 1, probability 0, space 0, times 0 [ 91.699760][ T7605] CPU: 0 UID: 0 PID: 7605 Comm: syz.3.513 Not tainted syzkaller #0 PREEMPT(full) [ 91.699773][ T7605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.699780][ T7605] Call Trace: [ 91.699784][ T7605] [ 91.699789][ T7605] dump_stack_lvl+0x100/0x190 [ 91.699825][ T7605] should_fail_ex.cold+0x5/0xa [ 91.699843][ T7605] should_failslab+0xc2/0x120 [ 91.699862][ T7605] kmem_cache_alloc_noprof+0x92/0x6a0 [ 91.699877][ T7605] ? mas_preallocate+0xc22/0xee0 [ 91.699900][ T7605] mas_preallocate+0xc22/0xee0 [ 91.699918][ T7605] ? __pfx_mas_preallocate+0x10/0x10 [ 91.699938][ T7605] ? anon_vma_name+0x5a/0x250 [ 91.699960][ T7605] __split_vma+0x2f8/0x1de0 [ 91.699981][ T7605] ? __pfx___split_vma+0x10/0x10 [ 91.700005][ T7605] vms_gather_munmap_vmas+0x1d2/0x1720 [ 91.700022][ T7605] ? __resched_curr+0x42e/0x500 [ 91.700038][ T7605] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 91.700057][ T7605] ? preempt_schedule_thunk+0x16/0x40 [ 91.700073][ T7605] ? preempt_schedule_common+0x3c/0xb0 [ 91.700089][ T7605] ? preempt_schedule_thunk+0x16/0x40 [ 91.700109][ T7605] do_vmi_align_munmap+0x287/0x5f0 [ 91.700127][ T7605] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 91.700142][ T7602] syz_tun: entered allmulticast mode [ 91.700148][ T7605] ? __lock_acquire+0x5c0/0x1f40 [ 91.700170][ T7605] ? mas_walk+0x260/0x310 [ 91.700185][ T7605] do_vmi_munmap+0x1f8/0x3e0 [ 91.700204][ T7605] __vm_munmap+0x196/0x390 [ 91.700215][ T7605] ? __pfx___vm_munmap+0x10/0x10 [ 91.700234][ T7605] __x64_sys_munmap+0x59/0x80 [ 91.700247][ T7605] do_syscall_64+0x123/0x790 [ 91.700262][ T7605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.700273][ T7605] RIP: 0033:0x7f0dfe99e159 [ 91.700283][ T7605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.700294][ T7605] RSP: 002b:00007f0dff818028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 91.700305][ T7605] RAX: ffffffffffffffda RBX: 00007f0dfec25fa0 RCX: 00007f0dfe99e159 [ 91.700312][ T7605] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000001000 [ 91.700319][ T7605] RBP: 00007f0dfea3503b R08: 0000000000000000 R09: 0000000000000000 [ 91.700325][ T7605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.700332][ T7605] R13: 00007f0dfec26038 R14: 00007f0dfec25fa0 R15: 00007ffeed83e0f8 [ 91.700345][ T7605] [ 91.908270][ T7618] device-mapper: ioctl: populate_table: no targets specified [ 91.936737][ T7621] kvm: user requested TSC rate below hardware speed [ 91.979042][ T5734] Bluetooth: hci4: command tx timeout [ 91.998283][ T43] audit: type=1400 audit(1789128433.530:587): avc: denied { mount } for pid=7624 comm="syz.4.521" name="/" dev="autofs" ino=24925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 92.003831][ T7625] netlink: 'syz.4.521': attribute type 1 has an invalid length. [ 92.047230][ T7625] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 92.049179][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.521'. [ 92.050258][ T7625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.053546][ T5803] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 92.068320][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.521'. [ 92.082394][ T43] audit: type=1400 audit(1789128433.620:588): avc: denied { unmount } for pid=6424 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 92.097927][ T7629] md: personality for level is not loaded! [ 92.161846][ T5803] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 92.468894][ T5819] ================================================================== [ 92.468909][ T5819] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1b48/0x1d60 [ 92.468935][ T5819] Write of size 8 at addr ffffc900053f1000 by task kworker/0:4/5819 [ 92.468950][ T5819] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 92.468966][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 92.468987][ T5819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.469000][ T5819] Workqueue: events_power_efficient fb_flashcursor [ 92.469024][ T5819] Call Trace: [ 92.469030][ T5819] [ 92.469038][ T5819] dump_stack_lvl+0x100/0x190 [ 92.469062][ T5819] print_report+0x13d/0x4b0 [ 92.469086][ T5819] ? _raw_spin_lock_irqsave+0x52/0x60 [ 92.469109][ T5819] ? sys_imageblit+0x1b48/0x1d60 [ 92.469126][ T5819] kasan_report+0xdf/0x1c0 [ 92.469150][ T5819] ? sys_imageblit+0x1b48/0x1d60 [ 92.469170][ T5819] sys_imageblit+0x1b48/0x1d60 [ 92.469191][ T5819] ? __pfx_sys_imageblit+0x10/0x10 [ 92.469208][ T5819] ? __kasan_kmalloc+0xaa/0xb0 [ 92.469228][ T5819] ? __kmalloc_noprof+0x350/0x840 [ 92.469246][ T5819] ? soft_cursor+0x201/0xa10 [ 92.469272][ T5819] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 92.469302][ T5819] soft_cursor+0x524/0xa10 [ 92.469331][ T5819] bit_cursor+0xd3a/0x14e0 [ 92.469358][ T5819] ? __pfx_bit_cursor+0x10/0x10 [ 92.469386][ T5819] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 92.469407][ T5819] ? get_color+0x1da/0x450 [ 92.469428][ T5819] ? __pfx_bit_cursor+0x10/0x10 [ 92.469451][ T5819] fb_flashcursor+0x338/0x430 [ 92.469474][ T5819] process_one_work+0xac7/0x1b10 [ 92.469506][ T5819] ? __pfx_process_one_work+0x10/0x10 [ 92.469533][ T5819] ? lock_acquire+0x1d1/0x380 [ 92.469555][ T5819] ? __pfx_fb_flashcursor+0x10/0x10 [ 92.469577][ T5819] worker_thread+0x5ef/0xe50 [ 92.469605][ T5819] ? __pfx_worker_thread+0x10/0x10 [ 92.469632][ T5819] ? kthread+0x13a/0x450 [ 92.469654][ T5819] ? __pfx_worker_thread+0x10/0x10 [ 92.469679][ T5819] kthread+0x373/0x450 [ 92.469702][ T5819] ? __pfx_kthread+0x10/0x10 [ 92.469727][ T5819] ret_from_fork+0x730/0xd60 [ 92.469747][ T5819] ? __pfx_ret_from_fork+0x10/0x10 [ 92.469766][ T5819] ? __switch_to+0x800/0x10f0 [ 92.469791][ T5819] ? __pfx_kthread+0x10/0x10 [ 92.469813][ T5819] ret_from_fork_asm+0x1a/0x30 [ 92.469838][ T5819] [ 92.469849][ T5819] [ 92.469854][ T5819] The buggy address belongs to a vmalloc virtual mapping [ 92.469866][ T5819] Memory state around the buggy address: [ 92.469875][ T5819] ffffc900053f0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 92.469888][ T5819] ffffc900053f0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 92.469900][ T5819] >ffffc900053f1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 92.469909][ T5819] ^ [ 92.469918][ T5819] ffffc900053f1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 92.469929][ T5819] ffffc900053f1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 92.469939][ T5819] ================================================================== [ 92.469948][ T5819] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 92.581353][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 92.584375][ T5819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.587599][ T5819] Workqueue: events_power_efficient fb_flashcursor [ 92.589773][ T5819] Call Trace: [ 92.591129][ T5819] [ 92.592125][ T5819] dump_stack_lvl+0x100/0x190 [ 92.593683][ T5819] vpanic+0x553/0x970 [ 92.594999][ T5819] ? __pfx_vpanic+0x10/0x10 [ 92.596502][ T5819] ? __pfx_vprintk_emit+0x10/0x10 [ 92.598174][ T5819] ? sys_imageblit+0x1b48/0x1d60 [ 92.599785][ T5819] panic+0xd1/0xe0 [ 92.601013][ T5819] ? __pfx_panic+0x10/0x10 [ 92.602501][ T5819] ? sys_imageblit+0x1b48/0x1d60 [ 92.604147][ T5819] check_panic_on_warn.cold+0x19/0x34 [ 92.605937][ T5819] end_report.part.0+0x3a/0x90 [ 92.607498][ T5819] kasan_report.cold+0xe/0x18 [ 92.609117][ T5819] ? sys_imageblit+0x1b48/0x1d60 [ 92.610762][ T5819] sys_imageblit+0x1b48/0x1d60 [ 92.612373][ T5819] ? __pfx_sys_imageblit+0x10/0x10 [ 92.614041][ T5819] ? __kasan_kmalloc+0xaa/0xb0 [ 92.615638][ T5819] ? __kmalloc_noprof+0x350/0x840 [ 92.617607][ T5819] ? soft_cursor+0x201/0xa10 [ 92.619450][ T5819] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 92.622044][ T5819] soft_cursor+0x524/0xa10 [ 92.623837][ T5819] bit_cursor+0xd3a/0x14e0 [ 92.625634][ T5819] ? __pfx_bit_cursor+0x10/0x10 [ 92.627586][ T5819] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 92.629929][ T5819] ? get_color+0x1da/0x450 [ 92.631743][ T5819] ? __pfx_bit_cursor+0x10/0x10 [ 92.633685][ T5819] fb_flashcursor+0x338/0x430 [ 92.635414][ T5819] process_one_work+0xac7/0x1b10 [ 92.637107][ T5819] ? __pfx_process_one_work+0x10/0x10 [ 92.638834][ T5819] ? lock_acquire+0x1d1/0x380 [ 92.640334][ T5819] ? __pfx_fb_flashcursor+0x10/0x10 [ 92.642006][ T5819] worker_thread+0x5ef/0xe50 [ 92.643475][ T5819] ? __pfx_worker_thread+0x10/0x10 [ 92.645095][ T5819] ? kthread+0x13a/0x450 [ 92.646440][ T5819] ? __pfx_worker_thread+0x10/0x10 [ 92.648054][ T5819] kthread+0x373/0x450 [ 92.649351][ T5819] ? __pfx_kthread+0x10/0x10 [ 92.650822][ T5819] ret_from_fork+0x730/0xd60 [ 92.652324][ T5819] ? __pfx_ret_from_fork+0x10/0x10 [ 92.653945][ T5819] ? __switch_to+0x800/0x10f0 [ 92.655452][ T5819] ? __pfx_kthread+0x10/0x10 [ 92.656915][ T5819] ret_from_fork_asm+0x1a/0x30 [ 92.658422][ T5819] [ 92.659971][ T5819] Kernel Offset: disabled [ 92.661318][ T5819] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:07:14 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b08405 RDI=ffffffff9bc68ca0 RBP=ffffffff9bc68c60 RSP=ffffc90002917030 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666657 R12=0000000000000000 R13=0000000000000066 R14=000000000000000f R15=ffffc90002917348 RIP=ffffffff85b0842f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b5c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc43f14038 CR3=000000005bb01000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff829e1b4f ffffffff829a6546 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81c833a1 ffffffff829e1b4f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc43f141c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc43f141c6 00007ffc43f141cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04bd23561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04bd23565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04bd2357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04bd235650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff829e16bd ffffffff829a661c ffffffff829a6546 ffffffff81af907a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff829e16bd ffffffff829a661c ffffffff829a6546 ffffffff81af907a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000007 RBX=0000000000000000 RCX=0000000000000002 RDX=8f5c28f5c28f5c29 RSI=0000000000000000 RDI=ffffffff8edec420 RBP=ffffffff96911318 RSP=ffffc900006afac8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff88802aaecb00 R13=0000000000000002 R14=0000000000000000 R15=ffffffff8edec420 RIP=ffffffff81e72a0b RFL=00000803 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f184c81a6c0 ffffffff 00c00000 GS =0000 ffff8880d5c5c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f04bd159270 CR3=000000002db87000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefef800 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e1de7f7850 000055e1de7f7850 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 00007ffe589d4920 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdd13d17f0 00007fcdd13d17e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdd15f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bf53d3d19119cdd6 2f2f7acbaf4e8eb5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2fae 2f2f2f2f2f2f2f4a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 00007ffe589d4920 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00003a302e30310a 0000552d63706c76 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a5f393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33515f4350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3136312f38000030 3030313d4d4e4e45 44000030303d4d55 4e3d45420031312f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c00312f30000030 30302c333230302c 3200003000333931 300034390030312f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff888026951bd0 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff888026951bd2 RBP=dffffc0000000000 RSP=ffffc90006c6f8f8 R8 =0000000000000001 R9 =ffffed1004d2a37a R10=ffff888026951bd3 R11=0000000000000000 R12=0000000000006623 R13=ffffed1004d2a37a R14=ffff88806a63cf00 R15=0000000000000000 RIP=ffffffff8bd382e4 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f05ea574300 ffffffff 00c00000 GS =0000 ffff8880d5d5c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f04bdf556c8 CR3=0000000035f70000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=b60e8c95e26c2d11 f2602716a85d5a50 b60e8c95e26c2d11 f2602716a85d5a50 b60e8c95e26c2d11 f2602716a85d5a50 b60e8c95e26c2d11 f2602716a85d5a50 ZMM18=0a1da9e1865019d8 5235c7a05b50d531 0a1da9e1865019d8 5235c7a05b50d531 0a1da9e1865019d8 5235c7a05b50d531 0a1da9e1865019d8 5235c7a05b50d531 ZMM19=5204000000000000 0000000000000004 5204000000000000 0000000000000003 5204000000000000 0000000000000002 5204000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 12080003b8030c08 0003b00300080003 a803018083fe0800 03a0032480808008 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003980312080003 90031e0800038803 0196080003800303 800402a003000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000306c 6e7436706901ffff ffffffffffffdf08 028003048c080002 ZMM24=b4b04a0db4b04a0d b4b04a0db4b04a0d b4b04a0db4b04a0d b4b04a0db4b04a0d b4b04a0db4b04a0d b4b04a0db4b04a0d b4b04a0db4b04a0d b4b04a0db4b04a0d ZMM25=95e2d7c295e2d7c2 95e2d7c295e2d7c2 95e2d7c295e2d7c2 95e2d7c295e2d7c2 95e2d7c295e2d7c2 95e2d7c295e2d7c2 95e2d7c295e2d7c2 95e2d7c295e2d7c2 ZMM26=8d3151b58d3151b5 8d3151b58d3151b5 8d3151b58d3151b5 8d3151b58d3151b5 8d3151b58d3151b5 8d3151b58d3151b5 8d3151b58d3151b5 8d3151b58d3151b5 ZMM27=44756c9e44756c9e 44756c9e44756c9e 44756c9e44756c9e 44756c9e44756c9e 44756c9e44756c9e 44756c9e44756c9e 44756c9e44756c9e 44756c9e44756c9e ZMM28=000000800000007f 0000007e0000007d 0000007c0000007b 0000007a00000079 0000007800000077 0000007600000075 0000007400000073 0000007200000071 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a2080000a2080000 a2080000a2080000 a2080000a2080000 a2080000a2080000 a2080000a2080000 a2080000a2080000 a2080000a2080000 a2080000a2080000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffffc900031e77d8 RCX=ffffffff92228e01 RDX=0000000000000001 RSI=ffffffff8c622900 RDI=ffffffff8c622940 RBP=0000000000000003 RSP=ffffc900031e72c8 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000003e948 R12=ffffc900031e73c8 R13=ffffc900031e7378 R14=ffffc900031e77d8 R15=ffffc900031e73ac RIP=ffffffff8bd0891a RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fcdd1b54880 ffffffff 00c00000 GS =0000 ffff8880d5e5c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcdd11bb83c CR3=000000002ab84000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0800000 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000fffbfffd Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 343a37622f617461 642f766564752f6e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 000055e1de810ca0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdd13d17f0 00007fcdd13d17e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdd15f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e59054b4e590541 49454648051a101a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 101a101a051a101a 101a5e4f4d584b5e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e1d783b9d7 00706d742e343a37 622f617461642f76 6564752f6e75722f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 000055e1de810ca0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554500484e2d4945 2f45524144004449 0053242d5457452d 484e2d4953242d54 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000