last executing test programs: 2m31.091960022s ago: executing program 2 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) write(r3, &(0x7f0000000040)="c021", 0x2) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000005c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="edc597ae", @ANYRES16=r4, @ANYRESHEX=r2, @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x20088c4) 2m30.962099564s ago: executing program 2 (id=237): r0 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="a4e6356b4f9d97c998ada99a706b0f55b5f46aca5d28cae262c54c7d4d6b69f38d07127765bef295d675bbb11ce5b5df7e7abea7c4269b1501415563e000e20a8d3badd30dd27f4982c04d4a96cce3b0a21b8617c21c4c23c22947d6918f519edc609f0cedd66423c28294a3423190ed0a497caf5cebb6f2b0278199a8cce1740d7cc471fcbb28c103794126d195586ef779cdcc44961673ec0b8dc380ab13bc3a341e9203578b576e3d1aaa845448f386d8fa6c7a8d1ab01c23a9c654b4066c3c", 0xc1}, {&(0x7f0000000180)="fc289fdcb42ef83d2800453fcc7e5292438efb40a07fb124d96429bcb4548fb3509f0a2b6e967ee8c2aaa514659fa7710c2afd349b3f96be3ff3d982ca09bf0bb3104bfd128bea0b7a79880451a55ac2deb870430fce6941b42108cc1a4383e458058efc7bc42ab85abd4b24e2f88941f1c6874cf07c1af9b987d246a441941edd1ea79cc343c82a97185b3c762dc3167d9be21b479810aeb0e78893ebd2a1d31dcd5460de3779", 0xa7}], 0x2}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240408c1}, 0x8800) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000005c0)={@ipv4={""/10, ""/2, @initdev}, 0x0}, &(0x7f0000000600)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000a00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000640)={0x36c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x91, 0x5, "bddb9cdd9327c2bc33d3699ab09459eb51ab28660b0c21f0cefb53cd7ef8dc78337b42612240a7598a4a3b66a0f235cfeb10c6300ff9e1bca3ca9f91939a088f636f0912bcf01a4a2922041e807dac798993ad75c66763b96b42e79579d4a8fafe4f9d546545a09995b84ef117aad05eeacf09d2b2bc7262e36d16a3be89c4fbb9c0123a14ea55e7c3ad246c08"}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9533407aa2005348}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x104, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x7, 0x5, "8ae52c"}, @ETHTOOL_A_BITSET_VALUE={0xf3, 0x4, "0870b565dece5aae0eacb0ee63533766a08f934046432ab4bdb312c37e65965319ee603e58dfbd23c2a1235bea17887bc9bbbdb1994edd4e429adb43d80b2ec9dc1ac99c71e2e44d78f812b5b3c38c50dde347db93fba1341db8d5e0de8fe77ae78e8c640b7c754d2b88b1c2744336f3c59e031ce7674a9e13ba9e70215ab010d365c08f2cf03c51f5583eea708893dfcf3a84b4302d6820f1101bb10e26b27a5299dd65000a3c5283434dd8d1683eb007e6b0c0b47978ad8c4c272683a493c40b6e6581c3ae1814f043b9d987070756655339f1c2c30a258e46a08a29bb9b039954b2b27c1e3f48f14a8d1942c3ee"}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x38, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\')#\x80}/,\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000a40)={0x9, 0x0, [{0x80000008, 0x7fff, 0xc, 0x200, 0x9, 0x0, 0xfffffff2}, {0x6, 0x7d, 0x3, 0xfffffff7, 0x1, 0x4, 0xfffffffd}, {0xc0000001, 0x2, 0x2, 0x4ace7f12, 0x101, 0xd, 0x8}, {0x1, 0x8, 0x3, 0x91c, 0x0, 0x8001, 0xfffffc00}, {0x80000000, 0x800, 0x4, 0xe, 0x61, 0x1}, {0x2, 0xffffffff, 0x1, 0x37c0, 0x0, 0x3, 0x1}, {0xc0000000, 0x7, 0x4, 0x2, 0x8, 0x3, 0x7fffffff}, {0x6, 0x8, 0x2, 0x40, 0x0, 0x2, 0x10001}, {0x1, 0x89d, 0x4, 0x2, 0xffffff99, 0x9, 0x7}]}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, r2, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x40898) (async) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) (async) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000e40)={&(0x7f0000000d00), 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x74, r10, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x124a32d20fdfd53b}, 0x200000d5) r11 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000e80)={0x0, 0x2a, "f6ec635cb04410f0e01b52e87dbf36d20ba7d573427445bfc03330d201ea6e40679559410f328b70540e"}, &(0x7f0000000ec0)=0x32) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000000f00)={0x9, 0x4, 0x200, 0x1, 0x7ff, 0x8, 0x9, 0x547, r12}, 0x20) (async) r13 = openat$audio1(0xffffff9c, &(0x7f0000000f40), 0x81, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x30, r13, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000f80)) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000fc0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000001040)=r14) (async) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000001080)={{0xffffffff, 0x0, 0xe, 0x8, 0x8, 0x8, 0xae, 0x6c, 0xfd, 0x3, 0x8, 0x6}, {0xb000, 0x50000, 0xc, 0x3, 0x6, 0x9, 0x5, 0x9d, 0x4, 0x4, 0x2, 0xfc}, {0xfec00000, 0x60000, 0xc, 0x9, 0x6, 0x80, 0x3, 0x2, 0x40, 0x22, 0x7, 0x5}, {0xd000, 0x25000, 0xf, 0xca, 0x0, 0x8, 0x3, 0x0, 0x5, 0x2, 0x2, 0x1}, {0x200000, 0x5000, 0xf, 0x4, 0x7, 0x0, 0x81, 0x2, 0xfa, 0x81, 0x9, 0x1}, {0x8080000, 0x1000, 0xe, 0x9b, 0xc, 0x9, 0x2, 0x6, 0x2, 0x9, 0x7f, 0xfb}, {0x200000, 0x54000, 0xa, 0x9, 0xe, 0xff, 0x2, 0x7, 0x2, 0x1, 0x5, 0x9}, {0x9000, 0x80a0000, 0xb, 0x2, 0x2, 0xa, 0x4, 0x3, 0x6, 0x4, 0x7, 0x3e}, {0xc000, 0x7ff}, {0x58000, 0x2b}, 0x2, 0x0, 0xd5d50000, 0x1041c8, 0x8, 0xac00, 0xeeeab000, [0x8, 0x1ff, 0x40, 0xfffffffffffffffb]}) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x8, [@var={0xd, 0x0, 0x0, 0xe, 0x1, 0xad9c49e9a897c8c}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @func={0x5, 0x0, 0x0, 0xc, 0x3}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4}}, @union={0xd, 0x4, 0x0, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x3}, {0x6, 0x2}, {0x2, 0x5, 0x2}, {0x1, 0x2, 0x2}]}]}, {0x0, [0x2e, 0x30, 0x0, 0x0, 0x2e, 0x0]}}, &(0x7f0000001440)=""/23, 0xa8, 0x17, 0x1, 0x9, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x10, &(0x7f00000011c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0x4, 0x2, 0x1, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001240)='GPL\x00', 0x9, 0xfd, &(0x7f0000001280)=""/253, 0x41100, 0x40, '\x00', 0x0, 0x0, r15, 0x8, &(0x7f00000014c0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001580)=[0xffffffffffffffff], &(0x7f00000015c0)=[{0x2, 0x5, 0x0, 0x8}, {0x5, 0x1, 0x2, 0xb}, {0x1, 0x2, 0x10, 0x3}, {0x2, 0x5, 0x1, 0xb}, {0x5, 0x2, 0x9, 0x1}, {0x1, 0x3, 0x8, 0x9}]}, 0x94) 2m30.952923786s ago: executing program 2 (id=239): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) (fail_nth: 6) 2m30.822775433s ago: executing program 2 (id=241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x400000000010, 0x3, 0x0) r2 = openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x400c003}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x2e, 0xe}, 0x0) mprotect(&(0x7f000006a000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0x427b5000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x2e) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d) socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 2m30.70265117s ago: executing program 2 (id=242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x800}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000010400005c000300000000000000", @ANYRESHEX=r2, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="c4020000180003e827bd7000fddbdf25ffffffff000000000000000000000000200100000000000000000000000000024e247fff4e24000a0a0080905e000000", @ANYRES32, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d65e000000e000000200000000000000000000000001000000000000000600000000000000000016010000000000e0000000000000be000000000000000000008000000000060000000000000001040000000000000500000000000000ffffffff00000000080000000000000003000000000000000000000006000000000400002bbd7000053500000a", @ANYRES16=r1], 0x2c4}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x61d6ce6fcc4b234b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000000800080017f60e618f9371c4248520d17ce041f910be5ef874e696fa37b2e4d58a513d008c740b9673226bf2ad220301c2b9ab66cd6c5fbbc19c354594b22ef5c3e561de83c50ac92a047d792d22c8c1fbbf994db9275e951858780a8abaee917447b2e001d27659d04ca36893013f", @ANYRES32=r6, @ANYBLOB], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'veth1\x00'}) 2m30.702401162s ago: executing program 2 (id=243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0xeeee0000, 0x3, 0x8, 0xbfb, 0x0, [{0x8, 0x5, 0xf, '\x00', 0xd}, {0x52, 0x6, 0x8, '\x00', 0x7}, {0x9, 0x1, 0x7, '\x00', 0x8}, {0x22, 0x9, 0x8, '\x00', 0x4}, {0x8, 0xc, 0xda}, {0x9, 0x3, 0x83, '\x00', 0x2}, {0x0, 0x2, 0xa, '\x00', 0xa0}, {0x6, 0x4, 0x81, '\x00', 0xe}, {0x8, 0x8, 0x0, '\x00', 0x8}, {0x1, 0x40, 0x6, '\x00', 0xce}, {0x4, 0x4, 0x2, '\x00', 0x8}, {0x7f, 0xbf, 0xfd, '\x00', 0x8}, {0x3, 0x5, 0x9, '\x00', 0x81}, {0x9, 0xf9, 0x3, '\x00', 0x8}, {0x8, 0x8, 0xf, '\x00', 0x8}, {0xc, 0x5, 0x80, '\x00', 0x5}, {0xff, 0x85, 0x9, '\x00', 0x1}, {0x1, 0x4, 0x6, '\x00', 0x5}, {0x3, 0xea, 0x3, '\x00', 0x6}, {0x7, 0xb, 0x8, '\x00', 0x80}, {0x1, 0x1, 0x4, '\x00', 0xa}, {0x0, 0xa8, 0x8, '\x00', 0x7f}, {0xa, 0xf4, 0x7f, '\x00', 0xf0}, {0x10, 0x4, 0x20, '\x00', 0x1a}]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"0bd13af7e222d7b82977a894bcf2d741b99f8f02da617b9ad94014424a83db0314f34fdfe9a260e953f1aaf3610eec4c839a08a42b569d1e59b5520d8ad988ecacf773bc8c1855c13291a20986512ff73d4967f734679cb88ac4c1013a6d38828f96b71019283ce07d08bbb370738322ffae7a0afc79279598c1166ec564d5be5344fc87a5f00ca1354bced1fccde226dcd6e864d8262199e37fda0824cafccbe5f8cd0518aa106eb5f8a0986aca2d05a5eaa0177c72d3caeb3579fd729cfe1e7c8e2bb7a9dcfc32e31c7dd4cb48b11128a933481391a63c788de6306217984ef3aa5c402cf680385d96c065818632f2eb3b976ae7997d793ee5a91e26017c70319748f5b8505ce26e2fc2a50296523adc134596ff6ce79f6b58e5ca0612085af940096fb90cb23a7eac4d0e1f0933ef17dd5b760ed2864d8cc3dca7174f7d10bc4ccde5463f72f0265c673a73a1d7d41a581d8491c8f37615278b543c2c3310ae461a924409d0b5a1a75085d800e69f7351d6f2e058d6323d3ae70c7a1b7961a017dcbd827381d2133be3eda141656239ee6859843e51305726cc2444f1360e65e2993842d09428843f2c50c989084ed7722d34e930873d420e9c9fffda5fedf8370000000000000000885e2e653d083ccc91792e12e3082139763d44f68d1115d8e545444accee3bb38a9fa3b9ff7172868cfaf0a8f22a6939248404db646f2aa405a21b953498132fe3167e4783623451da9253e12187b4086f56bdd827e75a5523e04683335992552fa2cce95d2b23833d57bf2872f9e428b374d049a35636113207f68e34d7f1392c05add0d78b9d999c7a5d47dcbb803bcab54544dbceb73f41d5ac0970883308fecd0edcbb3eea10c1b56c851d13ff248353994d4fc68815b1bf45d202c9944b5cecc4d09a99b422ef51442a8c16e1dbb6a955c4618d592d43cd7e52c206929662f178afe060401868ffaf0db2f1eb3aaeb591be9eae546ae97266315e87487dd399ea4ec20423904c3953376a3ab41853f00b720b270b6ae8fd3cbd6c66e4af6d15bbae6aa085e56a3f8ca4a40117a72209d18e4e31e06389650b8115ef5f1fcd8c2d56b37d66fff06008836e501304a332dd3a9e6eea4f8f8d9e3671edc0abe7788692ba653850e980c36a4d3f60d090a58e34fa033b8e92ce7c19a1730872bd9b58530729400823e68ebb0ab9294bebfcd5404194a9dce119d204e01736b57ef37f7bc11ebf9bbf4d33a35ccebc67a3e38bc092cc208e8d70f33d830d26e16b5adcfb3a8928ececc4273771716dce7a0cd4d6f37f8cf70242fe91f09d9d07745e60c35b93bc343eb27751afc6ffb4693ef290668824287595c20cda170ff582c630e2a5df595cb8b7868b8f28665c7fb592d8763b6a0c3e20154f6400"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x1, 0xbb, 0x2, 0xc0, 0x4d, 0x9, 0x61, 0x7, 0x90, 0xd}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="68000000000905040000000100000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000000200002800c00010070fca769637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 2m24.182563722s ago: executing program 1 (id=295): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1}, 0x94) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x200000, 0x0, 0x81, 0xffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x400, 0x1, 0x2e1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (fail_nth: 17) 2m23.981977544s ago: executing program 1 (id=296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0xfffffffffffffe21}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x20, {0x0, 0x0, 0x74, r4, {0x0, 0x3}, {0x4, 0xb}, {0x9, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x30000080) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r5, 0x100000000) 2m23.782386014s ago: executing program 1 (id=300): r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000160007df25197c000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2abd700000000000000000000000000000000000d9b2003be6752064939cc500228f7221f565147b04a95c504c18ef59594dc2b9bd55f7c61e6c2c96b54eab847b6cd85e8e587d50cbf21a3d1e613450", @ANYRES32=r4, @ANYBLOB="0118020003110000280012800b000100697036746e6c00001800028014000300200100"/48], 0x48}}, 0x4048084) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x72}, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r8, 0x5b) read$watch_queue(r7, &(0x7f0000000000)=""/1, 0x1) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x3f00000000000000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x248c, 0x4) socket$unix(0x1, 0x1, 0x0) 2m22.402679356s ago: executing program 1 (id=306): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x20000014}) r2 = syz_open_pts(0xffffffffffffffff, 0xc0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000dd8000/0x1000)=nil, &(0x7f0000cb8000/0x4000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000275000/0x4000)=nil, &(0x7f0000383000/0x1000)=nil, &(0x7f00005b9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000f83000/0x1000)=nil, &(0x7f0000a6c000/0x2000)=nil, &(0x7f00000be000/0x2000)=nil, &(0x7f0000417000/0x2000)=nil, &(0x7f0000000080)="225b862bc7e798f02b932530d437a378acb60c5af486bde6b6b0c87e49ed68beaabe2c3358d04bcef91a1d84a4753ee9a7631e8be8fc127b19ab64a9010a5add", 0x40, r2}, 0x64) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x102e40, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006e2000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 2m22.339594139s ago: executing program 1 (id=308): openat$khugepaged_scan(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1, 0x2, 0x10, "8baa00000500c30000000006000000000000000000000000000400", 0x56595559}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000f20085000000bc004dd68cfb0000626b63049b777ce355880506689f13730c9b63119706fb1a682a8ec08d3251338ddb23273a", @ANYRES32, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r6, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) 2m22.072183795s ago: executing program 1 (id=311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000080000000c000000000000800100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8bb4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) write$tun(r0, &(0x7f00000007c0)=ANY=[], 0xfdef) 2m22.032975551s ago: executing program 32 (id=311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000080000000c000000000000800100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8bb4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) write$tun(r0, &(0x7f00000007c0)=ANY=[], 0xfdef) 2m15.63024638s ago: executing program 33 (id=243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0xeeee0000, 0x3, 0x8, 0xbfb, 0x0, [{0x8, 0x5, 0xf, '\x00', 0xd}, {0x52, 0x6, 0x8, '\x00', 0x7}, {0x9, 0x1, 0x7, '\x00', 0x8}, {0x22, 0x9, 0x8, '\x00', 0x4}, {0x8, 0xc, 0xda}, {0x9, 0x3, 0x83, '\x00', 0x2}, {0x0, 0x2, 0xa, '\x00', 0xa0}, {0x6, 0x4, 0x81, '\x00', 0xe}, {0x8, 0x8, 0x0, '\x00', 0x8}, {0x1, 0x40, 0x6, '\x00', 0xce}, {0x4, 0x4, 0x2, '\x00', 0x8}, {0x7f, 0xbf, 0xfd, '\x00', 0x8}, {0x3, 0x5, 0x9, '\x00', 0x81}, {0x9, 0xf9, 0x3, '\x00', 0x8}, {0x8, 0x8, 0xf, '\x00', 0x8}, {0xc, 0x5, 0x80, '\x00', 0x5}, {0xff, 0x85, 0x9, '\x00', 0x1}, {0x1, 0x4, 0x6, '\x00', 0x5}, {0x3, 0xea, 0x3, '\x00', 0x6}, {0x7, 0xb, 0x8, '\x00', 0x80}, {0x1, 0x1, 0x4, '\x00', 0xa}, {0x0, 0xa8, 0x8, '\x00', 0x7f}, {0xa, 0xf4, 0x7f, '\x00', 0xf0}, {0x10, 0x4, 0x20, '\x00', 0x1a}]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"0bd13af7e222d7b82977a894bcf2d741b99f8f02da617b9ad94014424a83db0314f34fdfe9a260e953f1aaf3610eec4c839a08a42b569d1e59b5520d8ad988ecacf773bc8c1855c13291a20986512ff73d4967f734679cb88ac4c1013a6d38828f96b71019283ce07d08bbb370738322ffae7a0afc79279598c1166ec564d5be5344fc87a5f00ca1354bced1fccde226dcd6e864d8262199e37fda0824cafccbe5f8cd0518aa106eb5f8a0986aca2d05a5eaa0177c72d3caeb3579fd729cfe1e7c8e2bb7a9dcfc32e31c7dd4cb48b11128a933481391a63c788de6306217984ef3aa5c402cf680385d96c065818632f2eb3b976ae7997d793ee5a91e26017c70319748f5b8505ce26e2fc2a50296523adc134596ff6ce79f6b58e5ca0612085af940096fb90cb23a7eac4d0e1f0933ef17dd5b760ed2864d8cc3dca7174f7d10bc4ccde5463f72f0265c673a73a1d7d41a581d8491c8f37615278b543c2c3310ae461a924409d0b5a1a75085d800e69f7351d6f2e058d6323d3ae70c7a1b7961a017dcbd827381d2133be3eda141656239ee6859843e51305726cc2444f1360e65e2993842d09428843f2c50c989084ed7722d34e930873d420e9c9fffda5fedf8370000000000000000885e2e653d083ccc91792e12e3082139763d44f68d1115d8e545444accee3bb38a9fa3b9ff7172868cfaf0a8f22a6939248404db646f2aa405a21b953498132fe3167e4783623451da9253e12187b4086f56bdd827e75a5523e04683335992552fa2cce95d2b23833d57bf2872f9e428b374d049a35636113207f68e34d7f1392c05add0d78b9d999c7a5d47dcbb803bcab54544dbceb73f41d5ac0970883308fecd0edcbb3eea10c1b56c851d13ff248353994d4fc68815b1bf45d202c9944b5cecc4d09a99b422ef51442a8c16e1dbb6a955c4618d592d43cd7e52c206929662f178afe060401868ffaf0db2f1eb3aaeb591be9eae546ae97266315e87487dd399ea4ec20423904c3953376a3ab41853f00b720b270b6ae8fd3cbd6c66e4af6d15bbae6aa085e56a3f8ca4a40117a72209d18e4e31e06389650b8115ef5f1fcd8c2d56b37d66fff06008836e501304a332dd3a9e6eea4f8f8d9e3671edc0abe7788692ba653850e980c36a4d3f60d090a58e34fa033b8e92ce7c19a1730872bd9b58530729400823e68ebb0ab9294bebfcd5404194a9dce119d204e01736b57ef37f7bc11ebf9bbf4d33a35ccebc67a3e38bc092cc208e8d70f33d830d26e16b5adcfb3a8928ececc4273771716dce7a0cd4d6f37f8cf70242fe91f09d9d07745e60c35b93bc343eb27751afc6ffb4693ef290668824287595c20cda170ff582c630e2a5df595cb8b7868b8f28665c7fb592d8763b6a0c3e20154f6400"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x1, 0xbb, 0x2, 0xc0, 0x4d, 0x9, 0x61, 0x7, 0x90, 0xd}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="68000000000905040000000100000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000000200002800c00010070fca769637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 1m6.291991697s ago: executing program 5 (id=973): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000370000504010000000000000007000000", @ANYRES32=r2, @ANYBLOB="140001800800010000000100050003"], 0x2c}}, 0x0) 1m6.242247035s ago: executing program 5 (id=975): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac00000021000100000000000000000000000000000000000000fffffffffffffe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xac}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendto$inet6(0xffffffffffffffff, &(0x7f0000001300)="92", 0x1, 0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000480)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000540)={0x11, 0x5, r3}, 0x14) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r4, 0x8008b70d, &(0x7f0000004200)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RRENAME(r5, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1m6.07645259s ago: executing program 5 (id=979): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a31000000000000", 0x8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x22) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x1) write$sysctl(r4, &(0x7f0000000040)='2\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0xbde9b000) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) madvise(&(0x7f000039d000/0x2000)=nil, 0x2000, 0x15) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x27, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[], 0x8) 1m5.832063814s ago: executing program 5 (id=980): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000040)={r5, @in6={{0xa, 0x4e22, 0xed2, @loopback, 0x110}}, [0x80, 0xffffffff, 0x7fff, 0x4, 0x1, 0x101, 0x8d4, 0xffffffff7fffffff, 0xf, 0x8000000000000001, 0x3, 0x3, 0x3, 0x7b3, 0x3]}, &(0x7f0000000140)=0x100) write$apparmor_current(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='changeprofile ://&'], 0x17) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) 1m5.780300047s ago: executing program 5 (id=981): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)="303f28a0db6c3603c5d209649c9b04c52d544f4d4f594f5f434f4e4649473d300a302d505245464552454e43453d6d4b785f61756469745f6c6f673d3000ff0755188b3f2c9230815b2e7b2fb4556a4e2fe5216e501ffb62b17606c08e121be3a228d036b606c9e04a594016d045758868a360217e3284a2d4a3437fb286e5484928f58e85a8342e40d0f47013d7cf88a815eb40f3f0b160b41f26f01050eea978e0011811aca8e5d5d65771166135406880d69833217f501b91956f4d7964d0945e27f5ff7b48d8c6a675c6447f1879e7ef699235d359812f186b2eef7e5ef9af77566787a8190a", 0xe8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x586a, 0x200, 0x1, 0xced4, 0x9, 0x10000, 0x71d, 0xd3, 0x7, 0xc, 0x2, 0x8, 0xf, 0x2, 0xffffffc3}}]}}]}, 0x170}}, 0x24008004) r7 = socket(0x2b, 0x80801, 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r9, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xff}, 'port0\x00', 0x3eb, 0x21e3f, 0x10, 0x0, 0x3, 0x5, 0x400, 0x0, 0xa}) openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0xe0190, 0x0) syz_clone3(&(0x7f0000001880)={0x120000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(r9, &(0x7f0000000180), 0x56) getsockopt$sock_buf(r7, 0x1, 0x37, &(0x7f00000003c0)=""/185, &(0x7f0000000480)=0xb9) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, &(0x7f0000000380)="4e813cbfba79cae0486c4303d9d8aba8e590094c6a", 0x15, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000005c0)='westwood', 0x8) shutdown(r8, 0x1) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000300000000000034239ff44493f8125066b167e791200000000c000600010000000100000024002d800500010000000000050004000000000008000200030000000800030000000000"], 0x44}}, 0x0) 1m5.711807455s ago: executing program 5 (id=983): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x7fff, 0x200) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x104, 0x1, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_EXPECT_NAT={0xb4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xc0000000}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x24004880) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002500)=ANY=[@ANYBLOB="600000000206010200000000000000000700fffe14000780080008000000007a08000640000000060900020073797a31000000000500040000000000050005000a000000050001000700000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='select \n', 0x10) write(r2, &(0x7f0000000100)='file read /etc/passwd exec argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10, 0x0}, 0x30004001) splice(r4, 0x0, r3, 0x0, 0x7, 0xa) 51.800961693s ago: executing program 4 (id=1071): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x8e3, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r4, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000540)={0x0, 0xfa81, 0x0, 0x0, 0x28e, 0x0, r0}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddca, 0x2, 0x0, 0x330}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x8, 0x0, 0x2db, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x4, 0x0, 0x1fb}}], 0x4, &(0x7f0000001f40)={0x2e, 0x8, 0x0, r7, 0xc0107524, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r5, '\x00', {0x2, 0xb55, 0x0, 0x0}}, 0x0) 51.73784971s ago: executing program 4 (id=1073): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x40082104, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x1, 0x324e, 0x20, @private0={0xfc, 0x0, '\x00', 0x3}, @ipv4={'\x00', '\xff\xff', @empty}, 0x40, 0x8, 0x4, 0x200}}) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d00)=@delsa={0x324, 0x11, 0x10, 0x70bd2b, 0x25dfdbfe, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0xa, 0x6c}, [@sa={0xe0, 0x6, {{@in=@empty, @in6=@empty, 0x4e22, 0x6, 0x4e21, 0xfffc, 0x2, 0xa0, 0xe0, 0x32, r5}, {@in6=@private2, 0x4d5, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, {0x1000, 0x9, 0x7, 0x3, 0x58, 0xfffffffffffffeff, 0x0, 0x401}, {0x7, 0x100, 0x8, 0x10}, {0x6, 0x5, 0x6}, 0x70bd26, 0x3505, 0xa, 0x5, 0xa, 0x14}}, @policy_type={0xa, 0x10, {0x1}}, @algo_comp={0x11b, 0x3, {{'lzs\x00'}, 0x698, "f4198df018305694636dcdd74951e0e85c6fef5cc3428ba1710edfd4527b07b9ff6e95370007a7a3779a5182ad7905418de3ff9223f1b8f3a0c98546b9a9596e3d9cef827afdb33a6e0a0b3437c005f76d9be65560c415b1c617dd659dc0270ca2a5fee084e766c0f1de9ee92a6ef33def9ecba8355cd51974420ef4d2c1c601804baa2b31a221c1138f8b68548395d31f2de4fae6cd7ef8d6dc4018119d7671966c7a5cdbd749eb77915611a7e12bfdbb072d58303e97c0c6fa16137954e681f4018a35982d82273eebdc501850c9776983ec"}}, @algo_auth={0xf3, 0x1, {{'ghash-generic\x00'}, 0x558, "bf0aacc9462510abe2de568c40b6f9333c527414321a6d745f49f38f834700eb5ea095c3c1faa0d04990ccf1312653500aa2b356ee4ca444e275ef4c26a2a6f981a493b57e0054f4855ecd331567f541cf2942accc04608f0414805c9001635531b35ccd3f22b13d9c3ee37a54dffdd6611c58d2204d270ca6ab11f101898012ec816532b4ac2e1ac704b3f776f3bef9d4248fea57a1cde91c54d00847f15b66b38f196ba5e09714a6b926"}}]}, 0x324}, 0x1, 0x0, 0x0, 0x20000115}, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x200) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setuid(0xee01) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r7, 0xffffffff80000900, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x4040001) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8814}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) 50.690993398s ago: executing program 34 (id=983): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x7fff, 0x200) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x104, 0x1, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_EXPECT_NAT={0xb4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xc0000000}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x24004880) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002500)=ANY=[@ANYBLOB="600000000206010200000000000000000700fffe14000780080008000000007a08000640000000060900020073797a31000000000500040000000000050005000a000000050001000700000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='select \n', 0x10) write(r2, &(0x7f0000000100)='file read /etc/passwd exec argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10, 0x0}, 0x30004001) splice(r4, 0x0, r3, 0x0, 0x7, 0xa) 48.670091447s ago: executing program 4 (id=1093): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xd1, 0xa0, 0x5e, 0x20, 0xccd, 0x102, 0x890e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x54, 0x40, 0x1, "", [{{0x9, 0x4, 0xbc, 0x80, 0x0, 0xc, 0xf1, 0xc7, 0x7f}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='tahvo 2', 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x12, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r4, r3, 0x26}, 0x10) r5 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRESHEX], 0x270}, 0x1, 0x0, 0x0, 0x24008005}, 0x44) ioctl(r1, 0x8b21, &(0x7f0000000040)) 47.071673466s ago: executing program 4 (id=1122): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x8, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000400)=0x4, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x7}}, './sys/bus/pci/devices/0000:00:1d.0/remove\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r3, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r3, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$sock(r1, &(0x7f0000001500)=[{{&(0x7f0000000480)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)="e0f5a674ea5ef60ee787f9cfe3c30de87f24bbece363b9139d74a075d3acb2515bf10fed7b2f4ee701b672e7026b2d5977d38957e0624e6bd71b340c0621eadc6a6aacd449f96b800a3bfe6e5028ae30c85ba240bba5451d458a833d35fed3cb47f51602de92a60392812191da6e2b6040257f8816c13dcdb955ab53136adaa02cb56cbe0dff4384564fc9a67373f97d24a399bf1441d2cf507e541680b6339f9a54863d71e2a290fb9d2fe352958577d29da1f591e0fb897a979d3b9a09fc4470372a517674d882a6b5b4613846ba956b899220347be51a39d0cb088f73f36d4175acb2ad29372cfd5c23b25f7e87f8a2ee", 0xf2}], 0x1, &(0x7f00000006c0)=[@txtime={{0x14, 0x1, 0x3d, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x3}}], 0x28}}, {{&(0x7f0000000700)=@in={0x2, 0x4e20, @private=0xa010101}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000780)="4b6f8227215242fd580653762b9e814218813a70a861c7", 0x17}, {&(0x7f00000007c0)="a7f2bafd1ee10bf5c8583fb5b8c596dd9de53fe5f60656041a1bfea7c11ced3f83d653ce9c54b40e70484f0bae2a13f1d0270a0d8abd9b380d88184ee0e5ae9886beeceadc1994bd3bca9eed44ae5fe8380b566068a0e05232780bf6c2843200475c125f629af0f629306dfc46afcdf6f2947c99d3c9bdcc330d6858c57712c2cfa47b6a74680e75585805a63eaa420b9d", 0x91}, {&(0x7f0000000880)="e1424ca2073d41196187861ae8a05e26adda1840d8aa73c30a45b051b0d6eedcf219fd76ef04c90cd782e68e8723f94d72c4e7d39c2ca042f19b81cb43712cf5ab318ef66679ecc5d151fccfaeaf2613ed009edb076cb5770d1883b681cc778c7e9f84528829eef01f612daa63c39462f035f3dc8e390368b52a797d93b6fb0ebd3a13e44f7d59b56e3d10935ce6947da2fcd46e2cec07cf9f160fcd34294b3e2d92639b95691733cfbb1393168c14ed7043d038acaefdecfa9237098995ab67192a009674aeb1a1597207d6bbc16336c3b70cb76d66841118ad609c6af3315c59ce1bfb32289fbd24f4df955195d4383e18e70356b6", 0xf6}, {&(0x7f0000000980)="994259b8e6a659fd1a6ca0f679eadf146a0b83311ce89db81f1005f7b39055843b27b3d0545e6c26f05e6f8fa251e63704c2d4f54996031ec5e94df4431a49c30a2180e20d616a2f1555e270cb10f2d777125469e467", 0x56}, {&(0x7f0000000a00)="ba098e03b487cfcd966c06d8009d88c6824490bbcdeebdc7adee4013edab0863b9bd2354327e6412ce6f1f1075428c2761f139b2ec62e73d231c6b19dc5a2ee38d8b123e37d5bb1d33344d734c555b47566e465004fe17ed4cb07092d998557801e5c3b7bc593028c16609412b953088c50ba85510c549ba23defb4493ca482520c9efb3646a66f050a5bcfba65a3c1abb26d36b0e452d05ede373bec2cdb10edc8c4381344d", 0xa6}, {&(0x7f0000000ac0)="b0bd5ca35ef6da51f48b6f042b830431c818a4d0827392d8a86a94672f8e7353438e877c513e9872437d02a953d9b73c6e10e3b4c10717e788a0fd9e979604fab56971e269ccdc921d5b5d9be0c0d5cdf0245e78d6d33d8aad3b76724e9d1983afb4efdb48002249c246cf1c160e55e87e0c65ffae77a0065bef047fd8336d195dc52ef0dfc505daa9c1ec6109004aa15693185de80773fafd1dd9f4ddfd6808678e980f878cbdd9f304ff040827b8ede2e374863955f9235edafcc711179ba3cd7de71f5737d9ca8a0fb2a8dcbb5ed225299ea41bcb23655345acbec5efc337b694f7525005", 0xe6}, {&(0x7f0000000bc0)="474969d3a87683ac8b507848561188e813da3bad5c3dd2220cbffcef5f14aa72f65bb40309fbcbfd3dd14a14a2c713fda3885cffbdba0ebb5ec40ceaad74294c571c35c1a2954a0e05f2bd3f084a4fe0a90214c2013a53a762413f0d90221219b03fbbc38c759a4c4b3daa2182b3df", 0x6f}, {&(0x7f0000000c40)="fbf279032f86d6cbb876f040de8027265686b9a89cb4cc9c8d936811284175d724a1513609b8d26bd2259fd61096fd41ebb7ddf6420ea75c310fa5ae53ceecdc36241421cb8464f4838cfd5c566bc92dcccb540fbc714bf556e62e46c667f6b887d3d6bd24f4bae4110fffd83eb31aa8ea84d9c48ae4e16a9327bbf197edde41300cef89cdf2359fe030432d149e05310ea50213dfa2d07151813392e71cae7e1e25f1dcaad0", 0xa6}, {&(0x7f0000000d00)="d490ad7fcf3817d9539aa8ed42b5e657526761fa6d29b2b5e52ccb62d43e68667a9d67d2bc53b34da6b9e1990a00f18e550fcd3d1800bb869cb1f23b0609ab4cfa5ac471224cb84841c7ee1dc765240ef01c6cae569be58da3fb732657a9ef9ca0fbd3a86b58d9d27ef7abcb472ba64e2c09c8e948158f56e4fa0ceb2b3b49edcb2cdb54a6441f2afe588ea5199b872dd93c865eb0939bd881bbd7acab808ac6feeb37ccae2b", 0xa6}, {&(0x7f0000000dc0)="f9e212f0e3dccb57ca880a91e23b7c6ae5d8bf7061273e560877090c3713cf9528be3c3159b99388b006332db899811ef1f3225012d24a592d959a59da3f4a305790e0600b9287e8a33e2a3278f90f0b0d0b7a6e3ae0f8de3e0d86ec1bb28646dedebe8e45a611fccdb30b5acbff29f0ee3e766a2ad43d8f2b32eb0920d18f7043fff08b73e283329e03ba186811793d69f1982e01524293b2193d84616a8f2f13359fc65782f4a20be2ac84fd8766a47f99102a8662146e04c6dfa4b150e9979fc6706328f3033e670fd14bf4b4d8903905672a0b3791fba0331540654b50f979451bf11ef989f6167cbbfea858e12c38ac35075bdb94", 0xf7}], 0xa}}, {{&(0x7f0000000f40)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000fc0)="f97bae0edc8c4e50540d539b61cad27e67d54ce84ccb1eec398e478ab2b7619c6f9e5f8b627e212f1ddc0629800310d1775472cf74ae81942e732ee9905ef2d02fdda5f108b416700f", 0x49}, {&(0x7f0000001040)="49e97ec3e570e6cb43a5c22de7312c7e710c84860afa0ec6d1f5e5504904e9d66e270c0c48f4f96b4f89a845c7c9952812af1d0414ed520dbe854bf31cd6dcd1894ebaa4eb5f0f85e10ecd27a27a71bec09f8d8751764437730f0d68bd6972d2420848755f7cd429e15f5600b1f30e0b681bb4b78e2e129fa5a2481b49e0b66f9e242e3a5f34c79a514d46ecba9d", 0x8e}, {&(0x7f0000001100)="d9d0223745e50a626ea97bc88657618944c65794c0723c9843478a8cbfc4e087e54f38c95b027b89a72395ea3f1077fc3e16c1f631dd154a9e6ea931b8248a6f74de2f928f22ca2b04ab3349aa10dce756c05c3aa80d3bcf0c701bba55117848a849d68d9a10ea6e8109a0a29dc87819b75bfbfbd8017ae6f915c35b98ebebd282b06933b620617d5d7b2309108fe0bafe3a25101a5ccfc9ea3dbdeed1f96bc6bf72c86d8c0faaa6c5fde562039228ef8491440013d9528a1be855c9fe5704eed3a285331e32be25fd6d36d22d14bac4485d7ace343d07bf90de885d099904999dd2a08e4b6cb6ce616fa016c68b37cd6fce467372ba", 0xf6}, {&(0x7f0000001200)="ecbbab58e844b87eae0f7cf695cbd3abf1f377c73d39bb5179b686831f934be87f6ee2be61d0a798e13f4651f7622abe3f77f7af6aa146460b185e70bfce2a792a0465287964d8c9f246995398f5cc0cb866f6dc1817d46281fe00f04afbf45c0846a6fd75bbed20cbc331dce11427178abd2e6de8cf858b434c6ebdd50d91fc763c512ac10618b0005576aae6dd07344a6ad0af334db6a401183e7f9f6c2d9c49b5b2519a41981b9aa9c370a5bf4eeb195a99f5fa7a6ed790ea1ddf5c845928592c5990ed2387e255c021a505e106a18cf8", 0xd2}, {&(0x7f0000001300)="a0ed6d9687f51ae97564e72b5467ffac86c749cf6774ddfb0efda5e0288c47e0072ba6aa1b9587b7bb4077a63669acef9ee6eb73e234c680796e4bc60991882a72937223996f8c7b76d9a1d2946ee886fdd848d8ca2dcaba92a259513cd75491a4d9f00d41bb1b7ad9c280bff16b06bbd2bdfafe9946700f6470729574e51c9818880603517b60eeea4313f972", 0x8d}, {&(0x7f00000013c0)="0ef1a5", 0x3}, {&(0x7f0000001400)="e5faad699dd8d1cdfe5efeffb3775f83a41879586fa2167cf34e6fb4d5c40ca871385fb5b592617c62a2bd442e72f78654bf317b75de7b22f539a2c195d393a76149cb", 0x43}], 0x7, &(0x7f00000014c0)=[@timestamping={{0x10, 0x1, 0x25, 0x3}}], 0x10}}], 0x3, 0x4000) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x733, 0x70bd28, 0x259fdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r6, 0x4c00, r3) 46.481649483s ago: executing program 4 (id=1126): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) syz_open_pts(r1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x2, 0x3, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) userfaultfd(0x80000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(r4, &(0x7f0000000000)='L', 0x1, 0x567) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./proc_dir\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc_dir/acpi/wakeup\x00', 0x0, 0x0) read(r6, &(0x7f0000001140)=""/4096, 0x1000) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 46.258648135s ago: executing program 4 (id=1129): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000142b0000000000000000000000ffffac1414bbfe80f2ffffff000000000000000000aa3a00020000000000000000"], 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x2000413, &(0x7f0000019080)=ANY=[]) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0xfff, {0x7, 0x29, 0xcf940281, 0xa00010, 0x1, 0x3a76, 0x10, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593f16430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccce2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f13132773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde070a004c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912f3fcd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5326a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0xa, {0x8, 0x0, 0x0, {0x4, 0xffffffffffffff9f, 0x10000000000, 0x8, 0x40000000000003, 0xfffffffffffffffe, 0x0, 0x35741061, 0x978, 0xa593e9c1ca988eda, 0xfffffff8, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) listen(0xffffffffffffffff, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="05000000030000000100000003"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f8680000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 46.178106586s ago: executing program 35 (id=1129): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000142b0000000000000000000000ffffac1414bbfe80f2ffffff000000000000000000aa3a00020000000000000000"], 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x2000413, &(0x7f0000019080)=ANY=[]) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0xfff, {0x7, 0x29, 0xcf940281, 0xa00010, 0x1, 0x3a76, 0x10, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0xa, {0x8, 0x0, 0x0, {0x4, 0xffffffffffffff9f, 0x10000000000, 0x8, 0x40000000000003, 0xfffffffffffffffe, 0x0, 0x35741061, 0x978, 0xa593e9c1ca988eda, 0xfffffff8, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) listen(0xffffffffffffffff, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="05000000030000000100000003"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f8680000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.057762245s ago: executing program 7 (id=1580): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r4, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0xff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00', 0x3}, 0x90) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) 3.637234501s ago: executing program 7 (id=1584): socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) memfd_create(&(0x7f0000000440)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR\xab\xddt\x96s8\xf4\x1c\bi\xe4^\xd5\xfd+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\x8c\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x9a\xc7sn\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b^\xb9\x00\x00\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4kej\f\x8f\x9b\\\x16\xb3)\xf2\x97;\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\x01\x01\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05}0\xba\xa9\x13\xc4\xd3\xa9\xb6~\x12\xcf.9\xc0\x1e\xbe\x1a:H\xads\x98\xc1m{1YM{d\xec\xff\xff\x8f\xe7j\x9c\xf9+\xc30\x13}\x9e\xff\x8d\xca\xc8)\xc9h(a\xf33\xe8\x90\x03#\xcb\xfb\x14\xe9\x06\xaaQ\x80\xdax=\xf5t-\x88\x9f\xf7\xeavp\aj\xb3\xba\xf4tP>\xf6o\xf2\xb4\xfb\xa9\xe2\x8d\xdf\t\xe9\xcb\xc2wz\x96\xf3)M\xbf\xa8\xba>\xbf\xfe\x16U,Q\x0e\xef\x81\xd55V\n\x8f\xff\xe8d\xc7w;\x92\x19\v\xc0$u\a\xfa\xa7`\xc1@:W<\x96` \xb9\xa1}\x18\xdf\xfbmY\xd2\xb7p<]\\\xec\x84BC\xde\xf3\xf8\x84\xf3f\x99[\xcbD\x93\xbcFo\xd0\xd7\x86\xf7\x98\x95i7\xef\xbe\xf7]z\x17\xd5\xa2\x17\xb5\xa9\x8enU\x0f\b\xa43\x0f\xd1\xfdb\x1eu\xc4\xe9K\xd6\xdf=\xbbL\x8e\xa4o~_\xd7u\xe7+\x86\xf0\x97\xcd\xaa\xbc\x82\xa5\xe3\xe9\x064]5\xa5@\x1bq\xb9\xee\x81.\x1c*I@\xcf\x8b\xa5\xb5\x97|\x8e=\xdc\x18n\x0fA5\x02\xb9\xf4\xb6\xe27_y\xceU\xb0MDS\xf05\a\xdd\x88lP\x0f\xedG\xff\b\xb4@F#T\x81\x11\xb0a\xfcVkr\xd1\x1b\x1b\a\xe5%/\xc1\xca[\x82\x01[\x11\xc0\xc4\xd7+\xe6<\xcbk\x97\xd1^\xe6\xd3\xbc?H\x03\xb0\xd1\x0f\x13', 0x4) userfaultfd(0x80001) inotify_init1(0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.456667496s ago: executing program 7 (id=1586): rt_tgsigqueueinfo(0x0, 0x0, 0x16, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000200)='ncpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14, 0x800) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="640000001900010000000000000000001d01090050eb84c71be10bcce90011803400f68014004800fe80000000000000000000000000003c1900dd00f8b54f5e41ec3a5a6666466ef0dac8319ca1ce530400000018004c800800c500fd1efa64e9492585efdbfa5883ef8d8c537cf1afa905943ceaa99aa17b8362d5d9bdef8f8fa5ee841b77b16e1c85b875895f004f2626fbff0768894179cc7174c1b7f1e17da39af1214bf67c73b298b2a039bc8705d3bc48a9ba09eef651c698fa938a7ef4", @ANYRES32=0x0, @ANYBLOB], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000370400008000000000e7ff000000", @ANYRES32=r5, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x19, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1d5) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r7 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r7, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xfffffffffffffffc, 0x5, 0x1, 0x2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r9, 0x401, 0x70bd24, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac14, 0xfac0c, 0xfac02]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e044f3d20"], 0x7) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000d80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4080000", @ANYRES16=r6, @ANYBLOB="00022abd7000fcdbdf253900000008000300", @ANYRES32=r10, @ANYBLOB="0c009900070000002e00000074015a800c00038005000700010000007000028005000700010000002400010016012e1b6c162460240536121836126c010c1804306c36480c0224a704010b0b050007000000000024000100061b0232481930056c061205011b300c023601093616301b00051809006c0c3614000300ff00faff0000040000000800010007006c00038041000200464d3d1d39413d5602193c491f2b3e334f01541415193508243736112815381826512828201720000a34212247101639383e4f384146180c38434c01540000000500070001000000050004000000000014000500970f05000500ff01810004007b001500880001801500010004180b06061b090903040209360304056c0000002b000200001144144c0f24385108402154203039243f4e49282e3a080057010b0c492b075436115500012800170001006016601b0218481803000c09441b040524001800140005000500030000000d000200aa00030001001400050003000700faff080006000300ffff010040015a80540003801400030009000010ff0f03000500facc0100704314000300ff030900010000000000ff000000ff0f0500060000000000050006000100000005000400000000000e0002000238454653302f4b534100009c00018017000100694812040930180b061271020b51240116241800050007000000000019000200051932111733314311534f52254c0918323038223000000005000700010000001400030004000700000808000500f7ff050007003500020050054d0e27281a1d1f124a220f2f065510342c3b4913183f230a3f2038134c2c420a1a18343904203d0139094c2d2f530000000005000700020000002800008014000300ff0f00200004040008000080ff7f010405000700000000000500060002000000240002801d0001001209481818068b30186c48180409283602300c362412480916000000a4025a80340003800500060000000000140005003bcf0900030003000800070004000600140005008a060101ea00800003000100f70dd00e54000380050001001b00000005000400000000001400030006000900030000000400030005000101100002004117412f244111541d0d4041050006000000000005000600090000000b0001000016180006301b0030000380050006000000000014000500010008000700070000007e0000800c0c0500040000000000050004000200000060000380240001003b6c03160600180209160c300603031936020302060c6060093009160000090c14000300f7ff5206d5ff0600ff0f0d00070007000500040002000000140005000180800008000500010004006780ff0705000100030000008000018014000500020000000200231a13e9400002000900050006000100000014000300a7000000d500a0077f008d02b4ac050005000700010000001f0001001202601212240b0b04242424241202361b24bf36166c6c0c600b16000500070001000000050007000000000014000500000001000500090007009b0508001fcf34000280140003000400feff790201800900ad00204b00041400050001000600060009000d000600ff7f0800050007000100000030000280050004000200000014000500ff078000caac10000800070006000000050006000000000005000700020000001000018009000200220253443a00000094000380140003000b00030901000200000409000100040031000200174810042b320141464e29030606344a37033020344c271e0024111f220b4e034c1301552f3652455014004c26000000050006000100000005000600010000000c000100301b120560360c06050006000200000024000200212e114b462944332f4c4f3f161e0d1f0e2749173a5120430643371051d0015a803c0001800500040002000000140003007f008805020008000c0008000600f3ae05000600000000000c0001000c1b3604066c0b0b05000600000000007400018005000700020000000a0001000118365e01050000270002001c42171643092a2814482f334c0e170851381a4c0e31512304181448280c0103111d1100050006000000000022000200353d51290333394f522b1e2b2828400e324642014333231249201b33403a000005000700010000000c00038005000600010000003400038014000300020008000800070000fc0f00ff7f070005000600010000001400030009000100b80005000500ff000000000034000180050007000200000014000300f6ffe9ff05000100380eebdb0900ff7f140005006e0cfcff0000000000040000000004000c00018005000700020000003c0000801400050000020400090003000e000a0000100200140005000008400000000400070008004207010005000700000000000500060001000000380003800500040000000000050006000200000005000400010000000500060002000000140003000300100080000300aa090600ff00090028000180050007000100000014000300ae099ee90000faff8090274603000080050007000000000018005a8014000280050004000100000005000700000000008c015a806800028014000300ff0309000b000500001009000180db021400030000008d000300030004000200ff0109001e000100363004361b6c2448360403031609301b0109121824246c1b6c060000050007000000000014000300090007000100ff030900ff00c70d0200e8000080240002005015320d411f02301e01110b433136070e1d023c113f14433b3854212b4a4a1614000500500007007d0a03000800470f080006000a0002000a2117412f1100001400030009003507471a08000f0007000200040038000200314e3c072013283c46524f4d494e500c4703411915292914462e530627073d404946234a1b430d323c1e2c0d403511311227214051000200302d09362e06460b07040f352a1951024a50454f46551f482b004e195228502b514f481d20403b284029190024474e3b2a41481d0046370353255047090030430d1748103403292f21463c055100000018000280140003000100090005001290060004001aec0300200002800500060001000000140005006d017d08810000000e000600fcff0300000000"], 0x8f4}, 0x1, 0x0, 0x0, 0xc080}, 0x40c0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) 3.381901165s ago: executing program 7 (id=1587): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x5}}, 0x0}}], 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$unix(0x1, 0x2, 0x0) bind$bt_hci(r6, 0x0, 0x0) write$bt_hci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0001000200"], 0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x5, 0x5, 0x104a}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/668], 0x29c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000014) 3.241950596s ago: executing program 7 (id=1590): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002ac0)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000002bc0)=0xe4) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002c00)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x1, 0x6, 0x59b8, 0x700, 0x200, {0x4, 0x5df, 0x5, 0x0, 0x4, 0x4, 0x3, 0x5, 0x7, 0x8000, 0x5, r0, 0xee00, 0x453, 0x6}}, {0x0, 0x16}}}, 0xa0) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000100)={0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r3 = userfaultfd(0x80801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlock2(&(0x7f0000f3e000/0x3000)=nil, 0x3000, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x81) fchmodat(r4, &(0x7f0000000240)='./file0\x00', 0x9d) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) munmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x1e, 0x0, &(0x7f0000000100)) readv(r5, &(0x7f0000000840)=[{&(0x7f0000000280)=""/186, 0xba}, {&(0x7f0000000400)=""/200, 0xc8}, {&(0x7f0000000500)=""/77, 0x4d}, {&(0x7f0000000640)=""/180, 0xb4}, {&(0x7f0000000700)=""/21, 0x15}, {&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000800)}], 0x7) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000580)=""/174, 0xff56) 3.117721847s ago: executing program 6 (id=1591): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xd1, 0xa0, 0x5e, 0x20, 0xccd, 0x102, 0x890e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x54, 0x40, 0x1, "", [{{0x9, 0x4, 0xbc, 0x80, 0x0, 0xc, 0xf1, 0xc7, 0x7f}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='tahvo 2', 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x12, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r4, r3, 0x26}, 0x10) r5 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) removexattr(0x0, &(0x7f0000000200)=@known='system.posix_acl_default\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRESHEX], 0x270}, 0x1, 0x0, 0x0, 0x24008005}, 0x44) ioctl(r1, 0x8b21, &(0x7f0000000040)) 2.321855119s ago: executing program 7 (id=1600): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@multicast2}, {@in=@empty, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0xfffffffe, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r2) setns(0xc9, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="000008050000010bea"], 0xb) inotify_init1(0x800) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') read$FUSE(r2, &(0x7f0000000800)={0x2020}, 0x2020) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000005cc0)) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000800) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003020000004201"], 0x0, 0x0}, 0x0) r7 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000001800)={0x0, 0x4, 0x3, &(0x7f00000017c0)={0x11, "4ec0191e5bb41b08c198884329f6dd0711762717c44bc7c9b1cc22a10010115d6d"}}) syz_usb_control_io$uac3(r1, 0x0, 0x0) 1.821910115s ago: executing program 0 (id=1603): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x1038, 0x30, 0x1, 0x0, 0x0, {}, [{0x1024, 0x1, [@m_bpf={0x1020, 0x1, 0x0, 0x0, {{0x8}, {0xff8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xff4, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1038}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) write(0xffffffffffffffff, &(0x7f00000004c0)='1', 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='loop\n', 0x5) close(r4) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0) 1.771951931s ago: executing program 3 (id=1605): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x5}}, 0x0}}], 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$unix(0x1, 0x2, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, 0x0, 0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x5, 0x5, 0x104a}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/668], 0x29c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000014) 1.633763251s ago: executing program 6 (id=1606): socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) memfd_create(&(0x7f0000000440)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR\xab\xddt\x96s8\xf4\x1c\bi\xe4^\xd5\xfd+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\x8c\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x9a\xc7sn\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b^\xb9\x00\x00\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4kej\f\x8f\x9b\\\x16\xb3)\xf2\x97;\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\x01\x01\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05}0\xba\xa9\x13\xc4\xd3\xa9\xb6~\x12\xcf.9\xc0\x1e\xbe\x1a:H\xads\x98\xc1m{1YM{d\xec\xff\xff\x8f\xe7j\x9c\xf9+\xc30\x13}\x9e\xff\x8d\xca\xc8)\xc9h(a\xf33\xe8\x90\x03#\xcb\xfb\x14\xe9\x06\xaaQ\x80\xdax=\xf5t-\x88\x9f\xf7\xeavp\aj\xb3\xba\xf4tP>\xf6o\xf2\xb4\xfb\xa9\xe2\x8d\xdf\t\xe9\xcb\xc2wz\x96\xf3)M\xbf\xa8\xba>\xbf\xfe\x16U,Q\x0e\xef\x81\xd55V\n\x8f\xff\xe8d\xc7w;\x92\x19\v\xc0$u\a\xfa\xa7`\xc1@:W<\x96` \xb9\xa1}\x18\xdf\xfbmY\xd2\xb7p<]\\\xec\x84BC\xde\xf3\xf8\x84\xf3f\x99[\xcbD\x93\xbcFo\xd0\xd7\x86\xf7\x98\x95i7\xef\xbe\xf7]z\x17\xd5\xa2\x17\xb5\xa9\x8enU\x0f\b\xa43\x0f\xd1\xfdb\x1eu\xc4\xe9K\xd6\xdf=\xbbL\x8e\xa4o~_\xd7u\xe7+\x86\xf0\x97\xcd\xaa\xbc\x82\xa5\xe3\xe9\x064]5\xa5@\x1bq\xb9\xee\x81.\x1c*I@\xcf\x8b\xa5\xb5\x97|\x8e=\xdc\x18n\x0fA5\x02\xb9\xf4\xb6\xe27_y\xceU\xb0MDS\xf05\a\xdd\x88lP\x0f\xedG\xff\b\xb4@F#T\x81\x11\xb0a\xfcVkr\xd1\x1b\x1b\a\xe5%/\xc1\xca[\x82\x01[\x11\xc0\xc4\xd7+\xe6<\xcbk\x97\xd1^\xe6\xd3\xbc?H\x03\xb0\xd1\x0f\x13', 0x4) userfaultfd(0x80001) inotify_init1(0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.633440686s ago: executing program 3 (id=1607): socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x4008, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100)) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000016c0)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r4, r9, &(0x7f00000005c0)={0x0, 0x1460, 0x10, 0x3, 0xb2}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca33, 0x0, 0x6, 0x273, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e3c, 0x400, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf39, 0x1000, 0x3, 0x102c4, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x1000, 0x2, 0x29f, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x5c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r8, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x0, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)}, 0x40) syz_open_dev$video4linux(&(0x7f0000000040), 0xf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1c3) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 1.449838259s ago: executing program 3 (id=1608): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002ac0)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000002bc0)=0xe4) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002c00)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x1, 0x6, 0x59b8, 0x700, 0x200, {0x4, 0x5df, 0x5, 0x0, 0x4, 0x4, 0x3, 0x5, 0x7, 0x8000, 0x5, r0, 0xee00, 0x453, 0x6}}, {0x0, 0x16}}}, 0xa0) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000100)={0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r3 = userfaultfd(0x80801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlock2(&(0x7f0000f3e000/0x3000)=nil, 0x3000, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x81) fchmodat(r4, &(0x7f0000000240)='./file0\x00', 0x9d) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) munmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x1e, 0x0, &(0x7f0000000100)) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000580)=""/174, 0xff56) 1.276276299s ago: executing program 6 (id=1609): r0 = msgget$private(0x0, 0x184) msgsnd(r0, &(0x7f0000002900)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) timer_create(0xb, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x2000) 1.264663887s ago: executing program 0 (id=1610): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@fwd={0x8}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x1d, 0x0, 0x6c, 0x6}]}, {0x0, [0x61]}}, &(0x7f0000000180)=""/18, 0x37, 0x12, 0x1, 0x3, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x7, 0x0, 0x0, 0x40e00, 0x34, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000280)=ANY=[], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0x72c7) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x10, 0x0, 0x10000000001780}, {0x10, 0x0, 0x8}]}) iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r8 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8]) clock_gettime(0x5, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}, {r9, r10+10000000}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r12 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r12, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1) 1.161610176s ago: executing program 6 (id=1611): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x17, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x200}, 0x1c) listen(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080045f40028006900000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cb7000090780000"], 0x0) 1.160917201s ago: executing program 6 (id=1612): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r1, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000019080)={'syz', 0x3}, &(0x7f00000190c0)='):-+\x00', 0xfffffffffffffffb) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000019180)) socket(0x2, 0xa, 0x0) 571.699095ms ago: executing program 3 (id=1613): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)) ioctl(r1, 0x40140921, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x59) ioctl(r1, 0x80480911, &(0x7f0000000420)="0100000001000000010000000100000006000000") ioctl(r1, 0x400c0930, &(0x7f0000000500)='\x00'/12) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0xfcf9, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0xf3d378653a9c3a7e, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl(r1, 0x40140921, &(0x7f0000000440)="020000000100000002000000ffffffff00000000") r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) close(r3) pwrite64(r1, &(0x7f00000006c0)="828a3525735c0df54b8bb78f81a5d81832b8a7697f5d75e4c0c5af242939136913715910e220ba67a489e41befe536d76da41ededd5f74ebac496d03322ff9751615fd6950ca7799e4aa040000000000000049f0c56eb16f3835d259d9ee8786d8254dae286fd2fbc9464dd726d0611feb21bd1c6faf6163966ee666a38becab971b7cefe444ca15d6b96917c60e7febb94de8da402651b097d85e9eaafeb11daea9395ed67e0b6ba1bf1c41f0471de83f4074b48717966f9b408a02482a815594022b34", 0xc4, 0x0) 571.418905ms ago: executing program 6 (id=1614): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xd1, 0xa0, 0x5e, 0x20, 0xccd, 0x102, 0x890e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x54, 0x40, 0x1, "", [{{0x9, 0x4, 0xbc, 0x80, 0x0, 0xc, 0xf1, 0xc7, 0x7f}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='tahvo 2', 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x12, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r4, r3, 0x26}, 0x10) r5 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) removexattr(0x0, &(0x7f0000000200)=@known='system.posix_acl_default\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRESHEX], 0x270}, 0x1, 0x0, 0x0, 0x24008005}, 0x44) ioctl(r1, 0x8b21, &(0x7f0000000040)) 571.25842ms ago: executing program 3 (id=1615): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x5}}, 0x0}}], 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$unix(0x1, 0x2, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, 0x0, 0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x5, 0x5, 0x104a}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/668], 0x29c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000014) 416.463609ms ago: executing program 3 (id=1616): bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x4102}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x14, 0x30, 0x300, 0x70bd27, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x2400c097}, 0x40080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x702) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f00000004c0), 0x0, 0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002100)={r4, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) read(r2, &(0x7f00000000c0)=""/108, 0x6c) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x12004, 0x1f1) r5 = socket(0x2b, 0x1, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, 0x0, 0x18) syslog(0x4, &(0x7f00000001c0)=""/90, 0x5a) r6 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000001080)={0x20000009}) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) 282.081598ms ago: executing program 0 (id=1617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 69.740268ms ago: executing program 0 (id=1618): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000003c0)={0x0, 0x0, 0x2c, 0x7, 0x102}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) (fail_nth: 3) 190.166µs ago: executing program 0 (id=1619): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fffff7090000000000000000850000002c000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x100cd2, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000001380)=ANY=[]) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') linkat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00', 0x400) read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020) r3 = userfaultfd(0x801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000fa0000000000000000000000007919b000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x4c) 0s ago: executing program 0 (id=1620): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r2 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) r3 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) ppoll(&(0x7f00000001c0)=[{r3, 0x8a6b6feb38288eb0}], 0x1, &(0x7f0000000240), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x1c, 0x6, 0x0, 0x0, @str='\x00\x13\\\x17\xc7\xbb\xd6\xd7\x9e\xe7qm(\xfb\x18\xd8\xcf\x91\x9cq\x86\xf5\x02\x00'}]}, @nested={0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000580)=""/191, &(0x7f0000000480)=0xbf) futimesat(r0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)={{0x0, 0x2710}}) write(r0, &(0x7f00000001a0)='1', 0x1) kernel console output (not intermixed with test programs): ip=0xf70aefec code=0x7ffc0000 [ 206.282066][ T42] audit: type=1326 audit(1788170586.456:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.3.1294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 206.289701][ T42] audit: type=1326 audit(1788170586.456:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.3.1294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 206.296380][ T42] audit: type=1326 audit(1788170586.456:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.3.1294" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 206.303132][ T42] audit: type=1326 audit(1788170586.456:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.3.1294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 206.309937][ T42] audit: type=1326 audit(1788170586.456:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.3.1294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 206.317308][ T42] audit: type=1326 audit(1788170586.456:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.3.1294" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 206.414123][ T948] dvb-usb: bulk message failed: -22 (3/0) [ 206.416150][ T948] dw2102: command 0x0e transfer failed. [ 206.418013][ T948] dvb-usb: bulk message failed: -22 (3/0) [ 206.419878][ T948] dw2102: command 0x0e transfer failed. [ 206.421700][ T948] dvb-usb: bulk message failed: -22 (1/0) [ 206.423597][ T948] dw2102: command 0x51 transfer failed. [ 206.425565][T10428] dvb-usb: bulk message failed: -22 (5/0) [ 206.428830][T10428] dw2102: i2c transfer failed. [ 206.432084][T10428] retu-mfd 2-0002: Tahvo v0.1 found [ 206.435739][T10428] dvb-usb: bulk message failed: -22 (6/0) [ 206.439615][T10428] dw2102: i2c transfer failed. [ 206.443264][T10428] dvb-usb: bulk message failed: -22 (5/0) [ 206.446180][ T948] DVB: Unable to find symbol ds3000_attach() [ 206.448523][ T948] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 206.455618][T10428] dw2102: i2c transfer failed. [ 206.459480][T10428] genirq: Flags mismatch irq 0. 00002000 (TAHVO) vs. 00215a00 (timer) [ 206.462365][T10428] retu-mfd 2-0002: Failed to request IRQ 0 for TAHVO: -16 [ 206.469514][T10428] retu-mfd 2-0002: probe with driver retu-mfd failed with error -16 [ 206.474751][T10428] i2c i2c-2: new_device: Instantiated device tahvo at 0x02 [ 206.485204][ T6998] tipc: Node number set to 754358887 [ 206.514064][ T948] rc_core: IR keymap rc-su3000 not found [ 206.515902][ T948] Registered IR keymap rc-empty [ 206.518182][ T948] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 206.523857][ T948] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input27 [ 206.529591][ T948] dvb-usb: schedule remote query interval to 150 msecs. [ 206.531820][ T948] dw2102: su3000_power_ctrl: 0, initialized 1 [ 206.533690][ T948] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 206.538061][ T948] usb 12-1: USB disconnect, device number 5 [ 206.559419][ T948] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 206.875257][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1297'. [ 206.932951][T10485] comedi comedi2: mpc624: I/O base address not correctly aligned [ 207.026226][T10489] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1300'. [ 207.056820][T10499] FAULT_INJECTION: forcing a failure. [ 207.056820][T10499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.060885][T10499] CPU: 0 UID: 0 PID: 10499 Comm: syz.7.1302 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.060909][T10499] Tainted: [L]=SOFTLOCKUP [ 207.060913][T10499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.060922][T10499] Call Trace: [ 207.060928][T10499] [ 207.060936][T10499] dump_stack_lvl+0x100/0x190 [ 207.060963][T10499] should_fail_ex.cold+0x5/0xa [ 207.060986][T10499] strncpy_from_user+0x3b/0x2d0 [ 207.061013][T10499] do_getname+0x78/0x390 [ 207.061034][T10499] user_path_at+0x26/0x60 [ 207.061061][T10499] __ia32_sys_mount+0x1fb/0x310 [ 207.061082][T10499] ? __pfx___ia32_sys_mount+0x10/0x10 [ 207.061100][T10499] ? ksys_write+0x1ac/0x250 [ 207.061130][T10499] ? __pfx_ksys_write+0x10/0x10 [ 207.061160][T10499] __do_fast_syscall_32+0x13a/0x8b0 [ 207.061182][T10499] ? lockdep_hardirqs_on+0x7d/0x110 [ 207.061207][T10499] do_fast_syscall_32+0x32/0x70 [ 207.061232][T10499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.061253][T10499] RIP: 0023:0xf702efec [ 207.061274][T10499] Code: Unable to access opcode bytes at 0xf702efc2. [ 207.061282][T10499] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 207.061299][T10499] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 207.061311][T10499] RDX: 0000000080000480 RSI: 0000000000000084 RDI: 0000000080000180 [ 207.061320][T10499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.061329][T10499] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 207.061341][T10499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.061363][T10499] [ 207.604230][ T5809] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 207.702965][T10516] FAULT_INJECTION: forcing a failure. [ 207.702965][T10516] name failslab, interval 1, probability 0, space 0, times 0 [ 207.708378][T10516] CPU: 3 UID: 0 PID: 10516 Comm: syz.0.1310 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.708403][T10516] Tainted: [L]=SOFTLOCKUP [ 207.708409][T10516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.708418][T10516] Call Trace: [ 207.708462][T10516] [ 207.708468][T10516] dump_stack_lvl+0x100/0x190 [ 207.708543][T10516] should_fail_ex.cold+0x5/0xa [ 207.708563][T10516] should_failslab+0xc2/0x120 [ 207.708604][T10516] __kmalloc_node_noprof+0xff/0x880 [ 207.708628][T10516] ? __get_vm_area_node+0x1ff/0x350 [ 207.708644][T10516] ? __get_vm_area_node+0x22b/0x350 [ 207.708660][T10516] ? __vmalloc_node_range_noprof+0x3f3/0x1460 [ 207.708682][T10516] __vmalloc_node_range_noprof+0x3f3/0x1460 [ 207.708708][T10516] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 207.708730][T10516] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 207.708749][T10516] ? __lock_acquire+0x4c5/0x1ec0 [ 207.708773][T10516] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 207.708790][T10516] __vmalloc_node_noprof+0xad/0xf0 [ 207.708808][T10516] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 207.708828][T10516] __vmalloc_noprof+0xa3/0x120 [ 207.708846][T10516] ? __pfx___vmalloc_noprof+0x10/0x10 [ 207.708865][T10516] ? rcu_is_watching+0x13/0xc0 [ 207.708888][T10516] ? apparmor_capable+0x1d7/0x4d0 [ 207.708912][T10516] bpf_prog_alloc_no_stats+0x58/0x690 [ 207.708929][T10516] ? security_capable+0x80/0x260 [ 207.708951][T10516] bpf_prog_alloc+0x3b/0x200 [ 207.708967][T10516] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 207.708987][T10516] bpf_prog_load+0x49e/0x2a80 [ 207.709009][T10516] ? __lock_acquire+0x4c5/0x1ec0 [ 207.709027][T10516] ? __pfx_bpf_prog_load+0x10/0x10 [ 207.709063][T10516] __sys_bpf+0x1f46/0x4a30 [ 207.709108][T10516] ? __pfx___sys_bpf+0x10/0x10 [ 207.709132][T10516] ? find_held_lock+0x2b/0x80 [ 207.709146][T10516] ? get_pid_task+0xfc/0x250 [ 207.709169][T10516] ? get_pid_task+0xfc/0x250 [ 207.709196][T10516] ? proc_fail_nth_write+0x9f/0x220 [ 207.709219][T10516] ? find_held_lock+0x2b/0x80 [ 207.709237][T10516] ? rcu_read_lock_any_held+0x6a/0x90 [ 207.709253][T10516] ? find_held_lock+0x2b/0x80 [ 207.709266][T10516] ? ksys_write+0x190/0x250 [ 207.709287][T10516] ? ksys_write+0x190/0x250 [ 207.709323][T10516] ? fput+0x7c/0x100 [ 207.709341][T10516] ? __ia32_sys_bpf+0xcc/0x170 [ 207.709363][T10516] __ia32_sys_bpf+0xcc/0x170 [ 207.709386][T10516] ? __do_fast_syscall_32+0xb3/0x8b0 [ 207.709433][T10516] __do_fast_syscall_32+0x13a/0x8b0 [ 207.709452][T10516] ? lockdep_hardirqs_on+0x7d/0x110 [ 207.709473][T10516] do_fast_syscall_32+0x32/0x70 [ 207.709493][T10516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.709513][T10516] RIP: 0023:0xf709efec [ 207.709536][T10516] Code: Unable to access opcode bytes at 0xf709efc2. [ 207.709564][T10516] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 207.709580][T10516] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 207.709591][T10516] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.709600][T10516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.709609][T10516] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 207.709618][T10516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.709638][T10516] [ 207.709878][T10516] syz.0.1310: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 207.829201][T10516] CPU: 3 UID: 0 PID: 10516 Comm: syz.0.1310 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.829217][T10516] Tainted: [L]=SOFTLOCKUP [ 207.829221][T10516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.829227][T10516] Call Trace: [ 207.829231][T10516] [ 207.829235][T10516] dump_stack_lvl+0x100/0x190 [ 207.829253][T10516] warn_alloc.cold+0x9e/0xb2 [ 207.829265][T10516] ? __pfx_warn_alloc+0x10/0x10 [ 207.829279][T10516] ? dump_stack_lvl+0x17c/0x190 [ 207.829293][T10516] ? rcu_is_watching+0x13/0xc0 [ 207.829309][T10516] ? __kasan_kmalloc+0x8a/0xb0 [ 207.829320][T10516] ? __kmalloc_node_noprof+0x360/0x880 [ 207.829335][T10516] ? __get_vm_area_node+0x1ff/0x350 [ 207.829346][T10516] ? __get_vm_area_node+0x22b/0x350 [ 207.829356][T10516] ? __vmalloc_node_range_noprof+0x3f3/0x1460 [ 207.829371][T10516] __vmalloc_node_range_noprof+0x113d/0x1460 [ 207.829389][T10516] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 207.829404][T10516] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 207.829416][T10516] ? __lock_acquire+0x4c5/0x1ec0 [ 207.829432][T10516] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 207.829443][T10516] __vmalloc_node_noprof+0xad/0xf0 [ 207.829455][T10516] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 207.829469][T10516] __vmalloc_noprof+0xa3/0x120 [ 207.829480][T10516] ? __pfx___vmalloc_noprof+0x10/0x10 [ 207.829494][T10516] ? rcu_is_watching+0x13/0xc0 [ 207.829509][T10516] ? apparmor_capable+0x1d7/0x4d0 [ 207.829531][T10516] bpf_prog_alloc_no_stats+0x58/0x690 [ 207.829543][T10516] ? security_capable+0x80/0x260 [ 207.829558][T10516] bpf_prog_alloc+0x3b/0x200 [ 207.829569][T10516] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 207.829582][T10516] bpf_prog_load+0x49e/0x2a80 [ 207.829596][T10516] ? __lock_acquire+0x4c5/0x1ec0 [ 207.829609][T10516] ? __pfx_bpf_prog_load+0x10/0x10 [ 207.829632][T10516] __sys_bpf+0x1f46/0x4a30 [ 207.829651][T10516] ? __pfx___sys_bpf+0x10/0x10 [ 207.829667][T10516] ? find_held_lock+0x2b/0x80 [ 207.829676][T10516] ? get_pid_task+0xfc/0x250 [ 207.829691][T10516] ? get_pid_task+0xfc/0x250 [ 207.829711][T10516] ? proc_fail_nth_write+0x9f/0x220 [ 207.829725][T10516] ? find_held_lock+0x2b/0x80 [ 207.829737][T10516] ? rcu_read_lock_any_held+0x6a/0x90 [ 207.829747][T10516] ? find_held_lock+0x2b/0x80 [ 207.829756][T10516] ? ksys_write+0x190/0x250 [ 207.829770][T10516] ? ksys_write+0x190/0x250 [ 207.829794][T10516] ? fput+0x7c/0x100 [ 207.829805][T10516] ? __ia32_sys_bpf+0xcc/0x170 [ 207.829821][T10516] __ia32_sys_bpf+0xcc/0x170 [ 207.829837][T10516] ? __do_fast_syscall_32+0xb3/0x8b0 [ 207.829853][T10516] __do_fast_syscall_32+0x13a/0x8b0 [ 207.829866][T10516] ? lockdep_hardirqs_on+0x7d/0x110 [ 207.829880][T10516] do_fast_syscall_32+0x32/0x70 [ 207.829894][T10516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.829907][T10516] RIP: 0023:0xf709efec [ 207.829920][T10516] Code: Unable to access opcode bytes at 0xf709efc2. [ 207.829925][T10516] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 207.829935][T10516] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 207.829941][T10516] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.829947][T10516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.829953][T10516] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 207.829959][T10516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.829971][T10516] [ 207.829975][T10516] Mem-Info: [ 207.933427][ T5809] usb 12-1: Using ep0 maxpacket: 32 [ 207.934089][T10516] active_anon:10144 inactive_anon:347 isolated_anon:0 [ 207.934089][T10516] active_file:91 inactive_file:30019 isolated_file:0 [ 207.934089][T10516] unevictable:1000 dirty:290 writeback:0 [ 207.934089][T10516] slab_reclaimable:8476 slab_unreclaimable:61179 [ 207.934089][T10516] mapped:27233 shmem:4346 pagetables:1692 [ 207.934089][T10516] sec_pagetables:299 bounce:0 [ 207.934089][T10516] kernel_misc_reclaimable:0 [ 207.934089][T10516] free:49150 free_pcp:15395 free_cma:0 [ 207.936662][ T5809] usb 12-1: unable to get BOS descriptor or descriptor too short [ 207.953204][T10516] Node 0 active_anon:124kB inactive_anon:36kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9696kB pagetables:1840kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 207.955368][ T5809] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 207.956515][ T5809] usb 12-1: config 8 has an invalid interface number: 188 but max is 0 [ 207.970538][ T5809] usb 12-1: config 8 has no interface number 0 [ 207.972439][ T5809] usb 12-1: config 8 interface 188 has no altsetting 0 [ 207.977294][ T5809] usb 12-1: string descriptor 0 read error: -22 [ 207.979286][ T5809] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.981700][T10516] Node 1 active_anon:40752kB inactive_anon:1352kB active_file:364kB inactive_file:120072kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:109096kB dirty:1160kB writeback:0kB shmem:17504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5388kB pagetables:4972kB sec_pagetables:88kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 207.981735][T10516] Node 0 DMA free:2012kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:612kB local_pcp:188kB free_cma:0kB [ 207.996581][ T5809] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 208.004579][ T5809] dw2102: su3000_power_ctrl: 1, initialized 0 [ 208.006494][ T5809] dvb-usb: bulk message failed: -22 (2/0) [ 208.009632][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 208.013003][ T5809] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 208.014573][T10516] lowmem_reserve[]: 0 278 278 278 278 [ 208.016022][ T5809] usb 12-1: media controller created [ 208.019460][T10516] Node 0 [ 208.019715][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 208.019727][T10516] DMA32 free:15684kB boost:0kB min:12636kB low:15792kB high:18948kB reserved_highatomic:0KB free_highatomic:0KB active_anon:120kB inactive_anon:32kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:28kB present:1032196kB managed:285060kB mlocked:0kB bounce:0kB free_pcp:8580kB local_pcp:2044kB free_cma:0kB [ 208.020898][ T5809] dw2102: i2c transfer failed. [ 208.023317][T10516] lowmem_reserve[]: [ 208.032469][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 208.034461][T10516] 0 [ 208.035235][ T5809] dw2102: i2c transfer failed. [ 208.036927][T10516] 0 [ 208.037689][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 208.039968][T10516] 0 [ 208.040224][ T5809] dw2102: i2c transfer failed. [ 208.040234][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 208.045417][T10516] 0 [ 208.046122][ T5809] dw2102: i2c transfer failed. [ 208.046131][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 208.046139][ T5809] dw2102: i2c transfer failed. [ 208.046145][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 208.048929][T10516] 0 [ 208.050245][ T5809] dw2102: i2c transfer failed. [ 208.050252][ T5809] dvb-usb: MAC address: 02:02:02:02:02:02 [ 208.054772][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.062148][T10516] [ 208.064147][T10516] Node 1 DMA32 free:180836kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38724kB inactive_anon:1352kB active_file:364kB inactive_file:120072kB unevictable:4000kB writepending:1180kB zspages:3004kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:49388kB local_pcp:13656kB free_cma:0kB [ 208.066416][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 208.076110][ T5809] dw2102: command 0x0e transfer failed. [ 208.077810][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 208.079847][ T5809] dw2102: command 0x0e transfer failed. [ 208.087277][T10516] lowmem_reserve[]: 0 0 0 0 0 [ 208.088632][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1314'. [ 208.089095][T10516] Node 0 DMA: 21*4kB (UM) 15*8kB (UM) 23*16kB (UM) 1*32kB (U) 2*64kB (M) 2*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2012kB [ 208.108285][T10516] Node 0 DMA32: 153*4kB (UE) 152*8kB (UME) 68*16kB (UME) 27*32kB (ME) 24*64kB (UME) 19*128kB (UME) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (M) 0*4096kB = 15684kB [ 208.120615][T10516] Node 1 DMA32: 555*4kB (UME) 314*8kB (UME) 93*16kB (UME) 73*32kB (UME) 145*64kB (ME) 72*128kB (UME) 59*256kB (ME) 42*512kB (UME) 12*1024kB (UME) 9*2048kB (UME) 21*4096kB (UM) = 180396kB [ 208.133430][T10516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.140494][T10516] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.147426][T10516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.154432][T10516] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.162028][T10516] 33800 total pagecache pages [ 208.165029][T10516] 541 pages in swap cache [ 208.168272][T10516] Free swap = 115040kB [ 208.171925][T10516] Total swap = 124996kB [ 208.174038][T10516] 524155 pages RAM [ 208.175298][T10516] 0 pages HighMem/MovableOnly [ 208.176904][T10516] 211998 pages reserved [ 208.178295][T10516] 0 pages cma reserved [ 208.342716][T10536] fuse: Bad value for 'user_id' [ 208.344334][T10536] fuse: Bad value for 'user_id' [ 208.384089][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 208.385914][ T5809] dw2102: command 0x0e transfer failed. [ 208.387710][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 208.389484][ T5809] dw2102: command 0x0e transfer failed. [ 208.392037][ T5809] dvb-usb: bulk message failed: -22 (1/0) [ 208.401609][ T5809] dw2102: command 0x51 transfer failed. [ 208.406811][T10514] dvb-usb: bulk message failed: -22 (5/0) [ 208.409361][T10514] dw2102: i2c transfer failed. [ 208.411006][T10514] retu-mfd 2-0002: Tahvo v0.1 found [ 208.412729][T10514] dvb-usb: bulk message failed: -22 (6/0) [ 208.414922][T10514] dw2102: i2c transfer failed. [ 208.427206][T10514] dvb-usb: bulk message failed: -22 (5/0) [ 208.429141][ T5809] DVB: Unable to find symbol ds3000_attach() [ 208.431011][ T5809] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 208.433698][T10514] dw2102: i2c transfer failed. [ 208.436931][T10514] genirq: Flags mismatch irq 0. 00002000 (TAHVO) vs. 00215a00 (timer) [ 208.440476][T10514] retu-mfd 2-0002: Failed to request IRQ 0 for TAHVO: -16 [ 208.443923][T10543] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 208.448713][T10514] retu-mfd 2-0002: probe with driver retu-mfd failed with error -16 [ 208.455760][T10514] i2c i2c-2: new_device: Instantiated device tahvo at 0x02 [ 208.483639][T10549] binder: 10546:10549 ioctl c0306201 0 returned -14 [ 208.484061][ T5809] rc_core: IR keymap rc-su3000 not found [ 208.489266][ T5809] Registered IR keymap rc-empty [ 208.492801][ T5809] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 208.499923][ T5809] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input28 [ 208.509280][ T5809] dvb-usb: schedule remote query interval to 150 msecs. [ 208.513756][T10552] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 208.515718][ T5809] dw2102: su3000_power_ctrl: 0, initialized 1 [ 208.523095][ T5809] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 208.529961][ T5809] usb 12-1: USB disconnect, device number 6 [ 208.580048][ T5809] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 208.633098][T10560] binder: 10559:10560 unknown command 4294967295 [ 208.636867][T10560] binder: 10559:10560 ioctl c0306201 80000640 returned -22 [ 208.789031][T10563] 9p: Bad value for 'wfdno' [ 209.209802][T10575] binder: 10572:10575 ioctl 4018620d 0 returned -22 [ 209.218955][T10573] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 209.270941][T10578] CIFS: Attempting to mount //127.0.0.1/share [ 209.300373][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 209.300383][ T42] audit: type=1326 audit(1788170589.486:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 209.309980][ T42] audit: type=1326 audit(1788170589.496:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 209.316694][ T42] audit: type=1326 audit(1788170589.496:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf709efec code=0x7ffc0000 [ 209.428996][ T42] audit: type=1326 audit(1788170589.616:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709f008 code=0x7ffc0000 [ 209.436560][ T42] audit: type=1326 audit(1788170589.616:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 209.446845][ T42] audit: type=1326 audit(1788170589.616:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 209.774045][ T5879] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 209.924094][ T5879] usb 11-1: Using ep0 maxpacket: 32 [ 209.928200][ T5879] usb 11-1: unable to get BOS descriptor or descriptor too short [ 209.931374][ T5879] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 209.936407][ T5879] usb 11-1: config 8 has an invalid interface number: 188 but max is 0 [ 209.939863][ T5879] usb 11-1: config 8 has no interface number 0 [ 209.942469][ T5879] usb 11-1: config 8 interface 188 has no altsetting 0 [ 209.947803][ T5879] usb 11-1: string descriptor 0 read error: -22 [ 209.949908][ T5879] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.958274][ T5879] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 209.964903][ T5879] dw2102: su3000_power_ctrl: 1, initialized 0 [ 209.967815][ T5879] dvb-usb: bulk message failed: -22 (2/0) [ 209.975811][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 209.983595][ T5879] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 209.987513][ T5879] usb 11-1: media controller created [ 209.989863][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 209.992348][ T5879] dw2102: i2c transfer failed. [ 209.996491][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 209.998952][ T5879] dw2102: i2c transfer failed. [ 210.001002][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 210.003393][ T5879] dw2102: i2c transfer failed. [ 210.006338][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 210.008718][ T5879] dw2102: i2c transfer failed. [ 210.010775][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 210.013246][ T5879] dw2102: i2c transfer failed. [ 210.016636][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 210.019145][ T5879] dw2102: i2c transfer failed. [ 210.021223][ T5879] dvb-usb: MAC address: 02:02:02:02:02:02 [ 210.033131][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.052131][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 210.054686][ T5879] dw2102: command 0x0e transfer failed. [ 210.056669][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 210.059167][ T5879] dw2102: command 0x0e transfer failed. [ 210.099979][T10578] CIFS: VFS: cifs_mount failed w/return code = -512 [ 210.268099][T10599] FAULT_INJECTION: forcing a failure. [ 210.268099][T10599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.280796][T10599] CPU: 0 UID: 0 PID: 10599 Comm: syz.7.1336 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.280825][T10599] Tainted: [L]=SOFTLOCKUP [ 210.280831][T10599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.280840][T10599] Call Trace: [ 210.280846][T10599] [ 210.280853][T10599] dump_stack_lvl+0x100/0x190 [ 210.280882][T10599] should_fail_ex.cold+0x5/0xa [ 210.280906][T10599] _copy_from_user+0x2e/0xd0 [ 210.280929][T10599] ethtool_set_ringparam+0x1c6/0x400 [ 210.280991][T10599] ? rpm_resume+0x7eb/0x1320 [ 210.281012][T10599] ? __pfx_ethtool_set_ringparam+0x10/0x10 [ 210.281041][T10599] ? find_held_lock+0x2b/0x80 [ 210.281064][T10599] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 210.281084][T10599] ? lockdep_hardirqs_on+0x7d/0x110 [ 210.281105][T10599] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 210.281128][T10599] dev_ethtool+0x2a8c/0x6bb0 [ 210.281154][T10599] ? tomoyo_path_number_perm+0x46d/0x580 [ 210.281190][T10599] ? __pfx_dev_ethtool+0x10/0x10 [ 210.281211][T10599] ? tomoyo_path_number_perm+0x46d/0x580 [ 210.281237][T10599] ? kasan_save_stack+0x3f/0x50 [ 210.281254][T10599] ? kasan_save_track+0x14/0x30 [ 210.281269][T10599] ? __kasan_slab_free+0x5f/0x80 [ 210.281285][T10599] ? kfree+0x22b/0x6d0 [ 210.281305][T10599] ? tomoyo_path_number_perm+0x46d/0x580 [ 210.281331][T10599] ? security_file_ioctl_compat+0xd3/0x230 [ 210.281358][T10599] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 210.281381][T10599] ? __do_fast_syscall_32+0x13a/0x8b0 [ 210.281402][T10599] ? do_fast_syscall_32+0x32/0x70 [ 210.281424][T10599] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.281478][T10599] ? kasan_quarantine_put+0x104/0x240 [ 210.281503][T10599] ? lockdep_hardirqs_on+0x7d/0x110 [ 210.281529][T10599] ? __lock_acquire+0x4c5/0x1ec0 [ 210.281553][T10599] ? tomoyo_path_number_perm+0x188/0x580 [ 210.281589][T10599] ? find_held_lock+0x2b/0x80 [ 210.281604][T10599] ? dev_load+0x8e/0x240 [ 210.281623][T10599] ? dev_load+0x8e/0x240 [ 210.281649][T10599] dev_ioctl+0x63b/0x1070 [ 210.281677][T10599] compat_sock_ioctl+0x4f9/0x760 [ 210.281708][T10599] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 210.281733][T10599] ? hook_file_ioctl_common+0x140/0x440 [ 210.281766][T10599] ? __fget_files+0x21f/0x3d0 [ 210.281796][T10599] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 210.281824][T10599] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 210.281866][T10599] __do_fast_syscall_32+0x13a/0x8b0 [ 210.281890][T10599] ? lockdep_hardirqs_on+0x7d/0x110 [ 210.281914][T10599] do_fast_syscall_32+0x32/0x70 [ 210.281938][T10599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.281969][T10599] RIP: 0023:0xf702efec [ 210.281989][T10599] Code: Unable to access opcode bytes at 0xf702efc2. [ 210.281996][T10599] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 210.282014][T10599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 210.282024][T10599] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.282035][T10599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.282044][T10599] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 210.282054][T10599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.282078][T10599] [ 210.364177][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 210.400446][ T5879] dw2102: command 0x0e transfer failed. [ 210.402248][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 210.405441][ T5879] dw2102: command 0x0e transfer failed. [ 210.407283][ T5879] dvb-usb: bulk message failed: -22 (1/0) [ 210.489180][ T5879] dw2102: command 0x51 transfer failed. [ 210.491021][T10587] dvb-usb: bulk message failed: -22 (5/0) [ 210.493547][T10587] dw2102: i2c transfer failed. [ 210.495820][T10587] retu-mfd 2-0002: Tahvo v0.1 found [ 210.498183][T10587] dvb-usb: bulk message failed: -22 (6/0) [ 210.500686][T10587] dw2102: i2c transfer failed. [ 210.503382][T10587] dvb-usb: bulk message failed: -22 (5/0) [ 210.506259][T10587] dw2102: i2c transfer failed. [ 210.508226][ T5879] DVB: Unable to find symbol ds3000_attach() [ 210.508234][ T5879] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 210.514855][T10587] genirq: Flags mismatch irq 0. 00002000 (TAHVO) vs. 00215a00 (timer) [ 210.518571][T10587] retu-mfd 2-0002: Failed to request IRQ 0 for TAHVO: -16 [ 210.522610][T10587] retu-mfd 2-0002: probe with driver retu-mfd failed with error -16 [ 210.526293][T10587] i2c i2c-2: new_device: Instantiated device tahvo at 0x02 [ 210.554127][ T5879] rc_core: IR keymap rc-su3000 not found [ 210.556004][ T5879] Registered IR keymap rc-empty [ 210.564645][ T5879] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 210.572711][ T5879] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input29 [ 210.629444][ T5879] dvb-usb: schedule remote query interval to 150 msecs. [ 210.632568][ T5879] dw2102: su3000_power_ctrl: 0, initialized 1 [ 210.636192][ T5879] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 210.653300][ T5879] usb 11-1: USB disconnect, device number 6 [ 210.771268][ T5879] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 211.034653][T10608] overlayfs: failed to clone upperpath [ 211.069599][T10608] netlink: 'syz.3.1338': attribute type 2 has an invalid length. [ 211.113330][T10613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1340'. [ 211.151928][T10615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1341'. [ 211.154493][T10611] md: array md0 already has disks! [ 211.155242][T10615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1341'. [ 211.285748][T10611] md/raid10:md0: not enough operational mirrors. [ 211.290291][T10611] md: pers->run() failed ... [ 211.325090][T10611] md: could not open device unknown-block(1,2). [ 211.327650][T10611] md: error, md_import_device() returned -16 [ 211.674145][ T9973] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 211.824077][ T9973] usb 12-1: Using ep0 maxpacket: 32 [ 211.831502][ T9973] usb 12-1: unable to get BOS descriptor or descriptor too short [ 211.834680][ T9973] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 211.839037][ T9973] usb 12-1: config 8 has an invalid interface number: 188 but max is 0 [ 211.842014][ T9973] usb 12-1: config 8 has no interface number 0 [ 211.844354][ T9973] usb 12-1: config 8 interface 188 has no altsetting 0 [ 211.849148][ T9973] usb 12-1: string descriptor 0 read error: -22 [ 211.851128][ T9973] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.858475][ T9973] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 211.864776][ T9973] dw2102: su3000_power_ctrl: 1, initialized 0 [ 211.866699][ T9973] dvb-usb: bulk message failed: -22 (2/0) [ 211.872558][ T9973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.876220][ T9973] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 211.878861][ T9973] usb 12-1: media controller created [ 211.880491][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 211.882292][ T9973] dw2102: i2c transfer failed. [ 211.883869][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 211.886277][ T9973] dw2102: i2c transfer failed. [ 211.887813][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 211.889683][ T9973] dw2102: i2c transfer failed. [ 211.891164][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 211.892938][ T9973] dw2102: i2c transfer failed. [ 211.894801][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 211.896573][ T9973] dw2102: i2c transfer failed. [ 211.898104][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 211.899980][ T9973] dw2102: i2c transfer failed. [ 211.901498][ T9973] dvb-usb: MAC address: 02:02:02:02:02:02 [ 211.907969][ T9973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.917923][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 211.919738][ T9973] dw2102: command 0x0e transfer failed. [ 211.921716][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 211.923487][ T9973] dw2102: command 0x0e transfer failed. [ 212.162867][ T42] audit: type=1326 audit(1788170592.346:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10637 comm="syz.3.1349" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x0 [ 212.234149][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 212.235969][ T9973] dw2102: command 0x0e transfer failed. [ 212.237758][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 212.240512][ T9973] dw2102: command 0x0e transfer failed. [ 212.242213][ T9973] dvb-usb: bulk message failed: -22 (1/0) [ 212.243957][ T9973] dw2102: command 0x51 transfer failed. [ 212.245866][T10634] dvb-usb: bulk message failed: -22 (5/0) [ 212.247665][T10634] dw2102: i2c transfer failed. [ 212.249338][T10634] retu-mfd 2-0002: Tahvo v0.1 found [ 212.250993][T10634] dvb-usb: bulk message failed: -22 (6/0) [ 212.252783][T10634] dw2102: i2c transfer failed. [ 212.255687][T10634] dvb-usb: bulk message failed: -22 (5/0) [ 212.257608][T10634] dw2102: i2c transfer failed. [ 212.259496][T10634] genirq: Flags mismatch irq 0. 00002000 (TAHVO) vs. 00215a00 (timer) [ 212.262022][T10634] retu-mfd 2-0002: Failed to request IRQ 0 for TAHVO: -16 [ 212.265466][ T9973] DVB: Unable to find symbol ds3000_attach() [ 212.267366][ T9973] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 212.271675][T10634] retu-mfd 2-0002: probe with driver retu-mfd failed with error -16 [ 212.274652][T10634] i2c i2c-2: new_device: Instantiated device tahvo at 0x02 [ 212.314244][ T9973] rc_core: IR keymap rc-su3000 not found [ 212.316001][ T9973] Registered IR keymap rc-empty [ 212.317979][ T9973] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 212.326212][ T9973] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input30 [ 212.336954][ T9973] dvb-usb: schedule remote query interval to 150 msecs. [ 212.341347][ T9973] dw2102: su3000_power_ctrl: 0, initialized 1 [ 212.343319][ T9973] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 212.352541][ T9973] usb 12-1: USB disconnect, device number 7 [ 212.395850][ T9973] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 212.459170][T10654] FAULT_INJECTION: forcing a failure. [ 212.459170][T10654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.463233][T10654] CPU: 2 UID: 0 PID: 10654 Comm: syz.6.1350 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.463250][T10654] Tainted: [L]=SOFTLOCKUP [ 212.463253][T10654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.463260][T10654] Call Trace: [ 212.463264][T10654] [ 212.463268][T10654] dump_stack_lvl+0x100/0x190 [ 212.463286][T10654] should_fail_ex.cold+0x5/0xa [ 212.463299][T10654] _copy_to_user+0x32/0xd0 [ 212.463314][T10654] bpf_prog_test_run_raw_tp+0x3f0/0x7d0 [ 212.463333][T10654] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 212.463352][T10654] ? fput+0x7c/0x100 [ 212.463362][T10654] ? __bpf_prog_get+0x97/0x290 [ 212.463375][T10654] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 212.463393][T10654] __sys_bpf+0x2265/0x4a30 [ 212.463412][T10654] ? __pfx___sys_bpf+0x10/0x10 [ 212.463429][T10654] ? find_held_lock+0x2b/0x80 [ 212.463438][T10654] ? get_pid_task+0xfc/0x250 [ 212.463454][T10654] ? get_pid_task+0xfc/0x250 [ 212.463473][T10654] ? proc_fail_nth_write+0x9f/0x220 [ 212.463489][T10654] ? find_held_lock+0x2b/0x80 [ 212.463512][T10654] ? rcu_read_lock_any_held+0x6a/0x90 [ 212.463524][T10654] ? find_held_lock+0x2b/0x80 [ 212.463533][T10654] ? ksys_write+0x190/0x250 [ 212.463547][T10654] ? ksys_write+0x190/0x250 [ 212.463576][T10654] ? fput+0x7c/0x100 [ 212.463587][T10654] ? __ia32_sys_bpf+0xcc/0x170 [ 212.463603][T10654] __ia32_sys_bpf+0xcc/0x170 [ 212.463619][T10654] ? __do_fast_syscall_32+0xb3/0x8b0 [ 212.463634][T10654] __do_fast_syscall_32+0x13a/0x8b0 [ 212.463648][T10654] ? lockdep_hardirqs_on+0x7d/0x110 [ 212.463662][T10654] do_fast_syscall_32+0x32/0x70 [ 212.463676][T10654] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.463689][T10654] RIP: 0023:0xf7f64fec [ 212.463702][T10654] Code: Unable to access opcode bytes at 0xf7f64fc2. [ 212.463707][T10654] RSP: 002b:00000000f53e450c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 212.463718][T10654] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000500 [ 212.463724][T10654] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.463730][T10654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.463736][T10654] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 212.463742][T10654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.463755][T10654] [ 212.674397][T10656] md: array md0 already has disks! [ 212.738186][T10656] md/raid10:md0: not enough operational mirrors. [ 212.745610][T10656] md: pers->run() failed ... [ 212.784975][T10656] md: could not open device unknown-block(1,2). [ 212.789259][T10656] md: error, md_import_device() returned -16 [ 212.826688][ T5748] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 212.854648][T10666] netlink: 'syz.0.1356': attribute type 10 has an invalid length. [ 212.858058][T10666] bridge0: port 3(syz_tun) entered disabled state [ 212.860181][T10666] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.862456][T10666] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.873399][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'. [ 212.876511][T10666] syz_tun: left allmulticast mode [ 212.878475][T10666] syz_tun: left promiscuous mode [ 212.880389][T10666] bridge0: port 3(syz_tun) entered disabled state [ 212.883936][T10666] bridge_slave_1: left allmulticast mode [ 212.886253][T10666] bridge_slave_1: left promiscuous mode [ 212.888492][T10666] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.892372][T10666] bridge_slave_0: left allmulticast mode [ 212.894921][T10666] bridge_slave_0: left promiscuous mode [ 212.896805][T10666] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.902783][T10666] bond0: (slave bridge0): Releasing backup interface [ 212.907737][T10666] bridge0 (unregistering): left allmulticast mode [ 213.205114][T10687] md: array md0 already has disks! [ 213.273290][T10687] md/raid10:md0: not enough operational mirrors. [ 213.277849][T10687] md: pers->run() failed ... [ 213.324295][T10687] md: could not open device unknown-block(1,2). [ 213.326297][T10687] md: error, md_import_device() returned -16 [ 213.334942][ T5809] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 213.402372][T10711] webusb: landingPage URL too long [ 213.494070][ T5809] usb 12-1: Using ep0 maxpacket: 32 [ 213.498147][ T5809] usb 12-1: unable to get BOS descriptor or descriptor too short [ 213.500658][ T5809] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 213.504438][ T5809] usb 12-1: config 8 has an invalid interface number: 188 but max is 0 [ 213.507153][ T5809] usb 12-1: config 8 has no interface number 0 [ 213.509174][ T5809] usb 12-1: config 8 interface 188 has no altsetting 0 [ 213.513764][ T5809] usb 12-1: string descriptor 0 read error: -22 [ 213.516168][ T5809] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.527380][ T5809] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 213.534432][ T5809] dw2102: su3000_power_ctrl: 1, initialized 0 [ 213.536375][ T5809] dvb-usb: bulk message failed: -22 (2/0) [ 213.548413][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.551784][ T5809] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 213.554945][ T5809] usb 12-1: media controller created [ 213.556664][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 213.558602][ T5809] dw2102: i2c transfer failed. [ 213.560142][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 213.561997][ T5809] dw2102: i2c transfer failed. [ 213.563731][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 213.566339][ T5809] dw2102: i2c transfer failed. [ 213.567940][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 213.569775][ T5809] dw2102: i2c transfer failed. [ 213.571323][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 213.573165][ T5809] dw2102: i2c transfer failed. [ 213.575106][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 213.576947][ T5809] dw2102: i2c transfer failed. [ 213.578540][ T5809] dvb-usb: MAC address: 02:02:02:02:02:02 [ 213.585648][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.598553][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 213.600577][ T5809] dw2102: command 0x0e transfer failed. [ 213.602360][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 213.604434][ T5809] dw2102: command 0x0e transfer failed. [ 213.777394][T10732] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 213.924165][T10737] md: array md0 already has disks! [ 213.926312][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 213.928237][ T5809] dw2102: command 0x0e transfer failed. [ 213.930057][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 213.931876][ T5809] dw2102: command 0x0e transfer failed. [ 213.934401][ T5809] dvb-usb: bulk message failed: -22 (1/0) [ 213.936218][ T5809] dw2102: command 0x51 transfer failed. [ 213.938367][T10682] dvb-usb: bulk message failed: -22 (5/0) [ 213.940214][T10682] dw2102: i2c transfer failed. [ 213.941791][T10682] retu-mfd 2-0002: Tahvo v0.1 found [ 213.943434][T10682] dvb-usb: bulk message failed: -22 (6/0) [ 213.945680][T10682] dw2102: i2c transfer failed. [ 213.947532][T10682] dvb-usb: bulk message failed: -22 (5/0) [ 213.949616][T10682] dw2102: i2c transfer failed. [ 213.951439][T10682] genirq: Flags mismatch irq 0. 00002000 (TAHVO) vs. 00215a00 (timer) [ 213.954161][T10682] retu-mfd 2-0002: Failed to request IRQ 0 for TAHVO: -16 [ 213.954827][T10737] md/raid10:md0: not enough operational mirrors. [ 213.956527][ T5809] DVB: Unable to find symbol ds3000_attach() [ 213.960463][ T5809] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 213.962972][T10737] md: pers->run() failed ... [ 213.965013][T10682] retu-mfd 2-0002: probe with driver retu-mfd failed with error -16 [ 213.967841][T10682] i2c i2c-2: new_device: Instantiated device tahvo at 0x02 [ 214.004239][ T5809] rc_core: IR keymap rc-su3000 not found [ 214.004391][T10737] md: could not open device unknown-block(1,2). [ 214.005984][ T5809] Registered IR keymap rc-empty [ 214.007740][ T5809] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 214.008575][T10737] md: error, md_import_device() returned -16 [ 214.014531][ T5809] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input31 [ 214.023894][ T5809] dvb-usb: schedule remote query interval to 150 msecs. [ 214.027999][ T5809] dw2102: su3000_power_ctrl: 0, initialized 1 [ 214.029915][ T5809] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 214.036192][ T5809] usb 12-1: USB disconnect, device number 8 [ 214.068285][ T5809] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 214.182471][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'. [ 214.185411][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1381'. [ 214.188231][T10750] netlink: 'syz.0.1381': attribute type 15 has an invalid length. [ 214.282106][T10754] FAULT_INJECTION: forcing a failure. [ 214.282106][T10754] name failslab, interval 1, probability 0, space 0, times 0 [ 214.285981][T10754] CPU: 1 UID: 0 PID: 10754 Comm: syz.0.1383 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.285998][T10754] Tainted: [L]=SOFTLOCKUP [ 214.286002][T10754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.286008][T10754] Call Trace: [ 214.286012][T10754] [ 214.286016][T10754] dump_stack_lvl+0x100/0x190 [ 214.286034][T10754] should_fail_ex.cold+0x5/0xa [ 214.286048][T10754] should_failslab+0xc2/0x120 [ 214.286059][T10754] __kmalloc_noprof+0xfc/0x840 [ 214.286075][T10754] ? rcu_is_watching+0x13/0xc0 [ 214.286091][T10754] ? tomoyo_realpath_from_path+0xb6/0x690 [ 214.286107][T10754] tomoyo_realpath_from_path+0xb6/0x690 [ 214.286122][T10754] tomoyo_path_number_perm+0x23c/0x580 [ 214.286138][T10754] ? tomoyo_path_number_perm+0x22e/0x580 [ 214.286156][T10754] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.286174][T10754] ? get_pid_task+0x106/0x250 [ 214.286202][T10754] ? find_held_lock+0x2b/0x80 [ 214.286212][T10754] ? __fget_files+0x215/0x3d0 [ 214.286227][T10754] ? hook_file_ioctl_common+0x140/0x440 [ 214.286244][T10754] ? __fget_files+0x215/0x3d0 [ 214.286261][T10754] ? __fget_files+0x21f/0x3d0 [ 214.286279][T10754] security_file_ioctl_compat+0xd3/0x230 [ 214.286297][T10754] __ia32_compat_sys_ioctl+0xc2/0x360 [ 214.286313][T10754] __do_fast_syscall_32+0x13a/0x8b0 [ 214.286327][T10754] ? lockdep_hardirqs_on+0x7d/0x110 [ 214.286341][T10754] do_fast_syscall_32+0x32/0x70 [ 214.286355][T10754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.286369][T10754] RIP: 0023:0xf709efec [ 214.286381][T10754] Code: Unable to access opcode bytes at 0xf709efc2. [ 214.286385][T10754] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 214.286396][T10754] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa05 [ 214.286403][T10754] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.286426][T10754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.286432][T10754] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 214.286438][T10754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.286452][T10754] [ 214.286456][T10754] ERROR: Out of memory at tomoyo_realpath_from_path. [ 214.360765][T10758] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 214.437167][T10764] fuse: fd is not a fuse device [ 214.715866][T10784] md: array md0 already has disks! [ 214.772810][T10784] md/raid10:md0: not enough operational mirrors. [ 214.778688][T10784] md: pers->run() failed ... [ 214.815359][T10784] md: could not open device unknown-block(1,2). [ 214.817483][T10784] md: error, md_import_device() returned -16 [ 215.045832][T10792] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 215.076802][T10797] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1399'. [ 215.454657][ T5809] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 215.478438][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1403'. [ 215.624062][ T5809] usb 12-1: Using ep0 maxpacket: 32 [ 215.627480][ T5809] usb 12-1: unable to get BOS descriptor or descriptor too short [ 215.629984][ T5809] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 215.633714][ T5809] usb 12-1: config 8 has an invalid interface number: 188 but max is 0 [ 215.636552][ T5809] usb 12-1: config 8 has no interface number 0 [ 215.641340][ T5809] usb 12-1: config 8 interface 188 has no altsetting 0 [ 215.645984][ T5809] usb 12-1: string descriptor 0 read error: -22 [ 215.648035][ T5809] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.655043][ T5809] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 215.657606][ T5809] dw2102: su3000_power_ctrl: 1, initialized 0 [ 215.659551][ T5809] dvb-usb: bulk message failed: -22 (2/0) [ 215.663312][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 215.666792][ T5809] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 215.669398][ T5809] usb 12-1: media controller created [ 215.671066][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 215.672941][ T5809] dw2102: i2c transfer failed. [ 215.675261][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 215.677156][ T5809] dw2102: i2c transfer failed. [ 215.678715][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 215.680539][ T5809] dw2102: i2c transfer failed. [ 215.682038][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 215.683914][ T5809] dw2102: i2c transfer failed. [ 215.685591][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 215.687441][ T5809] dw2102: i2c transfer failed. [ 215.688920][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 215.699574][ T5809] dw2102: i2c transfer failed. [ 215.701068][ T5809] dvb-usb: MAC address: 02:02:02:02:02:02 [ 215.707271][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.716681][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 215.718522][ T5809] dw2102: command 0x0e transfer failed. [ 215.720237][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 215.721986][ T5809] dw2102: command 0x0e transfer failed. [ 215.774179][T10815] md: array md0 already has disks! [ 215.797715][T10815] md/raid10:md0: not enough operational mirrors. [ 215.802526][T10815] md: pers->run() failed ... [ 215.864233][T10815] md: could not open device unknown-block(1,2). [ 215.866931][T10815] md: error, md_import_device() returned -16 [ 215.963244][T10825] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 216.024100][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 216.026333][ T5809] dw2102: command 0x0e transfer failed. [ 216.028111][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 216.029952][ T5809] dw2102: command 0x0e transfer failed. [ 216.031684][ T5809] dvb-usb: bulk message failed: -22 (1/0) [ 216.033524][ T5809] dw2102: command 0x51 transfer failed. [ 216.035609][T10800] dvb-usb: bulk message failed: -22 (5/0) [ 216.037473][T10800] dw2102: i2c transfer failed. [ 216.039109][T10800] retu-mfd 2-0002: Tahvo v0.1 found [ 216.040767][T10800] dvb-usb: bulk message failed: -22 (6/0) [ 216.042538][T10800] dw2102: i2c transfer failed. [ 216.044397][T10800] dvb-usb: bulk message failed: -22 (5/0) [ 216.046156][T10800] dw2102: i2c transfer failed. [ 216.047998][T10800] genirq: Flags mismatch irq 0. 00002000 (TAHVO) vs. 00215a00 (timer) [ 216.050666][ T5809] DVB: Unable to find symbol ds3000_attach() [ 216.052521][ T5809] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 216.054125][T10800] retu-mfd 2-0002: Failed to request IRQ 0 for TAHVO: -16 [ 216.059224][T10800] retu-mfd 2-0002: probe with driver retu-mfd failed with error -16 [ 216.061935][T10800] i2c i2c-2: new_device: Instantiated device tahvo at 0x02 [ 216.114428][ T5809] rc_core: IR keymap rc-su3000 not found [ 216.116193][ T5809] Registered IR keymap rc-empty [ 216.119018][ T5809] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 216.123116][ T5809] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input32 [ 216.129441][ T5809] dvb-usb: schedule remote query interval to 150 msecs. [ 216.131794][ T5809] dw2102: su3000_power_ctrl: 0, initialized 1 [ 216.133674][ T5809] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 216.140277][ T5809] usb 12-1: USB disconnect, device number 9 [ 216.176243][ T5809] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 216.211362][T10834] FAULT_INJECTION: forcing a failure. [ 216.211362][T10834] name failslab, interval 1, probability 0, space 0, times 0 [ 216.215312][T10834] CPU: 2 UID: 0 PID: 10834 Comm: syz.0.1409 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.215329][T10834] Tainted: [L]=SOFTLOCKUP [ 216.215333][T10834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.215339][T10834] Call Trace: [ 216.215343][T10834] [ 216.215348][T10834] dump_stack_lvl+0x100/0x190 [ 216.215366][T10834] should_fail_ex.cold+0x5/0xa [ 216.215379][T10834] should_failslab+0xc2/0x120 [ 216.215391][T10834] __kmalloc_cache_noprof+0x91/0x6d0 [ 216.215406][T10834] ? nf_tables_newtable+0xd0a/0x1a90 [ 216.215423][T10834] nf_tables_newtable+0xd0a/0x1a90 [ 216.215439][T10834] ? __pfx_nf_tables_newtable+0x10/0x10 [ 216.215456][T10834] ? __nla_parse+0x40/0x60 [ 216.215469][T10834] nfnetlink_rcv_batch+0x1410/0x2880 [ 216.215490][T10834] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 216.215504][T10834] ? find_held_lock+0x2b/0x80 [ 216.215516][T10834] ? __local_bh_enable_ip+0xa5/0x120 [ 216.215531][T10834] ? lockdep_hardirqs_on+0x7d/0x110 [ 216.215544][T10834] ? __dev_queue_xmit+0xa12/0x4970 [ 216.215573][T10834] ? __nla_parse+0x40/0x60 [ 216.215585][T10834] nfnetlink_rcv+0x3bd/0x440 [ 216.215598][T10834] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 216.215616][T10834] netlink_unicast+0x585/0x850 [ 216.215629][T10834] ? __pfx_netlink_unicast+0x10/0x10 [ 216.215643][T10834] netlink_sendmsg+0x8b0/0xda0 [ 216.215656][T10834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.215669][T10834] ? apparmor_socket_sendmsg+0x15b/0x270 [ 216.215686][T10834] ____sys_sendmsg+0xa4d/0xbe0 [ 216.215701][T10834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.215712][T10834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.215734][T10834] ___sys_sendmsg+0x190/0x1e0 [ 216.215751][T10834] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.215774][T10834] ? find_held_lock+0x2b/0x80 [ 216.215791][T10834] __sys_sendmsg+0x160/0x210 [ 216.215805][T10834] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.215821][T10834] ? __pfx_ksys_write+0x10/0x10 [ 216.215839][T10834] __do_fast_syscall_32+0x13a/0x8b0 [ 216.215853][T10834] ? lockdep_hardirqs_on+0x7d/0x110 [ 216.215867][T10834] do_fast_syscall_32+0x32/0x70 [ 216.215881][T10834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.215894][T10834] RIP: 0023:0xf709efec [ 216.215906][T10834] Code: Unable to access opcode bytes at 0xf709efc2. [ 216.215911][T10834] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 216.215922][T10834] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 216.215928][T10834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.215934][T10834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 216.215940][T10834] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 216.215946][T10834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.215959][T10834] [ 216.479509][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 216.513053][T10852] FAULT_INJECTION: forcing a failure. [ 216.513053][T10852] name failslab, interval 1, probability 0, space 0, times 0 [ 216.517539][T10852] CPU: 2 UID: 0 PID: 10852 Comm: syz.6.1415 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.517556][T10852] Tainted: [L]=SOFTLOCKUP [ 216.517560][T10852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.517570][T10852] Call Trace: [ 216.517575][T10852] [ 216.517579][T10852] dump_stack_lvl+0x100/0x190 [ 216.517596][T10852] should_fail_ex.cold+0x5/0xa [ 216.517610][T10852] should_failslab+0xc2/0x120 [ 216.517623][T10852] __kmalloc_cache_node_noprof+0x94/0x720 [ 216.517634][T10852] ? __kasan_kmalloc+0xaa/0xb0 [ 216.517643][T10852] ? page_pool_create_percpu+0x7a/0xd50 [ 216.517657][T10852] page_pool_create_percpu+0x7a/0xd50 [ 216.517671][T10852] bpf_test_run_xdp_live+0x192/0x760 [ 216.517688][T10852] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 216.517709][T10852] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 216.517736][T10852] ? _copy_from_user+0x59/0xd0 [ 216.517749][T10852] ? bpf_test_init.isra.0+0x51/0x100 [ 216.517766][T10852] bpf_prog_test_run_xdp+0xd86/0x1670 [ 216.517787][T10852] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 216.517808][T10852] ? fput+0x7c/0x100 [ 216.517818][T10852] ? __bpf_prog_get+0x97/0x290 [ 216.517831][T10852] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 216.517848][T10852] __sys_bpf+0x2265/0x4a30 [ 216.517867][T10852] ? __pfx___sys_bpf+0x10/0x10 [ 216.517884][T10852] ? find_held_lock+0x2b/0x80 [ 216.517893][T10852] ? get_pid_task+0xfc/0x250 [ 216.517909][T10852] ? get_pid_task+0xfc/0x250 [ 216.517928][T10852] ? proc_fail_nth_write+0x9f/0x220 [ 216.517943][T10852] ? find_held_lock+0x2b/0x80 [ 216.517955][T10852] ? rcu_read_lock_any_held+0x6a/0x90 [ 216.517965][T10852] ? find_held_lock+0x2b/0x80 [ 216.517974][T10852] ? ksys_write+0x190/0x250 [ 216.517988][T10852] ? ksys_write+0x190/0x250 [ 216.518012][T10852] ? fput+0x7c/0x100 [ 216.518023][T10852] ? __ia32_sys_bpf+0xcc/0x170 [ 216.518039][T10852] __ia32_sys_bpf+0xcc/0x170 [ 216.518056][T10852] ? __do_fast_syscall_32+0xb3/0x8b0 [ 216.518074][T10852] __do_fast_syscall_32+0x13a/0x8b0 [ 216.518087][T10852] ? lockdep_hardirqs_on+0x7d/0x110 [ 216.518101][T10852] do_fast_syscall_32+0x32/0x70 [ 216.518116][T10852] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.518129][T10852] RIP: 0023:0xf7f64fec [ 216.518142][T10852] Code: Unable to access opcode bytes at 0xf7f64fc2. [ 216.518146][T10852] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 216.518158][T10852] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000340 [ 216.518165][T10852] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.518171][T10852] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 216.518176][T10852] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 216.518182][T10852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.518195][T10852] [ 216.755366][T10868] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1421'. [ 216.762108][T10872] netlink: 'syz.6.1422': attribute type 10 has an invalid length. [ 216.765264][T10872] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.767467][T10872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.769881][T10872] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.772102][T10872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.776061][T10872] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 216.812614][T10877] FAULT_INJECTION: forcing a failure. [ 216.812614][T10877] name failslab, interval 1, probability 0, space 0, times 0 [ 216.816721][T10877] CPU: 0 UID: 0 PID: 10877 Comm: syz.6.1424 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.816746][T10877] Tainted: [L]=SOFTLOCKUP [ 216.816752][T10877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.816762][T10877] Call Trace: [ 216.816768][T10877] [ 216.816774][T10877] dump_stack_lvl+0x100/0x190 [ 216.816813][T10877] should_fail_ex.cold+0x5/0xa [ 216.816830][T10877] should_failslab+0xc2/0x120 [ 216.816841][T10877] __kmalloc_cache_noprof+0x91/0x6d0 [ 216.816857][T10877] ? rtnl_newlink+0x139/0x2620 [ 216.816871][T10877] ? __pfx_rtnl_newlink+0x10/0x10 [ 216.816885][T10877] rtnl_newlink+0x139/0x2620 [ 216.816904][T10877] ? __pfx_rtnl_newlink+0x10/0x10 [ 216.816919][T10877] ? rcu_is_watching+0x13/0xc0 [ 216.816934][T10877] ? kasan_quarantine_put+0x104/0x240 [ 216.816950][T10877] ? lockdep_hardirqs_on+0x7d/0x110 [ 216.816970][T10877] ? __lock_acquire+0x4c5/0x1ec0 [ 216.816985][T10877] ? find_held_lock+0x2b/0x80 [ 216.816999][T10877] ? find_held_lock+0x2b/0x80 [ 216.817007][T10877] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 216.817021][T10877] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 216.817036][T10877] ? __pfx_rtnl_newlink+0x10/0x10 [ 216.817050][T10877] rtnetlink_rcv_msg+0x95e/0xe90 [ 216.817065][T10877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 216.817085][T10877] ? ref_tracker_free+0x37e/0x6c0 [ 216.817102][T10877] netlink_rcv_skb+0x159/0x420 [ 216.817114][T10877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 216.817128][T10877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 216.817144][T10877] ? netlink_deliver_tap+0x1ae/0xcc0 [ 216.817163][T10877] netlink_unicast+0x585/0x850 [ 216.817176][T10877] ? __pfx_netlink_unicast+0x10/0x10 [ 216.817191][T10877] netlink_sendmsg+0x8b0/0xda0 [ 216.817203][T10877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.817216][T10877] ? apparmor_socket_sendmsg+0x15b/0x270 [ 216.817233][T10877] ____sys_sendmsg+0xa4d/0xbe0 [ 216.817248][T10877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.817260][T10877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.817281][T10877] ___sys_sendmsg+0x190/0x1e0 [ 216.817299][T10877] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.817321][T10877] ? find_held_lock+0x2b/0x80 [ 216.817346][T10877] __sys_sendmsg+0x160/0x210 [ 216.817368][T10877] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.817396][T10877] ? __pfx_ksys_write+0x10/0x10 [ 216.817427][T10877] __do_fast_syscall_32+0x13a/0x8b0 [ 216.817450][T10877] ? lockdep_hardirqs_on+0x7d/0x110 [ 216.817465][T10877] do_fast_syscall_32+0x32/0x70 [ 216.817479][T10877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.817493][T10877] RIP: 0023:0xf7f64fec [ 216.817505][T10877] Code: Unable to access opcode bytes at 0xf7f64fc2. [ 216.817509][T10877] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 216.817521][T10877] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 216.817527][T10877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.817533][T10877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 216.817539][T10877] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 216.817545][T10877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.817558][T10877] [ 217.008343][ T5748] Bluetooth: hci1: unexpected event for opcode 0x203d [ 217.204632][T10907] bridge2: entered allmulticast mode [ 217.238166][T10910] FAULT_INJECTION: forcing a failure. [ 217.238166][T10910] name failslab, interval 1, probability 0, space 0, times 0 [ 217.242299][T10910] CPU: 1 UID: 0 PID: 10910 Comm: syz.0.1433 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.242317][T10910] Tainted: [L]=SOFTLOCKUP [ 217.242321][T10910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.242327][T10910] Call Trace: [ 217.242331][T10910] [ 217.242335][T10910] dump_stack_lvl+0x100/0x190 [ 217.242353][T10910] should_fail_ex.cold+0x5/0xa [ 217.242367][T10910] should_failslab+0xc2/0x120 [ 217.242379][T10910] __kmalloc_noprof+0xfc/0x840 [ 217.242413][T10910] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 217.242431][T10910] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 217.242448][T10910] genl_family_rcv_msg_doit+0xc7/0x300 [ 217.242462][T10910] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 217.242487][T10910] ? genl_get_cmd+0x3e7/0x760 [ 217.242501][T10910] ? bpf_lsm_capable+0x9/0x10 [ 217.242515][T10910] ? security_capable+0x80/0x260 [ 217.242530][T10910] ? ns_capable+0xd2/0xf0 [ 217.242545][T10910] genl_rcv_msg+0x560/0x800 [ 217.242559][T10910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 217.242575][T10910] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 217.242590][T10910] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 217.242600][T10910] ? __pfx_nl80211_post_doit+0x10/0x10 [ 217.242618][T10910] netlink_rcv_skb+0x159/0x420 [ 217.242629][T10910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 217.242642][T10910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 217.242658][T10910] ? netlink_deliver_tap+0x1ae/0xcc0 [ 217.242677][T10910] genl_rcv+0x28/0x40 [ 217.242687][T10910] netlink_unicast+0x585/0x850 [ 217.242700][T10910] ? __pfx_netlink_unicast+0x10/0x10 [ 217.242714][T10910] netlink_sendmsg+0x8b0/0xda0 [ 217.242727][T10910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.242739][T10910] ? apparmor_socket_sendmsg+0x15b/0x270 [ 217.242757][T10910] ____sys_sendmsg+0xa4d/0xbe0 [ 217.242771][T10910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.242783][T10910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.242805][T10910] ___sys_sendmsg+0x190/0x1e0 [ 217.242822][T10910] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.242845][T10910] ? find_held_lock+0x2b/0x80 [ 217.242864][T10910] __sys_sendmsg+0x160/0x210 [ 217.242877][T10910] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.242894][T10910] ? __pfx_ksys_write+0x10/0x10 [ 217.242911][T10910] __do_fast_syscall_32+0x13a/0x8b0 [ 217.242925][T10910] ? lockdep_hardirqs_on+0x7d/0x110 [ 217.242939][T10910] do_fast_syscall_32+0x32/0x70 [ 217.242953][T10910] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.242966][T10910] RIP: 0023:0xf709efec [ 217.242978][T10910] Code: Unable to access opcode bytes at 0xf709efc2. [ 217.242983][T10910] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 217.242994][T10910] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006000 [ 217.243001][T10910] RDX: 0000000000028000 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.243007][T10910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.243013][T10910] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 217.243019][T10910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.243033][T10910] [ 217.522514][T10924] FAULT_INJECTION: forcing a failure. [ 217.522514][T10924] name failslab, interval 1, probability 0, space 0, times 0 [ 217.527467][T10925] netlink: 'syz.0.1438': attribute type 1 has an invalid length. [ 217.530152][T10924] CPU: 1 UID: 0 PID: 10924 Comm: syz.6.1439 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.530170][T10924] Tainted: [L]=SOFTLOCKUP [ 217.530174][T10924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.530180][T10924] Call Trace: [ 217.530184][T10924] [ 217.530188][T10924] dump_stack_lvl+0x100/0x190 [ 217.530206][T10924] should_fail_ex.cold+0x5/0xa [ 217.530220][T10924] should_failslab+0xc2/0x120 [ 217.530232][T10924] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 217.530264][T10924] ? alloc_vmap_area+0x640/0x2bb0 [ 217.530278][T10924] alloc_vmap_area+0x640/0x2bb0 [ 217.530292][T10924] ? kasan_save_track+0x14/0x30 [ 217.530302][T10924] ? __kasan_kmalloc+0xaa/0xb0 [ 217.530311][T10924] ? __pfx_alloc_vmap_area+0x10/0x10 [ 217.530328][T10924] ? __get_vm_area_node+0x124/0x350 [ 217.530349][T10924] __get_vm_area_node+0x1ed/0x350 [ 217.530371][T10924] __vmalloc_node_range_noprof+0x262/0x1460 [ 217.530413][T10924] ? create_io_thread+0xc2/0x110 [ 217.530442][T10924] ? find_held_lock+0x2b/0x80 [ 217.530458][T10924] ? rcu_read_unlock+0x17/0x60 [ 217.530474][T10924] ? create_io_thread+0xc2/0x110 [ 217.530491][T10924] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.530506][T10924] ? rcu_is_watching+0x13/0xc0 [ 217.530522][T10924] ? trace_kmem_cache_alloc+0xdd/0x100 [ 217.530535][T10924] ? create_io_thread+0xc2/0x110 [ 217.530550][T10924] __vmalloc_node_noprof+0xad/0xf0 [ 217.530562][T10924] ? create_io_thread+0xc2/0x110 [ 217.530579][T10924] copy_process+0x803/0x8370 [ 217.530594][T10924] ? kasan_save_stack+0x3f/0x50 [ 217.530603][T10924] ? kasan_save_stack+0x30/0x50 [ 217.530612][T10924] ? kasan_save_track+0x14/0x30 [ 217.530621][T10924] ? __kasan_kmalloc+0xaa/0xb0 [ 217.530630][T10924] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 217.530643][T10924] ? create_io_worker+0xc6/0x5b0 [ 217.530656][T10924] ? io_wq_enqueue+0x4d8/0x970 [ 217.530669][T10924] ? io_queue_iowq+0x238/0x5b0 [ 217.530680][T10924] ? io_queue_sqe_fallback+0x16b/0x210 [ 217.530693][T10924] ? io_submit_sqes+0x1e0e/0x2480 [ 217.530707][T10924] ? fred_int80_emulation+0x5a1/0x650 [ 217.530725][T10924] ? __pfx_copy_process+0x10/0x10 [ 217.530745][T10924] ? __pfx_io_wq_worker+0x10/0x10 [ 217.530759][T10924] create_io_thread+0xc2/0x110 [ 217.530774][T10924] ? __pfx_create_io_thread+0x10/0x10 [ 217.530793][T10924] ? __pfx_io_wq_worker+0x10/0x10 [ 217.530808][T10924] ? lockdep_init_map_type+0x5c/0x250 [ 217.530822][T10924] ? lockdep_init_map_type+0x5c/0x250 [ 217.530836][T10924] ? __init_swait_queue_head+0xca/0x150 [ 217.530852][T10924] create_io_worker+0x1cd/0x5b0 [ 217.530866][T10924] io_wq_enqueue+0x4d8/0x970 [ 217.530881][T10924] ? __pfx_io_wq_enqueue+0x10/0x10 [ 217.530894][T10924] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 217.530907][T10924] ? io_prep_async_work+0x3ab/0x720 [ 217.530922][T10924] io_queue_iowq+0x238/0x5b0 [ 217.530936][T10924] io_queue_sqe_fallback+0x16b/0x210 [ 217.530948][T10924] ? io_uring_cmd_prep+0x4c2/0x670 [ 217.530968][T10924] io_submit_sqes+0x1e0e/0x2480 [ 217.530988][T10924] __do_sys_io_uring_enter+0xa88/0x1b10 [ 217.531006][T10924] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.531020][T10924] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 217.531034][T10924] ? __fget_files+0x21f/0x3d0 [ 217.531052][T10924] ? fput+0x7c/0x100 [ 217.531062][T10924] ? ksys_write+0x1ac/0x250 [ 217.531077][T10924] ? __pfx_ksys_write+0x10/0x10 [ 217.531095][T10924] __do_fast_syscall_32+0x13a/0x8b0 [ 217.531108][T10924] ? lockdep_hardirqs_on+0x7d/0x110 [ 217.531122][T10924] do_fast_syscall_32+0x32/0x70 [ 217.531136][T10924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.531150][T10924] RIP: 0023:0xf7f64fec [ 217.531162][T10924] Code: Unable to access opcode bytes at 0xf7f64fc2. [ 217.531166][T10924] RSP: 002b:00000000f54264ac EFLAGS: 00000282 ORIG_RAX: 00000000000001aa [ 217.531177][T10924] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 217.531183][T10924] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 217.531189][T10924] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 217.531195][T10924] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 217.531201][T10924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.531214][T10924] [ 217.706605][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 217.710153][T10927] openvswitch: netlink: Missing key (keys=40, expected=100) [ 217.877551][T10938] ublk8: read batch cmd buffer failed [ 217.880187][T10938] ublk8: read batch cmd buffer failed [ 217.957423][T10941] fuse: fd is not a fuse device [ 218.048193][T10947] fuse: fd is not a fuse device [ 218.082330][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1449'. [ 218.087678][T10949] netlink: 'syz.3.1449': attribute type 10 has an invalid length. [ 218.234134][ T5879] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 218.246154][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1452'. [ 218.394686][ T5879] usb 12-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 218.411439][ T5879] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 218.415183][ T5879] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18354, setting to 1024 [ 218.428648][ T5879] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 218.438447][ T5879] usb 12-1: Product: syz [ 218.443098][ T5879] usb 12-1: Manufacturer: syz [ 218.443782][T10960] binder: 10959:10960 ioctl c0306201 0 returned -14 [ 218.480701][T10943] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 218.497202][ T5879] navman 12-1:1.0: navman converter detected [ 218.509672][T10963] fuse: fd is not a fuse device [ 218.513640][ T5879] usb 12-1: navman converter now attached to ttyUSB0 [ 218.704216][ T5880] usb 12-1: USB disconnect, device number 10 [ 218.748167][ T5880] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 218.750871][ T5880] navman 12-1:1.0: device disconnected [ 218.781435][T10974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1458'. [ 218.787867][T10974] netlink: 'syz.0.1458': attribute type 10 has an invalid length. [ 218.857817][T10981] FAULT_INJECTION: forcing a failure. [ 218.857817][T10981] name failslab, interval 1, probability 0, space 0, times 0 [ 218.861694][T10981] CPU: 2 UID: 0 PID: 10981 Comm: syz.0.1460 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.861730][T10981] Tainted: [L]=SOFTLOCKUP [ 218.861734][T10981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.861740][T10981] Call Trace: [ 218.861744][T10981] [ 218.861748][T10981] dump_stack_lvl+0x100/0x190 [ 218.861771][T10981] should_fail_ex.cold+0x5/0xa [ 218.861790][T10981] should_failslab+0xc2/0x120 [ 218.861807][T10981] __kmalloc_cache_noprof+0x91/0x6d0 [ 218.861823][T10981] ? rds_cong_from_addr+0x50/0x540 [ 218.861839][T10981] rds_cong_from_addr+0x50/0x540 [ 218.861852][T10981] ? __rds_conn_create+0x1958/0x25a0 [ 218.861868][T10981] rds_cong_get_maps+0x21/0xe0 [ 218.861887][T10981] ? __ipv6_addr_type+0xe8/0x2e0 [ 218.861900][T10981] __rds_conn_create+0xa7e/0x25a0 [ 218.861927][T10981] ? __pfx___rds_conn_create+0x10/0x10 [ 218.861941][T10981] ? trace_kmalloc+0xeb/0x110 [ 218.861952][T10981] ? __kasan_kmalloc+0xaa/0xb0 [ 218.861962][T10981] ? lockdep_init_map_type+0x5c/0x250 [ 218.861977][T10981] rds_conn_create_outgoing+0x44/0x60 [ 218.861994][T10981] rds_sendmsg+0x10da/0x34d0 [ 218.862010][T10981] ? __pfx_rds_sendmsg+0x10/0x10 [ 218.862021][T10981] ? __pfx_aa_sk_perm+0x10/0x10 [ 218.862031][T10981] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 218.862051][T10981] ? ____sys_sendmsg+0xa4d/0xbe0 [ 218.862066][T10981] ____sys_sendmsg+0xa4d/0xbe0 [ 218.862081][T10981] ? __pfx_rds_sendmsg+0x10/0x10 [ 218.862091][T10981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.862113][T10981] ___sys_sendmsg+0x190/0x1e0 [ 218.862130][T10981] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.862152][T10981] ? find_held_lock+0x2b/0x80 [ 218.862169][T10981] __sys_sendmsg+0x160/0x210 [ 218.862182][T10981] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.862198][T10981] ? __pfx_ksys_write+0x10/0x10 [ 218.862215][T10981] __do_fast_syscall_32+0x13a/0x8b0 [ 218.862230][T10981] ? lockdep_hardirqs_on+0x7d/0x110 [ 218.862243][T10981] do_fast_syscall_32+0x32/0x70 [ 218.862257][T10981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.862271][T10981] RIP: 0023:0xf709efec [ 218.862283][T10981] Code: Unable to access opcode bytes at 0xf709efc2. [ 218.862288][T10981] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 218.862299][T10981] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 218.862306][T10981] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.862312][T10981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.862317][T10981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.862323][T10981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.862336][T10981] [ 219.198949][T10985] program syz.0.1461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.514727][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1465'. [ 219.517542][T10994] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1465'. [ 219.570695][T10994] bridge0: entered promiscuous mode [ 219.801264][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1469'. [ 219.806213][T11006] netlink: 'syz.6.1469': attribute type 10 has an invalid length. [ 219.809242][T11006] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.811872][T11006] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.183220][ T5736] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 220.387821][ T5736] usb 11-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 220.394613][ T5736] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 220.400517][ T5736] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18354, setting to 1024 [ 220.416824][ T5736] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 220.424679][ T5736] usb 11-1: Product: syz [ 220.432039][ T5736] usb 11-1: Manufacturer: syz [ 220.451423][T11010] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 220.455670][ T5736] navman 11-1:1.0: navman converter detected [ 220.498352][ T5736] usb 11-1: navman converter now attached to ttyUSB0 [ 220.662039][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1467'. [ 220.734585][ T5736] usb 11-1: USB disconnect, device number 7 [ 220.821771][ T5736] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 220.839690][ T5736] navman 11-1:1.0: device disconnected [ 222.047304][T11045] 9p: Bad value for 'wfdno' [ 222.135777][T11052] FAULT_INJECTION: forcing a failure. [ 222.135777][T11052] name failslab, interval 1, probability 0, space 0, times 0 [ 222.139887][T11052] CPU: 1 UID: 0 PID: 11052 Comm: syz.6.1486 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.139905][T11052] Tainted: [L]=SOFTLOCKUP [ 222.139908][T11052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.139915][T11052] Call Trace: [ 222.139919][T11052] [ 222.139923][T11052] dump_stack_lvl+0x100/0x190 [ 222.139941][T11052] should_fail_ex.cold+0x5/0xa [ 222.139955][T11052] should_failslab+0xc2/0x120 [ 222.139967][T11052] __kmalloc_cache_noprof+0x91/0x6d0 [ 222.139982][T11052] ? apply_subsystem_event_filter+0x2fb/0x17a0 [ 222.139999][T11052] apply_subsystem_event_filter+0x2fb/0x17a0 [ 222.140016][T11052] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 222.140032][T11052] ? _copy_from_user+0x59/0xd0 [ 222.140048][T11052] ? __pfx_subsystem_filter_write+0x10/0x10 [ 222.140060][T11052] subsystem_filter_write+0x95/0x120 [ 222.140074][T11052] vfs_writev+0x5ed/0xdd0 [ 222.140095][T11052] ? __pfx_vfs_writev+0x10/0x10 [ 222.140119][T11052] ? __fget_files+0x21f/0x3d0 [ 222.140139][T11052] ? do_writev+0x13e/0x340 [ 222.140152][T11052] do_writev+0x13e/0x340 [ 222.140167][T11052] ? __pfx_do_writev+0x10/0x10 [ 222.140180][T11052] ? ksys_write+0x1ac/0x250 [ 222.140194][T11052] ? __pfx_ksys_write+0x10/0x10 [ 222.140212][T11052] __do_fast_syscall_32+0x13a/0x8b0 [ 222.140226][T11052] ? lockdep_hardirqs_on+0x7d/0x110 [ 222.140240][T11052] do_fast_syscall_32+0x32/0x70 [ 222.140254][T11052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.140268][T11052] RIP: 0023:0xf7f64fec [ 222.140280][T11052] Code: Unable to access opcode bytes at 0xf7f64fc2. [ 222.140285][T11052] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 222.140296][T11052] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080005400 [ 222.140302][T11052] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.140308][T11052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.140314][T11052] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 222.140320][T11052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.140334][T11052] [ 222.204154][ T9973] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 222.290530][T11054] xt_socket: unknown flags 0x50 [ 222.355292][ T9973] usb 12-1: Using ep0 maxpacket: 32 [ 222.359036][ T9973] usb 12-1: unable to get BOS descriptor or descriptor too short [ 222.361656][ T9973] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 222.367776][ T9973] usb 12-1: config 8 has an invalid interface number: 188 but max is 0 [ 222.373531][ T9973] usb 12-1: config 8 has no interface number 0 [ 222.375484][ T9973] usb 12-1: config 8 interface 188 has no altsetting 0 [ 222.381875][ T9973] usb 12-1: string descriptor 0 read error: -22 [ 222.384761][ T9973] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.393523][ T9973] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 222.396118][ T9973] dw2102: su3000_power_ctrl: 1, initialized 0 [ 222.398043][ T9973] dvb-usb: bulk message failed: -22 (2/0) [ 222.409839][ T9973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 222.413254][ T9973] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 222.418452][ T9973] usb 12-1: media controller created [ 222.420440][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 222.422324][ T9973] dw2102: i2c transfer failed. [ 222.423952][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 222.428603][ T9973] dw2102: i2c transfer failed. [ 222.430260][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 222.432823][ T9973] dw2102: i2c transfer failed. [ 222.434861][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 222.436960][ T9973] dw2102: i2c transfer failed. [ 222.438556][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 222.440581][ T9973] dw2102: i2c transfer failed. [ 222.442460][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 222.444807][ T9973] dw2102: i2c transfer failed. [ 222.446421][ T9973] dvb-usb: MAC address: 02:02:02:02:02:02 [ 222.456400][ T9973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.465352][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 222.467826][ T9973] dw2102: command 0x0e transfer failed. [ 222.469715][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 222.471568][ T9973] dw2102: command 0x0e transfer failed. [ 222.684065][ T5736] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 222.774165][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 222.776022][ T9973] dw2102: command 0x0e transfer failed. [ 222.777823][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 222.779606][ T9973] dw2102: command 0x0e transfer failed. [ 222.781401][ T9973] dvb-usb: bulk message failed: -22 (1/0) [ 222.783279][ T9973] dw2102: command 0x51 transfer failed. [ 222.785678][T11039] dvb-usb: bulk message failed: -22 (5/0) [ 222.787509][T11039] dw2102: i2c transfer failed. [ 222.789035][T11039] retu-mfd 2-0002: Tahvo v0.1 found [ 222.790674][T11039] dvb-usb: bulk message failed: -22 (6/0) [ 222.792402][T11039] dw2102: i2c transfer failed. [ 222.794392][T11039] dvb-usb: bulk message failed: -22 (5/0) [ 222.796236][T11039] dw2102: i2c transfer failed. [ 222.798740][T11039] genirq: Flags mismatch irq 0. 00002000 (TAHVO) vs. 00215a00 (timer) [ 222.802197][T11039] retu-mfd 2-0002: Failed to request IRQ 0 for TAHVO: -16 [ 222.805287][T11039] retu-mfd 2-0002: probe with driver retu-mfd failed with error -16 [ 222.806304][ T9973] DVB: Unable to find symbol ds3000_attach() [ 222.807943][T11039] i2c i2c-2: new_device: Instantiated device tahvo at 0x02 [ 222.809749][ T9973] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 222.844640][ T5736] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 222.849180][ T5736] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 222.853291][ T5736] usb 11-1: config 0 interface 0 has no altsetting 0 [ 222.858557][ T5736] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 222.861626][ T5736] usb 11-1: Product: syz [ 222.863252][ T5736] usb 11-1: Manufacturer: syz [ 222.864102][ T9973] rc_core: IR keymap rc-su3000 not found [ 222.865362][ T5736] usb 11-1: SerialNumber: syz [ 222.867403][ T9973] Registered IR keymap rc-empty [ 222.871388][ T5736] usb 11-1: config 0 descriptor?? [ 222.872256][ T9973] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 222.880828][ T9973] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input33 [ 222.884599][ T5736] usb 11-1: selecting invalid altsetting 0 [ 222.889251][ T9973] dvb-usb: schedule remote query interval to 150 msecs. [ 222.892984][ T9973] dw2102: su3000_power_ctrl: 0, initialized 1 [ 222.895516][ T9973] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 222.900474][ T9973] usb 12-1: USB disconnect, device number 11 [ 222.945116][ T9973] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 223.245317][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.248862][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.252169][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.255471][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.258586][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.261736][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.265227][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.269009][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.271559][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.274729][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.278106][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.281272][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.285121][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.287842][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.290450][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.292982][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.296185][T11060] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 223.297246][ T6998] usb 11-1: USB disconnect, device number 8 [ 223.298738][T11060] usb 11-1: cannot submit urb 0, error -19: no device [ 223.376973][T11087] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1494'. [ 223.439056][T11095] netlink: 'syz.3.1495': attribute type 13 has an invalid length. [ 223.447167][T11087] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1494'. [ 223.450021][T11087] nbd: device at index 64 is going down [ 223.513316][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 223.521689][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 223.734083][ T9973] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 223.894141][ T9973] usb 12-1: Using ep0 maxpacket: 32 [ 223.897711][ T9973] usb 12-1: unable to get BOS descriptor or descriptor too short [ 223.900087][ T9973] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 223.903619][ T9973] usb 12-1: config 8 has an invalid interface number: 188 but max is 0 [ 223.906996][ T9973] usb 12-1: config 8 has no interface number 0 [ 223.908900][ T9973] usb 12-1: config 8 interface 188 has no altsetting 0 [ 223.913357][ T9973] usb 12-1: string descriptor 0 read error: -22 [ 223.915558][ T9973] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.926091][ T9973] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 223.929109][ T9973] dw2102: su3000_power_ctrl: 1, initialized 0 [ 223.931020][ T9973] dvb-usb: bulk message failed: -22 (2/0) [ 223.937414][ T9973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.942422][ T9973] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 223.946247][ T9973] usb 12-1: media controller created [ 223.947863][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 223.949585][ T9973] dw2102: i2c transfer failed. [ 223.951021][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 223.952751][ T9973] dw2102: i2c transfer failed. [ 223.954557][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 223.956791][ T9973] dw2102: i2c transfer failed. [ 223.958548][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 223.960318][ T9973] dw2102: i2c transfer failed. [ 223.961782][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 223.963476][ T9973] dw2102: i2c transfer failed. [ 223.965900][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 223.968383][ T9973] dw2102: i2c transfer failed. [ 223.970340][ T9973] dvb-usb: MAC address: 02:02:02:02:02:02 [ 223.977180][ T9973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.985681][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 223.987426][ T9973] dw2102: command 0x0e transfer failed. [ 223.989114][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 223.993701][ T9973] dw2102: command 0x0e transfer failed. [ 224.062488][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1498'. [ 224.065583][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1498'. [ 224.304200][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 224.306584][ T9973] dw2102: command 0x0e transfer failed. [ 224.308859][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 224.311086][ T9973] dw2102: command 0x0e transfer failed. [ 224.311231][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1500'. [ 224.313196][ T9973] dvb-usb: bulk message failed: -22 (1/0) [ 224.320940][ T9973] dw2102: command 0x51 transfer failed. [ 224.323419][T11100] dvb-usb: bulk message failed: -22 (5/0) [ 224.326035][T11100] dw2102: i2c transfer failed. [ 224.327903][T11100] retu-mfd 2-0002: Tahvo v0.1 found [ 224.329897][T11100] dvb-usb: bulk message failed: -22 (6/0) [ 224.332102][T11100] dw2102: i2c transfer failed. [ 224.334785][T11100] dvb-usb: bulk message failed: -22 (5/0) [ 224.336940][T11100] dw2102: i2c transfer failed. [ 224.339252][T11100] genirq: Flags mismatch irq 0. 00002000 (TAHVO) vs. 00215a00 (timer) [ 224.342187][ T9973] DVB: Unable to find symbol ds3000_attach() [ 224.343571][T11100] retu-mfd 2-0002: Failed to request IRQ 0 for TAHVO: -16 [ 224.344402][ T9973] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 224.349611][T11100] retu-mfd 2-0002: probe with driver retu-mfd failed with error -16 [ 224.352303][T11100] i2c i2c-2: new_device: Instantiated device tahvo at 0x02 [ 224.394519][ T9973] rc_core: IR keymap rc-su3000 not found [ 224.396305][ T9973] Registered IR keymap rc-empty [ 224.398418][ T9973] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 224.405735][ T9973] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input34 [ 224.410121][ T9973] dvb-usb: schedule remote query interval to 150 msecs. [ 224.412345][ T9973] dw2102: su3000_power_ctrl: 0, initialized 1 [ 224.414220][ T9973] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 224.419570][ T9973] usb 12-1: USB disconnect, device number 12 [ 224.445821][ T9973] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 224.867297][T11136] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 224.922639][T11139] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 225.051139][T11138] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 225.367391][T11146] ip6gretap1: entered allmulticast mode [ 225.370395][T11146] batman_adv: batadv0: Adding interface: ip6gretap1 [ 225.372531][T11146] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.381233][T11146] batman_adv: batadv0: Interface activated: ip6gretap1 [ 225.418242][T11148] loop6: detected capacity change from 0 to 2640 [ 225.435492][ T5745] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.443223][ T5745] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.449037][ T5745] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.452031][ T5745] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.455693][ T5745] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.557056][T11157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1507'. [ 225.618713][T11157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1507'. [ 225.621599][T11157] nbd: device at index 64 is going down [ 225.673496][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 225.869698][T11172] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 225.904555][T11172] md: array md0 already has disks! [ 225.997252][T11174] md: pers->run() failed ... [ 226.214773][T11172] md: could not open device unknown-block(1,2). [ 226.217116][T11172] md: error, md_import_device() returned -16 [ 226.307513][T11182] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1512'. [ 226.412507][T11187] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 226.579021][T11190] FAULT_INJECTION: forcing a failure. [ 226.579021][T11190] name failslab, interval 1, probability 0, space 0, times 0 [ 226.582907][T11190] CPU: 1 UID: 0 PID: 11190 Comm: syz.7.1513 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.582936][T11190] Tainted: [L]=SOFTLOCKUP [ 226.582940][T11190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.582946][T11190] Call Trace: [ 226.582950][T11190] [ 226.582955][T11190] dump_stack_lvl+0x100/0x190 [ 226.582973][T11190] should_fail_ex.cold+0x5/0xa [ 226.582987][T11190] should_failslab+0xc2/0x120 [ 226.582999][T11190] kmem_cache_alloc_noprof+0x92/0x6a0 [ 226.583015][T11190] ? touch_atime+0xa5/0x770 [ 226.583029][T11190] ? vm_area_alloc+0x1f/0x160 [ 226.583044][T11190] vm_area_alloc+0x1f/0x160 [ 226.583056][T11190] __mmap_region+0x103d/0x30b0 [ 226.583073][T11190] ? __lock_acquire+0x4c5/0x1ec0 [ 226.583086][T11190] ? __pfx___mmap_region+0x10/0x10 [ 226.583110][T11190] ? __lock_acquire+0x4c5/0x1ec0 [ 226.583126][T11190] ? up_write+0x2dc/0x5b0 [ 226.583152][T11190] ? find_held_lock+0x2b/0x80 [ 226.583161][T11190] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 226.583199][T11190] mmap_region+0x3db/0x6d0 [ 226.583216][T11190] ? __pfx_mmap_region+0x10/0x10 [ 226.583231][T11190] ? shmem_mapping+0xd/0x50 [ 226.583246][T11190] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 226.583260][T11190] ? do_mmap+0x535/0x1c30 [ 226.583272][T11190] do_mmap+0x12c7/0x1c30 [ 226.583287][T11190] ? __pfx_do_mmap+0x10/0x10 [ 226.583298][T11190] ? __pfx___might_resched+0x10/0x10 [ 226.583310][T11190] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 226.583325][T11190] ? security_current_getlsmprop_subj+0x6e/0x130 [ 226.583343][T11190] ? __pfx_down_write_killable+0x10/0x10 [ 226.583361][T11190] vm_mmap_pgoff+0x28d/0x470 [ 226.583373][T11190] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 226.583382][T11190] ? __fget_files+0x215/0x3d0 [ 226.583400][T11190] ? __fget_files+0x21f/0x3d0 [ 226.583418][T11190] ksys_mmap_pgoff+0x3cb/0x610 [ 226.583430][T11190] ? fput+0x7c/0x100 [ 226.583439][T11190] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 226.583449][T11190] ? ksys_write+0x1ac/0x250 [ 226.583463][T11190] ? __pfx_ksys_write+0x10/0x10 [ 226.583481][T11190] __do_fast_syscall_32+0x13a/0x8b0 [ 226.583495][T11190] ? lockdep_hardirqs_on+0x7d/0x110 [ 226.583509][T11190] do_fast_syscall_32+0x32/0x70 [ 226.583523][T11190] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.583537][T11190] RIP: 0023:0xf702efec [ 226.583550][T11190] Code: Unable to access opcode bytes at 0xf702efc2. [ 226.583555][T11190] RSP: 002b:00000000f53db50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 226.583565][T11190] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000001000 [ 226.583572][T11190] RDX: 0000000000000001 RSI: 0000000000010012 RDI: 0000000000000005 [ 226.583578][T11190] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.583584][T11190] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 226.583589][T11190] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.583603][T11190] [ 226.909225][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 226.913314][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 226.978008][T11199] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 226.980972][T11199] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 227.039547][T11202] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 227.075541][T11204] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 227.138761][T11208] FAULT_INJECTION: forcing a failure. [ 227.138761][T11208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.143093][T11208] CPU: 0 UID: 0 PID: 11208 Comm: syz.0.1522 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.143110][T11208] Tainted: [L]=SOFTLOCKUP [ 227.143113][T11208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.143119][T11208] Call Trace: [ 227.143123][T11208] [ 227.143128][T11208] dump_stack_lvl+0x100/0x190 [ 227.143146][T11208] should_fail_ex.cold+0x5/0xa [ 227.143159][T11208] _copy_from_user+0x2e/0xd0 [ 227.143174][T11208] generic_map_update_batch+0x4bb/0x800 [ 227.143194][T11208] ? __pfx_generic_map_update_batch+0x10/0x10 [ 227.143213][T11208] ? __pfx_generic_map_update_batch+0x10/0x10 [ 227.143232][T11208] bpf_map_do_batch+0x66f/0x6d0 [ 227.143254][T11208] __sys_bpf+0x4ce/0x4a30 [ 227.143285][T11208] ? __pfx___sys_bpf+0x10/0x10 [ 227.143313][T11208] ? find_held_lock+0x2b/0x80 [ 227.143330][T11208] ? get_pid_task+0xfc/0x250 [ 227.143348][T11208] ? get_pid_task+0xfc/0x250 [ 227.143367][T11208] ? proc_fail_nth_write+0x9f/0x220 [ 227.143382][T11208] ? find_held_lock+0x2b/0x80 [ 227.143394][T11208] ? rcu_read_lock_any_held+0x6a/0x90 [ 227.143404][T11208] ? find_held_lock+0x2b/0x80 [ 227.143413][T11208] ? ksys_write+0x190/0x250 [ 227.143427][T11208] ? ksys_write+0x190/0x250 [ 227.143451][T11208] ? fput+0x7c/0x100 [ 227.143468][T11208] ? __ia32_sys_bpf+0xcc/0x170 [ 227.143483][T11208] __ia32_sys_bpf+0xcc/0x170 [ 227.143500][T11208] ? __do_fast_syscall_32+0xb3/0x8b0 [ 227.143515][T11208] __do_fast_syscall_32+0x13a/0x8b0 [ 227.143528][T11208] ? lockdep_hardirqs_on+0x7d/0x110 [ 227.143543][T11208] do_fast_syscall_32+0x32/0x70 [ 227.143557][T11208] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.143571][T11208] RIP: 0023:0xf709efec [ 227.143583][T11208] Code: Unable to access opcode bytes at 0xf709efc2. [ 227.143588][T11208] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 227.143599][T11208] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080001880 [ 227.143606][T11208] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.143612][T11208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.143618][T11208] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.143624][T11208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.143636][T11208] [ 227.332598][T11218] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20003 [ 227.435694][T11226] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 227.439563][T11226] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 227.545507][ T41] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 227.635482][T11228] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 227.694120][ T41] usb 12-1: Using ep0 maxpacket: 16 [ 227.705473][ T41] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 227.709316][ T41] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.712361][ T41] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 227.717666][ T41] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.721662][ T41] usb 12-1: config 0 descriptor?? [ 227.732295][ T41] usbhid 12-1:0.0: couldn't find an input interrupt endpoint [ 228.234976][T11235] lo speed is unknown, defaulting to 1000 [ 228.236901][T11235] lo speed is unknown, defaulting to 1000 [ 228.239227][T11235] lo speed is unknown, defaulting to 1000 [ 228.241510][T11235] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 228.246582][T11235] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 228.258841][T11235] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 228.276358][T11235] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 228.307918][T11235] lo speed is unknown, defaulting to 1000 [ 228.315648][T11235] lo speed is unknown, defaulting to 1000 [ 228.320845][T11235] lo speed is unknown, defaulting to 1000 [ 228.324127][T11235] lo speed is unknown, defaulting to 1000 [ 228.328344][T11235] lo speed is unknown, defaulting to 1000 [ 228.524056][ T9973] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 228.528938][ T6998] lo speed is unknown, defaulting to 1000 [ 228.530190][ T1160] smbdirect: ib_dev[syz0] removed [ 228.533652][ T6998] syz0: Port: 1 Link DOWN [ 228.566435][T11259] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 228.584448][T11259] md: array md0 already has disks! [ 228.663536][T11260] md: pers->run() failed ... [ 228.674085][ T9973] usb 11-1: Using ep0 maxpacket: 16 [ 228.676196][ T9973] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 228.679873][ T9973] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.682929][ T9973] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 228.686865][ T9973] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.690707][ T9973] usb 11-1: config 0 descriptor?? [ 228.696526][ T9973] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 228.705026][T11259] md: could not open device unknown-block(1,2). [ 228.707391][T11259] md: error, md_import_device() returned -16 [ 229.212035][T11275] __nla_validate_parse: 4 callbacks suppressed [ 229.212047][T11275] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1543'. [ 229.217602][T11275] futex_wake_op: syz.3.1543 tries to shift op by 144; fix this program [ 229.312650][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1535'. [ 229.359905][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1546'. [ 229.436792][T11285] lo speed is unknown, defaulting to 1000 [ 229.438675][T11285] lo speed is unknown, defaulting to 1000 [ 229.440726][T11285] lo speed is unknown, defaulting to 1000 [ 229.442927][T11285] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 229.447527][T11285] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 229.452705][T11285] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 229.466981][T11285] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 229.484710][T11285] lo speed is unknown, defaulting to 1000 [ 229.488308][T11285] lo speed is unknown, defaulting to 1000 [ 229.491340][T11285] lo speed is unknown, defaulting to 1000 [ 229.495730][T11285] lo speed is unknown, defaulting to 1000 [ 229.498692][T11285] lo speed is unknown, defaulting to 1000 [ 229.544383][T11289] netlink: 'syz.0.1547': attribute type 10 has an invalid length. [ 229.548671][T11293] overlayfs: failed to clone lowerpath [ 229.553195][T11293] overlayfs: failed to clone lowerpath [ 229.608966][T11295] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 229.612306][T11297] overlayfs: failed to clone lowerpath [ 229.621218][T11295] kvm: pic: non byte read [ 229.624789][T11295] kvm: pic: level sensitive irq not supported [ 229.625165][T11295] kvm: pic: non byte read [ 229.629767][T11295] kvm: pic: level sensitive irq not supported [ 229.630041][T11295] kvm: pic: non byte read [ 229.634632][T11295] kvm: pic: level sensitive irq not supported [ 229.635251][T11295] kvm: pic: non byte read [ 229.668544][ T948] lo speed is unknown, defaulting to 1000 [ 229.673254][ T948] syz0: Port: 1 Link DOWN [ 229.679142][ T1157] smbdirect: ib_dev[syz0] removed [ 230.031855][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'. [ 230.035971][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'. [ 230.132803][T11305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.143242][T11305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.225191][T11305] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 230.231888][ T5880] syz2: Port: 1 Link DOWN [ 230.244280][ T5810] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.248367][ T5810] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.251186][ T5810] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.253803][ T5810] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.328038][ T41] usb 12-1: USB disconnect, device number 13 [ 230.560341][T11326] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 230.564396][T11326] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 230.642037][T11330] sg_write: data in/out 1265126/1 bytes for SCSI command 0x32-- guessing data in; [ 230.642037][T11330] program syz.7.1561 not setting count and/or reply_len properly [ 230.694566][T11332] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 230.749458][T11333] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 231.209904][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1563'. [ 231.380620][T11349] deleting an unspecified loop device is not supported. [ 231.656361][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1566'. [ 231.662069][T11351] netlink: 'syz.6.1566': attribute type 1 has an invalid length. [ 231.667221][ T41] usb 11-1: USB disconnect, device number 9 [ 231.667962][T11351] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1566'. [ 232.232611][T11364] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 232.235538][T11364] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 232.444070][ T9973] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 232.545522][T11366] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 232.561516][T11366] kvm: pic: non byte read [ 232.566029][T11366] kvm: pic: level sensitive irq not supported [ 232.566384][T11366] kvm: pic: non byte read [ 232.573012][T11366] kvm: pic: level sensitive irq not supported [ 232.573306][T11366] kvm: pic: non byte read [ 232.579222][T11366] kvm: pic: level sensitive irq not supported [ 232.579494][T11366] kvm: pic: non byte read [ 232.614355][ T9973] usb 11-1: Using ep0 maxpacket: 32 [ 232.626663][ T9973] usb 11-1: unable to get BOS descriptor or descriptor too short [ 232.633350][ T9973] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 232.644757][ T9973] usb 11-1: config 8 has an invalid interface number: 188 but max is 0 [ 232.649086][ T9973] usb 11-1: config 8 has no interface number 0 [ 232.651236][ T9973] usb 11-1: config 8 interface 188 has no altsetting 0 [ 232.656671][ T9973] usb 11-1: string descriptor 0 read error: -22 [ 232.658632][ T9973] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.664649][ T9973] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 232.667350][ T9973] dw2102: su3000_power_ctrl: 1, initialized 0 [ 232.669207][ T9973] dvb-usb: bulk message failed: -22 (2/0) [ 232.673732][ T9973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.677491][ T9973] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 232.680036][ T9973] usb 11-1: media controller created [ 232.681658][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 232.683537][ T9973] dw2102: i2c transfer failed. [ 232.685211][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 232.687147][ T9973] dw2102: i2c transfer failed. [ 232.688664][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 232.690537][ T9973] dw2102: i2c transfer failed. [ 232.692014][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 232.693849][ T9973] dw2102: i2c transfer failed. [ 232.695508][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 232.697240][ T9973] dw2102: i2c transfer failed. [ 232.698824][ T9973] dvb-usb: bulk message failed: -22 (6/0) [ 232.700626][ T9973] dw2102: i2c transfer failed. [ 232.702158][ T9973] dvb-usb: MAC address: 02:02:02:02:02:02 [ 232.708853][ T9973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.716958][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 232.718768][ T9973] dw2102: command 0x0e transfer failed. [ 232.721192][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 232.723275][ T9973] dw2102: command 0x0e transfer failed. [ 232.829772][T11376] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 232.865193][T11376] md: array md0 already has disks! [ 232.923080][T11378] 9pnet_virtio: no channels available for device syz [ 232.939337][T11376] md: pers->run() failed ... [ 232.994209][T11376] md: could not open device unknown-block(1,2). [ 232.996971][T11376] md: error, md_import_device() returned -16 [ 233.034174][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 233.036808][ T9973] dw2102: command 0x0e transfer failed. [ 233.038620][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 233.040456][ T9973] dw2102: command 0x0e transfer failed. [ 233.042206][ T9973] dvb-usb: bulk message failed: -22 (1/0) [ 233.044275][ T9973] dw2102: command 0x51 transfer failed. [ 233.046136][T11362] dvb-usb: bulk message failed: -22 (5/0) [ 233.047972][T11362] dw2102: i2c transfer failed. [ 233.049541][T11362] retu-mfd 2-0002: Tahvo v0.1 found [ 233.051244][T11362] dvb-usb: bulk message failed: -22 (6/0) [ 233.053061][T11362] dw2102: i2c transfer failed. [ 233.057159][T11362] dvb-usb: bulk message failed: -22 (5/0) [ 233.059168][T11362] dw2102: i2c transfer failed. [ 233.061110][T11362] genirq: Flags mismatch irq 0. 00002000 (TAHVO) vs. 00215a00 (timer) [ 233.063775][T11362] retu-mfd 2-0002: Failed to request IRQ 0 for TAHVO: -16 [ 233.065989][T11384] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1575'. [ 233.069569][T11362] retu-mfd 2-0002: probe with driver retu-mfd failed with error -16 [ 233.072468][T11362] i2c i2c-2: new_device: Instantiated device tahvo at 0x02 [ 233.088596][ T9973] DVB: Unable to find symbol ds3000_attach() [ 233.090934][ T9973] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 233.126978][T11390] 9pnet_virtio: no channels available for device syz [ 233.144084][ T9973] rc_core: IR keymap rc-su3000 not found [ 233.145829][ T9973] Registered IR keymap rc-empty [ 233.147935][ T9973] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 233.157214][ T9973] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input35 [ 233.161866][ T9973] dvb-usb: schedule remote query interval to 150 msecs. [ 233.167051][ T9973] dw2102: su3000_power_ctrl: 0, initialized 1 [ 233.171559][ T9973] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 233.183124][ T9973] usb 11-1: USB disconnect, device number 10 [ 233.207082][ T9973] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 233.211794][T11396] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 233.359732][T11398] random: crng reseeded on system resumption [ 233.365244][T11398] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.593060][T11404] tmpfs: Unknown parameter 'grpquota_block_hardli' [ 233.666040][T11409] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.675613][T11409] kvm: pic: non byte read [ 233.678482][T11409] kvm: pic: level sensitive irq not supported [ 233.678860][T11409] kvm: pic: non byte read [ 233.683732][T11409] kvm: pic: level sensitive irq not supported [ 233.685441][T11409] kvm: pic: level sensitive irq not supported [ 233.693304][T11407] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.802956][T11407] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.815929][T11416] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 233.841601][T11418] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1586'. [ 233.854625][T11416] md: array md0 already has disks! [ 233.898936][T11416] md: pers->run() failed ... [ 233.901421][T11407] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.914182][T11416] md: could not open device unknown-block(1,2). [ 233.916185][T11416] md: error, md_import_device() returned -16 [ 233.970800][T11407] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.059082][ T5810] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.072900][T11431] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 234.085122][ T5810] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.088874][ T5810] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.094144][ T5810] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.404089][ T948] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 234.553390][T11451] __nla_validate_parse: 1 callbacks suppressed [ 234.553408][T11451] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1595'. [ 234.564168][ T948] usb 11-1: Using ep0 maxpacket: 32 [ 234.568149][ T948] usb 11-1: unable to get BOS descriptor or descriptor too short [ 234.570675][ T948] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 234.575607][ T5748] Bluetooth: hci1: unexpected event for opcode 0x203d [ 234.576301][ T948] usb 11-1: config 8 has an invalid interface number: 188 but max is 0 [ 234.580348][ T948] usb 11-1: config 8 has no interface number 0 [ 234.582391][ T948] usb 11-1: config 8 interface 188 has no altsetting 0 [ 234.589843][ T948] usb 11-1: string descriptor 0 read error: -22 [ 234.591815][ T948] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.600337][ T948] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 234.606041][ T948] dw2102: su3000_power_ctrl: 1, initialized 0 [ 234.607988][ T948] dvb-usb: bulk message failed: -22 (2/0) [ 234.614598][ T948] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 234.618480][ T948] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 234.621418][ T948] usb 11-1: media controller created [ 234.623672][ T948] dvb-usb: bulk message failed: -22 (6/0) [ 234.626577][ T948] dw2102: i2c transfer failed. [ 234.628616][ T948] dvb-usb: bulk message failed: -22 (6/0) [ 234.630876][ T948] dw2102: i2c transfer failed. [ 234.632820][ T948] dvb-usb: bulk message failed: -22 (6/0) [ 234.635384][ T948] dw2102: i2c transfer failed. [ 234.636916][ T948] dvb-usb: bulk message failed: -22 (6/0) [ 234.638768][ T948] dw2102: i2c transfer failed. [ 234.640311][ T948] dvb-usb: bulk message failed: -22 (6/0) [ 234.642167][ T948] dw2102: i2c transfer failed. [ 234.643679][ T948] dvb-usb: bulk message failed: -22 (6/0) [ 234.646539][ T948] dw2102: i2c transfer failed. [ 234.648531][ T948] dvb-usb: MAC address: 02:02:02:02:02:02 [ 234.660586][ T948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.677183][ T948] dvb-usb: bulk message failed: -22 (3/0) [ 234.679005][ T948] dw2102: command 0x0e transfer failed. [ 234.681341][ T948] dvb-usb: bulk message failed: -22 (3/0) [ 234.683191][ T948] dw2102: command 0x0e transfer failed. [ 234.994101][ T948] dvb-usb: bulk message failed: -22 (3/0) [ 234.995887][ T948] dw2102: command 0x0e transfer failed. [ 234.997910][ T948] dvb-usb: bulk message failed: -22 (3/0) [ 234.999721][ T948] dw2102: command 0x0e transfer failed. [ 235.001580][ T948] dvb-usb: bulk message failed: -22 (1/0) [ 235.003338][ T948] dw2102: command 0x51 transfer failed. [ 235.006230][T11435] dvb-usb: bulk message failed: -22 (5/0) [ 235.008461][T11435] dw2102: i2c transfer failed. [ 235.009924][T11435] retu-mfd 2-0002: Tahvo v0.1 found [ 235.011711][T11435] dvb-usb: bulk message failed: -22 (6/0) [ 235.013663][T11435] dw2102: i2c transfer failed. [ 235.016876][T11435] dvb-usb: bulk message failed: -22 (5/0) [ 235.018969][T11435] dw2102: i2c transfer failed. [ 235.020959][T11435] genirq: Flags mismatch irq 0. 00002000 (TAHVO) vs. 00215a00 (timer) [ 235.023700][T11435] retu-mfd 2-0002: Failed to request IRQ 0 for TAHVO: -16 [ 235.037179][ T948] DVB: Unable to find symbol ds3000_attach() [ 235.039027][ T948] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 235.043877][T11435] retu-mfd 2-0002: probe with driver retu-mfd failed with error -16 [ 235.060314][T11435] i2c i2c-2: new_device: Instantiated device tahvo at 0x02 [ 235.086339][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1602'. [ 235.089242][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1602'. [ 235.094574][ T948] rc_core: IR keymap rc-su3000 not found [ 235.096863][ T948] Registered IR keymap rc-empty [ 235.099292][ T948] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 235.104171][ T948] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input36 [ 235.108805][ T948] dvb-usb: schedule remote query interval to 150 msecs. [ 235.110950][ T948] dw2102: su3000_power_ctrl: 0, initialized 1 [ 235.112731][ T948] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 235.114130][ T5810] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.118051][ T5810] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.119930][ T948] usb 11-1: USB disconnect, device number 11 [ 235.126263][ T5810] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.128805][ T5810] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.159041][ T948] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 235.204106][ T5879] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 235.334102][ T5879] usb 12-1: device descriptor read/64, error -71 [ 235.437367][T11482] nvmet: adding nsid 1 to subsystem testsubsys [ 235.450850][T11484] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1604'. [ 235.458920][ T5748] Bluetooth: hci1: unexpected event for opcode 0x203d [ 235.492526][ T1157] nvmet: connect request for invalid subsystem testsubsys! [ 235.497676][T11482] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 235.574218][ T5879] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 235.678003][T11493] macvlan0: left promiscuous mode [ 235.680593][T11493] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 235.683157][T11493] bridge1: left promiscuous mode [ 235.684837][T11493] bridge1: left allmulticast mode [ 235.704116][ T5879] usb 12-1: device descriptor read/64, error -71 [ 235.796885][T11498] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 235.809594][T11502] overlayfs: failed to clone lowerpath [ 235.810792][T11498] picdev_read: 2 callbacks suppressed [ 235.810805][T11498] kvm: pic: non byte read [ 235.814954][ T5879] usb usb12-port1: attempt power cycle [ 235.821444][T11498] kvm: pic: level sensitive irq not supported [ 235.821758][T11498] kvm: pic: non byte read [ 235.821768][T11502] overlayfs: failed to clone lowerpath [ 235.825403][T11498] kvm: pic: level sensitive irq not supported [ 235.827302][T11498] kvm: pic: non byte read [ 235.831789][T11498] kvm: pic: level sensitive irq not supported [ 235.832065][T11498] kvm: pic: non byte read [ 236.053522][T11508] kvm: user requested TSC rate below hardware speed [ 236.155517][ T5879] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 236.185396][ T5879] usb 12-1: device descriptor read/8, error -71 [ 236.434184][ T5879] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 236.454883][ T5879] usb 12-1: device descriptor read/8, error -71 [ 236.566379][ T5879] usb usb12-port1: unable to enumerate USB device [ 236.944094][ T5879] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 237.011614][T11554] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 237.094062][ T5879] usb 11-1: Using ep0 maxpacket: 32 [ 237.098685][ T5879] usb 11-1: unable to get BOS descriptor or descriptor too short [ 237.104682][ T5879] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 237.111724][ T5879] usb 11-1: config 8 has an invalid interface number: 188 but max is 0 [ 237.119788][ T5879] usb 11-1: config 8 has no interface number 0 [ 237.121669][ T5879] usb 11-1: config 8 interface 188 has no altsetting 0 [ 237.136251][ T5879] usb 11-1: string descriptor 0 read error: -22 [ 237.142186][ T5879] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.157053][ T5879] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 237.169193][ T5879] dw2102: su3000_power_ctrl: 1, initialized 0 [ 237.171223][ T5879] dvb-usb: bulk message failed: -22 (2/0) [ 237.186424][T11560] FAULT_INJECTION: forcing a failure. [ 237.186424][T11560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.190420][T11560] CPU: 2 UID: 0 PID: 11560 Comm: syz.0.1618 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.190438][T11560] Tainted: [L]=SOFTLOCKUP [ 237.190442][T11560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.190448][T11560] Call Trace: [ 237.190452][T11560] [ 237.190457][T11560] dump_stack_lvl+0x100/0x190 [ 237.190475][T11560] should_fail_ex.cold+0x5/0xa [ 237.190488][T11560] _copy_from_user+0x2e/0xd0 [ 237.190503][T11560] vhost_net_ioctl+0x621/0x1910 [ 237.190521][T11560] ? do_vfs_ioctl+0x226/0x13e0 [ 237.190536][T11560] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 237.190552][T11560] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 237.190569][T11560] ? find_held_lock+0x2b/0x80 [ 237.190579][T11560] ? __fget_files+0x215/0x3d0 [ 237.190595][T11560] ? hook_file_ioctl_common+0x140/0x440 [ 237.190615][T11560] ? __fget_files+0x21f/0x3d0 [ 237.190631][T11560] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 237.190648][T11560] compat_ptr_ioctl+0x6e/0xa0 [ 237.190662][T11560] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 237.190675][T11560] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 237.190691][T11560] __do_fast_syscall_32+0x13a/0x8b0 [ 237.190705][T11560] ? lockdep_hardirqs_on+0x7d/0x110 [ 237.190719][T11560] do_fast_syscall_32+0x32/0x70 [ 237.190734][T11560] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.190748][T11560] RIP: 0023:0xf709efec [ 237.190760][T11560] Code: Unable to access opcode bytes at 0xf709efc2. [ 237.190764][T11560] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 237.190775][T11560] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004008af30 [ 237.190782][T11560] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.190789][T11560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.190795][T11560] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 237.190801][T11560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.190814][T11560] [ 237.213479][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.254876][ T5879] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 237.257714][ T5879] usb 11-1: media controller created [ 237.259446][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 237.261263][ T5879] dw2102: i2c transfer failed. [ 237.262836][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 237.264797][ T5879] dw2102: i2c transfer failed. [ 237.266465][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 237.268424][ T5879] dw2102: i2c transfer failed. [ 237.269983][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 237.271892][ T5879] dw2102: i2c transfer failed. [ 237.273484][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 237.276420][ T5879] dw2102: i2c transfer failed. [ 237.278083][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 237.280033][ T5879] dw2102: i2c transfer failed. [ 237.281585][ T5879] dvb-usb: MAC address: 02:02:02:02:02:02 [ 237.294731][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.311644][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 237.313437][ T5879] dw2102: command 0x0e transfer failed. [ 237.315460][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 237.317873][ T5879] dw2102: command 0x0e transfer failed. [ 237.326908][ T27] process 11550 (syz.3.1616) no longer affine to cpu1 [ 237.356153][ T27] ================================================================== [ 237.358636][ T27] BUG: KASAN: slab-use-after-free in irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 237.361176][ T27] Read of size 8 at addr ffff88806a5c21a8 by task migration/1/27 [ 237.364190][ T27] [ 237.365396][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.365413][ T27] Tainted: [L]=SOFTLOCKUP [ 237.365417][ T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.365424][ T27] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 237.365454][ T27] Call Trace: [ 237.365459][ T27] [ 237.365464][ T27] dump_stack_lvl+0x100/0x190 [ 237.365478][ T27] print_report+0x13d/0x4b0 [ 237.365494][ T27] ? __virt_addr_valid+0x239/0x430 [ 237.365508][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 237.365524][ T27] kasan_report+0xdf/0x1c0 [ 237.365536][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 237.365553][ T27] irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 237.365570][ T27] ? native_cpu_disable+0x54/0x80 [ 237.365585][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 237.365598][ T27] fixup_irqs+0x2b/0x280 [ 237.365612][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 237.365625][ T27] native_cpu_disable+0x59/0x80 [ 237.365640][ T27] take_cpu_down+0xb6/0x190 [ 237.365653][ T27] multi_cpu_stop+0x16a/0x4b0 [ 237.365669][ T27] ? __stop_cpus.constprop.0+0xb1/0x140 [ 237.365684][ T27] ? __pfx_multi_cpu_stop+0x10/0x10 [ 237.365699][ T27] cpu_stopper_thread+0x21e/0x450 [ 237.365715][ T27] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 237.365729][ T27] smpboot_thread_fn+0x3d3/0xab0 [ 237.365746][ T27] ? kthread+0x13a/0x450 [ 237.365755][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 237.365770][ T27] kthread+0x373/0x450 [ 237.365779][ T27] ? __pfx_kthread+0x10/0x10 [ 237.365788][ T27] ret_from_fork+0x730/0xd60 [ 237.365803][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 237.365818][ T27] ? __switch_to+0x800/0x10f0 [ 237.365829][ T27] ? __pfx_kthread+0x10/0x10 [ 237.365839][ T27] ret_from_fork_asm+0x1a/0x30 [ 237.365854][ T27] [ 237.365859][ T27] [ 237.421582][ T27] Allocated by task 10827: [ 237.422878][ T27] kasan_save_stack+0x30/0x50 [ 237.424258][ T27] kasan_save_track+0x14/0x30 [ 237.425645][ T27] __kasan_kmalloc+0xaa/0xb0 [ 237.427162][ T27] __kmalloc_noprof+0x32f/0x840 [ 237.428643][ T27] load_elf_phdrs+0x102/0x210 [ 237.430027][ T27] load_elf_binary+0x15ef/0x51a0 [ 237.431503][ T27] bprm_execve+0x8cd/0x1940 [ 237.432858][ T27] kernel_execve+0x31e/0x3a0 [ 237.434312][ T27] call_usermodehelper_exec_async+0x239/0x4b0 [ 237.436033][ T27] ret_from_fork+0x730/0xd60 [ 237.437395][ T27] ret_from_fork_asm+0x1a/0x30 [ 237.438860][ T27] [ 237.439585][ T27] Freed by task 10827: [ 237.440815][ T27] kasan_save_stack+0x30/0x50 [ 237.442205][ T27] kasan_save_track+0x14/0x30 [ 237.443613][ T27] kasan_save_free_info+0x3b/0x70 [ 237.445093][ T27] __kasan_slab_free+0x5f/0x80 [ 237.446573][ T27] kfree+0x22b/0x6d0 [ 237.447736][ T27] load_elf_binary+0x1fd7/0x51a0 [ 237.449193][ T27] bprm_execve+0x8cd/0x1940 [ 237.450530][ T27] kernel_execve+0x31e/0x3a0 [ 237.451845][ T27] call_usermodehelper_exec_async+0x239/0x4b0 [ 237.453563][ T27] ret_from_fork+0x730/0xd60 [ 237.454877][ T27] ret_from_fork_asm+0x1a/0x30 [ 237.456281][ T27] [ 237.457236][ T27] The buggy address belongs to the object at ffff88806a5c2000 [ 237.457236][ T27] which belongs to the cache kmalloc-1k of size 1024 [ 237.462716][ T27] The buggy address is located 424 bytes inside of [ 237.462716][ T27] freed 1024-byte region [ffff88806a5c2000, ffff88806a5c2400) [ 237.467977][ T27] [ 237.468941][ T27] The buggy address belongs to the physical page: [ 237.471470][ T27] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806a5c4800 pfn:0x6a5c0 [ 237.475360][ T27] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 237.478551][ T27] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 237.481882][ T27] page_type: f5(slab) [ 237.483439][ T27] raw: 04fff00000000240 ffff88801c042dc0 ffffea0001aca810 ffffea0001bb3c10 [ 237.486851][ T27] raw: ffff88806a5c4800 0000000000100001 00000000f5000000 0000000000000000 [ 237.490430][ T27] head: 04fff00000000240 ffff88801c042dc0 ffffea0001aca810 ffffea0001bb3c10 [ 237.493779][ T27] head: ffff88806a5c4800 0000000000100001 00000000f5000000 0000000000000000 [ 237.497213][ T27] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 237.500723][ T27] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 237.504132][ T27] page dumped because: kasan: bad access detected [ 237.506691][ T27] page_owner tracks the page as allocated [ 237.508971][ T27] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5732, tgid 5732 (syz-executor), ts 48673193775 [ 237.516530][ T27] post_alloc_hook+0xfd/0x120 [ 237.518448][ T27] get_page_from_freelist+0x110d/0x35b0 [ 237.520682][ T27] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 237.523074][ T27] new_slab+0xa9/0x6e0 [ 237.524737][ T27] refill_objects+0xe3/0x410 [ 237.526676][ T27] __pcs_replace_empty_main+0x35e/0x650 [ 237.528911][ T27] __kmalloc_node_noprof+0x6ad/0x880 [ 237.531027][ T27] qdisc_alloc+0xbb/0xb30 [ 237.532776][ T27] qdisc_create_dflt+0x93/0x490 [ 237.534809][ T27] dev_activate+0x64f/0xce0 [ 237.536695][ T27] __dev_open+0x490/0x8f0 [ 237.538482][ T27] __dev_change_flags+0x596/0x850 [ 237.540558][ T27] netif_change_flags+0x8d/0x160 [ 237.542625][ T27] do_setlink.isra.0+0x1ac4/0x3e60 [ 237.544756][ T27] rtnl_newlink+0x13c1/0x2620 [ 237.546652][ T27] rtnetlink_rcv_msg+0x95e/0xe90 [ 237.548665][ T27] page last free pid 5873 tgid 5873 ts 48645447487 stack trace: [ 237.551717][ T27] __free_frozen_pages+0x79f/0x10f0 [ 237.553807][ T27] qlist_free_all+0x47/0xf0 [ 237.555699][ T27] kasan_quarantine_reduce+0x1a0/0x1f0 [ 237.557927][ T27] __kasan_slab_alloc+0x69/0x90 [ 237.559944][ T27] kmem_cache_alloc_noprof+0x269/0x6a0 [ 237.562149][ T27] vm_area_alloc+0x1f/0x160 [ 237.564067][ T27] __mmap_region+0x103d/0x30b0 [ 237.565994][ T27] mmap_region+0x3db/0x6d0 [ 237.567798][ T27] do_mmap+0x12c7/0x1c30 [ 237.569467][ T27] vm_mmap_pgoff+0x28d/0x470 [ 237.571418][ T27] ksys_mmap_pgoff+0xe4/0x610 [ 237.573373][ T27] __x64_sys_mmap+0x125/0x190 [ 237.575329][ T27] do_syscall_64+0x121/0x770 [ 237.577196][ T27] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.579685][ T27] [ 237.580672][ T27] Memory state around the buggy address: [ 237.583020][ T27] ffff88806a5c2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 237.586290][ T27] ffff88806a5c2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 237.589465][ T27] >ffff88806a5c2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 237.592589][ T27] ^ [ 237.594544][ T27] ffff88806a5c2200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 237.597177][ T27] ffff88806a5c2280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 237.599909][ T27] ================================================================== [ 237.602539][ T27] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 237.605036][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.608291][ T27] Tainted: [L]=SOFTLOCKUP [ 237.609621][ T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.612699][ T27] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 237.615266][ T27] Call Trace: [ 237.616295][ T27] [ 237.617186][ T27] dump_stack_lvl+0x100/0x190 [ 237.618635][ T27] vpanic+0x553/0x970 [ 237.619991][ T27] ? __pfx_vpanic+0x10/0x10 [ 237.621635][ T27] ? __pfx_vprintk_emit+0x10/0x10 [ 237.623516][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 237.625742][ T27] panic+0xd1/0xe0 [ 237.627151][ T27] ? __pfx_panic+0x10/0x10 [ 237.628479][ T27] check_panic_on_warn.cold+0x19/0x34 [ 237.630128][ T27] end_report.part.0+0x3a/0x90 [ 237.631594][ T27] kasan_report.cold+0xe/0x18 [ 237.633005][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 237.634820][ T27] irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 237.636604][ T27] ? native_cpu_disable+0x54/0x80 [ 237.638130][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 237.639637][ T27] fixup_irqs+0x2b/0x280 [ 237.640950][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 237.642588][ T27] native_cpu_disable+0x59/0x80 [ 237.644082][ T27] take_cpu_down+0xb6/0x190 [ 237.645426][ T27] multi_cpu_stop+0x16a/0x4b0 [ 237.646809][ T27] ? __stop_cpus.constprop.0+0xb1/0x140 [ 237.648433][ T27] ? __pfx_multi_cpu_stop+0x10/0x10 [ 237.649950][ T27] cpu_stopper_thread+0x21e/0x450 [ 237.651527][ T27] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 237.653220][ T27] smpboot_thread_fn+0x3d3/0xab0 [ 237.654746][ T27] ? kthread+0x13a/0x450 [ 237.656061][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 237.657752][ T27] kthread+0x373/0x450 [ 237.659037][ T27] ? __pfx_kthread+0x10/0x10 [ 237.660468][ T27] ret_from_fork+0x730/0xd60 [ 237.661931][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 237.663510][ T27] ? __switch_to+0x800/0x10f0 [ 237.664960][ T27] ? __pfx_kthread+0x10/0x10 [ 237.666394][ T27] ret_from_fork_asm+0x1a/0x30 [ 237.667889][ T27] [ 238.732432][ T27] Shutting down cpus with NMI [ 238.734653][ T27] Kernel Offset: disabled [ 238.735988][ T27] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:21:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=ffff88801cb4cb00 RSI=ffffffff8206c579 RDI=ffffffff8bed5970 RBP=ffffc90002cbf894 RSP=ffffc9000045fd28 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000003 R11=0000000000000000 R12=ffffc90002cbf870 R13=fffff52000597f12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff8206c57b RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096982000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f72bea66 CR3=000000004ad67000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ab23f5 RDI=ffffffff9bc351c0 RBP=ffffffff9bc35180 RSP=ffffc90000557658 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000006e R14=ffffffff9b9341ef R15=ffffffff85ab2390 RIP=ffffffff85ab241f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a82000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7268b50 CR3=000000000eb94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=ffff88801cf32580 RSI=ffffffff8206c579 RDI=ffffffff8bed5970 RBP=ffffc90002cbf894 RSP=ffffc900004ffd30 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000003 R11=0000000000000000 R12=ffffc90002cbf870 R13=fffff52000597f12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff8206c756 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b82000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fca190 CR3=00000000651ee000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff81d0aef2 RDX=0000000000000001 RSI=0000000000000000 RDI=ffff88801cff8000 RBP=00000000000036b0 RSP=ffffc900005afcf0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000003 R11=0000000000000000 R12=00000000ffffdd5c R13=ffffffff8ea0f280 R14=00000000ffffe728 R15=0000000000000003 RIP=ffffffff820a8050 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c82000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74543f4 CR3=000000006e6ab000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000