last executing test programs: 11m49.898748388s ago: executing program 2 (id=214): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2b121, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20, 0xfffffffffffffffe, 0x0, {0xfffffffc, 0x0, 0xb, 0xffff4fd1}}, 0x20) 11m49.35925185s ago: executing program 2 (id=220): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x4119, 0x869e, 0xc, 0x0, 0x0) io_uring_enter(r1, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0x52, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x2, 0xda4, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0xde}}}, 0x0) syz_io_uring_complete(r2, r3) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000380)={0x3, 0x1}) io_uring_enter(r1, 0x20, 0x20, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x4e, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) 11m48.414804997s ago: executing program 2 (id=224): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0xffffffffffffffbd) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 11m47.519527405s ago: executing program 2 (id=227): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x2, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x8, 0x8000) ioctl$USBDEVFS_RESET(r1, 0x5514) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r2, 0x0}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 11m47.369130497s ago: executing program 2 (id=230): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='tcp 2', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000002dc0)={0x2020}, 0x2020) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1, 0x0) 11m45.692862115s ago: executing program 2 (id=237): timer_create(0x0, &(0x7f00000004c0)={0x0, 0x11, 0x0, @thr={&(0x7f0000000300), &(0x7f00000003c0)="629ec53e0334996b4d07f69abad16b73ccff37b9ed15f9f994cfe60dc20bd6895fd7500c32ed1c1d9b01cfaf589429e1f687433223b57d3670443e8a11772784aadcd3faaf870fff28a9be2b03e68f7bec19cf6c720f8e6e98c43f5c5bd04fcddc04a286ed01cbe10b783cf97a3769db9cc9d1c4e87bcc2798253bc198e2593a46ffc4b5d5a0e88555f65fef5697ff9ada7651b75588a4b34cef9e6b020641143d0c"}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') landlock_restrict_self(0xffffffffffffffff, 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) prlimit64(0x0, 0x6, 0x0, 0x0) setreuid(0xee01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x1de, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x802, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 11m41.183260014s ago: executing program 1 (id=258): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$XFS_IOC_COMMIT_RANGE(r4, 0x40585883, &(0x7f0000000340)={r2, 0x0, 0x2, 0x6, 0xae48, 0x1, [0x5, 0x3ff, 0x7, 0x6989, 0x4, 0x8]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x5, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0x6000, 0xfffef001, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x83}, {0xdddd0000, 0xb000, 0x0, 0x35, 0x3, 0x0, 0x42, 0x0, 0x0, 0x0, 0x3}, {0xeeef0000, 0xe6e31000, 0x8, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x30000, 0x2000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26, 0x0, 0x0, 0x1}, {0x80a0000, 0x807}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0xfffffffffffffffc, 0x0, 0x0, [0x0, 0xe4, 0x1, 0x40]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 11m39.715680897s ago: executing program 1 (id=261): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000100000080000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000004000000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0xffffffffffffffbd) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61105c00000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916360000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc0) 11m36.108554813s ago: executing program 1 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) times(0xfffffffffffffffe) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x2, 0x8, 0xd780, 0xa1, 0x0, 0x6, 0x0}) sendmsg$nl_route(r1, 0x0, 0x4054) setns(0xc9, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r3, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000240), 0x4) bind$rds(r4, &(0x7f0000000440)={0x2, 0x4e22, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) exit(0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 11m34.910112322s ago: executing program 1 (id=271): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c6010203010902"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8f000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 11m21.026428578s ago: executing program 1 (id=282): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='tcp 2', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000002dc0)={0x2020}, 0x2020) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1, 0x0) 11m20.975298897s ago: executing program 1 (id=285): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000bd00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="0a1057d48a", 0x33fe0}], 0x1}}], 0x1, 0x48844) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000002100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001c80)={0x434, 0x3f4, 0x300, 0x70bd28, 0x25dfdbff, {0x3, 0x2, 0x1f, [0x7, 0xa7e, 0xffffffa7, 0x4, 0xfffff800, 0x8, 0x6, 0x3, 0x8, 0x8, 0x7, 0x2, 0x60000, 0x8, 0x10100, 0x2, 0x80000000, 0x1, 0x1, 0x8, 0x400, 0x8, 0x3, 0x8000, 0x9, 0x2, 0x80000000, 0xf, 0x2, 0x0, 0x8, 0x86c, 0x5, 0x1000, 0x44, 0xc8946d5, 0x0, 0x0, 0x9, 0x80, 0x1238, 0x80000000, 0x1ff, 0x7, 0x9, 0x3, 0x0, 0x3, 0x4, 0xe3, 0x0, 0x3, 0x80000000, 0x0, 0x4b9, 0x0, 0x6, 0x5, 0x10, 0xc4c, 0x7ff, 0x6, 0x407, 0x6], [0x9, 0x0, 0x8, 0x8, 0x8000, 0x7d90, 0x1, 0xffffff00, 0xcc14, 0x3, 0x1, 0x2, 0x4, 0x6, 0x6, 0x3, 0x0, 0x3, 0x81, 0x5000, 0x7, 0x10, 0x1, 0x5, 0x0, 0x8, 0x2, 0xd, 0x2, 0x1, 0x200, 0x9, 0x1, 0x400, 0x0, 0x6, 0xc, 0xfffffffc, 0xfffffffe, 0x3ff, 0x9, 0x40, 0x8, 0x7, 0x0, 0xfffffff8, 0x1, 0x9, 0x3, 0x101, 0x6, 0xfffffff9, 0x80, 0x3, 0x3, 0x0, 0xfba, 0x5, 0x4, 0x3, 0x28d5, 0x246, 0x800, 0x5], [0x0, 0x7, 0xb4b4, 0x9, 0x9, 0xe, 0x8, 0x5, 0x3, 0x22b, 0x703, 0x1, 0x8, 0x10001, 0x3, 0x1, 0xe, 0x4, 0x8000, 0x8000, 0x7, 0x10000, 0x7f, 0x7, 0x9, 0x6, 0x845f, 0x8, 0x0, 0x8, 0x52, 0x3, 0x1, 0x4, 0x5, 0x1, 0x5b02, 0x2, 0x6, 0xb, 0x3, 0x10, 0xfff, 0x4, 0xe39, 0x0, 0xffff, 0x8, 0x70c1, 0xe, 0x4, 0x7fffffff, 0x80, 0x6, 0x381, 0x7, 0x44, 0x9, 0x1, 0xff, 0x101, 0x8, 0x2, 0x9], [0x0, 0x9, 0x4, 0xffff, 0xb93, 0x9, 0xfff, 0x7fff, 0x6, 0x7, 0xc, 0xac81, 0x3, 0x1, 0x10, 0x33, 0x2, 0x1, 0x2f5f, 0x8, 0xfffffff7, 0x43ee, 0xfe000000, 0x3a8, 0xfffeffff, 0x8, 0x51, 0x0, 0xb, 0x3ff, 0x6, 0x37, 0x3ff, 0xc9a, 0x0, 0x6a, 0xffff, 0x4, 0xffffff61, 0x1, 0x7a, 0xb, 0x9, 0x9, 0x8, 0x40, 0x5b, 0xfffffffd, 0xad80, 0xd, 0x101, 0xffffffff, 0xbe5b, 0x0, 0x2, 0xfffffff7, 0x40, 0x8, 0x10000, 0xfffffffb, 0xfffffff9, 0x3, 0x7fffffff, 0x7], 0x12, [']\x00', '+\x04\x00', 'pipefs\x00', '&,/\x00', '$\x00']}, ["", "", "", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x40005}, 0x8090) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a00)={0x6, 0x9, &(0x7f0000001700)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000001780)='GPL\x00', 0x1, 0x82, &(0x7f00000017c0)=""/130, 0x41000, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000018c0)={0x5, 0xb, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001900)=[0x1], &(0x7f0000001940)=[{0x1, 0x5, 0xb, 0x5}, {0x5, 0x1, 0x4, 0x4}, {0x0, 0x4, 0xc, 0x5}, {0x5, 0x1, 0x9, 0x5}, {0x2, 0x2, 0x5, 0xb}, {0x5, 0x1, 0x4, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x1, 0x1, 0x3, 0x9}, {0x3, 0x1, 0xe}], 0x10, 0x8}, 0x94) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000080)="fd5f30", 0x3}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000440)={0x0, 0x80000001, 0x30}, 0xc) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) r5 = dup2(r3, r3) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4450, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b00)=@generic={&(0x7f0000001ac0)='./file0\x00', 0x0, 0x8}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0xa2277c09992ca69a, 0x2, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0xf}], &(0x7f0000000040)='syzkaller\x00', 0xffffff5e, 0x1000, &(0x7f0000000680)=""/4096, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000016c0)={0x5, 0x4, 0xb74a, 0x1}, 0x10, 0x0, r2, 0x1, &(0x7f0000001b40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r5, r6], &(0x7f0000001b80)=[{0x0, 0x5, 0x0, 0x2}], 0x10, 0x28eefd89}, 0x94) 11m20.969045032s ago: executing program 32 (id=237): timer_create(0x0, &(0x7f00000004c0)={0x0, 0x11, 0x0, @thr={&(0x7f0000000300), &(0x7f00000003c0)="629ec53e0334996b4d07f69abad16b73ccff37b9ed15f9f994cfe60dc20bd6895fd7500c32ed1c1d9b01cfaf589429e1f687433223b57d3670443e8a11772784aadcd3faaf870fff28a9be2b03e68f7bec19cf6c720f8e6e98c43f5c5bd04fcddc04a286ed01cbe10b783cf97a3769db9cc9d1c4e87bcc2798253bc198e2593a46ffc4b5d5a0e88555f65fef5697ff9ada7651b75588a4b34cef9e6b020641143d0c"}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') landlock_restrict_self(0xffffffffffffffff, 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) prlimit64(0x0, 0x6, 0x0, 0x0) setreuid(0xee01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x1de, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x802, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 11m20.79475587s ago: executing program 3 (id=293): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) 11m20.425790098s ago: executing program 3 (id=294): pause() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x8044) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x0, &(0x7f0000006680)) mmap(&(0x7f00000c3000/0x2000)=nil, 0x2000, 0x1000006, 0x810, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xb) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000002780)=@svm={0x1, 0x1, 0x1080, {0xdddd0000}, {"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"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 11m19.501650302s ago: executing program 3 (id=297): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x4119, 0x869e, 0xc, 0x0, 0x0) io_uring_enter(r1, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0x52, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x2, 0xda4, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0xde}}}, 0x0) syz_io_uring_complete(r2, r3) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000380)={0x3, 0x1}) io_uring_enter(r1, 0x20, 0x20, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x4e, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) 11m19.288244956s ago: executing program 3 (id=298): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0xffffffffffffffbd) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 11m18.576600713s ago: executing program 3 (id=300): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='tcp 2', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000002dc0)={0x2020}, 0x2020) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1, 0x0) 11m17.884895073s ago: executing program 3 (id=301): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000100000080000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000004000"/25], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0xffffffffffffffbd) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc0) 11m15.861384752s ago: executing program 33 (id=285): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000bd00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="0a1057d48a", 0x33fe0}], 0x1}}], 0x1, 0x48844) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000002100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001c80)={0x434, 0x3f4, 0x300, 0x70bd28, 0x25dfdbff, {0x3, 0x2, 0x1f, [0x7, 0xa7e, 0xffffffa7, 0x4, 0xfffff800, 0x8, 0x6, 0x3, 0x8, 0x8, 0x7, 0x2, 0x60000, 0x8, 0x10100, 0x2, 0x80000000, 0x1, 0x1, 0x8, 0x400, 0x8, 0x3, 0x8000, 0x9, 0x2, 0x80000000, 0xf, 0x2, 0x0, 0x8, 0x86c, 0x5, 0x1000, 0x44, 0xc8946d5, 0x0, 0x0, 0x9, 0x80, 0x1238, 0x80000000, 0x1ff, 0x7, 0x9, 0x3, 0x0, 0x3, 0x4, 0xe3, 0x0, 0x3, 0x80000000, 0x0, 0x4b9, 0x0, 0x6, 0x5, 0x10, 0xc4c, 0x7ff, 0x6, 0x407, 0x6], [0x9, 0x0, 0x8, 0x8, 0x8000, 0x7d90, 0x1, 0xffffff00, 0xcc14, 0x3, 0x1, 0x2, 0x4, 0x6, 0x6, 0x3, 0x0, 0x3, 0x81, 0x5000, 0x7, 0x10, 0x1, 0x5, 0x0, 0x8, 0x2, 0xd, 0x2, 0x1, 0x200, 0x9, 0x1, 0x400, 0x0, 0x6, 0xc, 0xfffffffc, 0xfffffffe, 0x3ff, 0x9, 0x40, 0x8, 0x7, 0x0, 0xfffffff8, 0x1, 0x9, 0x3, 0x101, 0x6, 0xfffffff9, 0x80, 0x3, 0x3, 0x0, 0xfba, 0x5, 0x4, 0x3, 0x28d5, 0x246, 0x800, 0x5], [0x0, 0x7, 0xb4b4, 0x9, 0x9, 0xe, 0x8, 0x5, 0x3, 0x22b, 0x703, 0x1, 0x8, 0x10001, 0x3, 0x1, 0xe, 0x4, 0x8000, 0x8000, 0x7, 0x10000, 0x7f, 0x7, 0x9, 0x6, 0x845f, 0x8, 0x0, 0x8, 0x52, 0x3, 0x1, 0x4, 0x5, 0x1, 0x5b02, 0x2, 0x6, 0xb, 0x3, 0x10, 0xfff, 0x4, 0xe39, 0x0, 0xffff, 0x8, 0x70c1, 0xe, 0x4, 0x7fffffff, 0x80, 0x6, 0x381, 0x7, 0x44, 0x9, 0x1, 0xff, 0x101, 0x8, 0x2, 0x9], [0x0, 0x9, 0x4, 0xffff, 0xb93, 0x9, 0xfff, 0x7fff, 0x6, 0x7, 0xc, 0xac81, 0x3, 0x1, 0x10, 0x33, 0x2, 0x1, 0x2f5f, 0x8, 0xfffffff7, 0x43ee, 0xfe000000, 0x3a8, 0xfffeffff, 0x8, 0x51, 0x0, 0xb, 0x3ff, 0x6, 0x37, 0x3ff, 0xc9a, 0x0, 0x6a, 0xffff, 0x4, 0xffffff61, 0x1, 0x7a, 0xb, 0x9, 0x9, 0x8, 0x40, 0x5b, 0xfffffffd, 0xad80, 0xd, 0x101, 0xffffffff, 0xbe5b, 0x0, 0x2, 0xfffffff7, 0x40, 0x8, 0x10000, 0xfffffffb, 0xfffffff9, 0x3, 0x7fffffff, 0x7], 0x12, [']\x00', '+\x04\x00', 'pipefs\x00', '&,/\x00', '$\x00']}, ["", "", "", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x40005}, 0x8090) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a00)={0x6, 0x9, &(0x7f0000001700)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000001780)='GPL\x00', 0x1, 0x82, &(0x7f00000017c0)=""/130, 0x41000, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000018c0)={0x5, 0xb, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001900)=[0x1], &(0x7f0000001940)=[{0x1, 0x5, 0xb, 0x5}, {0x5, 0x1, 0x4, 0x4}, {0x0, 0x4, 0xc, 0x5}, {0x5, 0x1, 0x9, 0x5}, {0x2, 0x2, 0x5, 0xb}, {0x5, 0x1, 0x4, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x1, 0x1, 0x3, 0x9}, {0x3, 0x1, 0xe}], 0x10, 0x8}, 0x94) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000080)="fd5f30", 0x3}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000440)={0x0, 0x80000001, 0x30}, 0xc) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) r5 = dup2(r3, r3) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4450, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b00)=@generic={&(0x7f0000001ac0)='./file0\x00', 0x0, 0x8}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0xa2277c09992ca69a, 0x2, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0xf}], &(0x7f0000000040)='syzkaller\x00', 0xffffff5e, 0x1000, &(0x7f0000000680)=""/4096, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000016c0)={0x5, 0x4, 0xb74a, 0x1}, 0x10, 0x0, r2, 0x1, &(0x7f0000001b40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r5, r6], &(0x7f0000001b80)=[{0x0, 0x5, 0x0, 0x2}], 0x10, 0x28eefd89}, 0x94) 11m2.770262184s ago: executing program 34 (id=301): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000100000080000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000004000"/25], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0xffffffffffffffbd) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc0) 3m31.715881924s ago: executing program 6 (id=2523): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0/file1\x00', 0x0) socket$inet_sctp(0x2, 0x0, 0x84) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') unshare(0x4000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0xa2) write(r2, &(0x7f0000000200)='of', 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x6, 0x371, &(0x7f0000001980)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_snmp6\x00') getdents64(r3, &(0x7f0000000340)=""/24, 0x18) getdents64(r3, &(0x7f00000007c0)=""/122, 0x7a) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2001, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setrlimit(0x1, &(0x7f0000000100)={0x4, 0x1401}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 3m30.345652311s ago: executing program 6 (id=2528): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0xffffffffffffffff, 0x4, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000100)=[0x7, 0x7fffffff, 0x400, 0x6, 0x7, 0x5007, 0x4da11d3, 0x3ff], &(0x7f0000000180)=[0x0], 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x2, 0x0, 0x1}, 0x8) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c0100001000070028bd7000000000000a01010200000000000000fc0100000000000000000000000000014e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff01"], 0x10c}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x2c, 0x11, 0x300, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff1}, {0x7, 0xa}}, [{0x8, 0xb, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048080}, 0x4008008) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./bus\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18020000040071fc0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') 3m29.868217688s ago: executing program 6 (id=2530): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x890) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000280)=""/89, 0xfffffffffffffc73, 0x0, 0x0, 0x2}}, 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0xa, 0x0, @val=@tracing={0xffffffffffffffff, 0x8}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r2, r1, 0x4, r1}, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r5, r6, 0x0, 0x8000fb00) 3m28.831234008s ago: executing program 6 (id=2532): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x428, 0x2e8, 0x2e8, 0x428, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x11, "426032c3ab8127c5db503fb2f3b84e9178bd78efd80c7622141c33e6a966"}}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x82f9b29e, {0x5693}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m27.766613549s ago: executing program 6 (id=2536): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002100)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = fanotify_init(0x200, 0x0) writev(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000040)={0x10000, 0x1f000}) fsetxattr$system_posix_acl(r5, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x8001, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) ioprio_get$pid(0x1, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000) 3m27.435992998s ago: executing program 6 (id=2540): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x3, 0xf8}}}, 0xc) syz_clone(0x842a4011, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x20}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000014000000080000e5000000008000d791f7a62c2e46b50000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100}, 0x94) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ee) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4604070001010000000000000002000600030000000903000038000000ce0000000e0000000b002000010005000500000000f30000007f00000004"], 0x58) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x101300) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000240)=""/158) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) r3 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0x0) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000200)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x2000000a}}, 0x10) close_range(r5, r5, 0x0) 3m27.411572583s ago: executing program 35 (id=2540): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x3, 0xf8}}}, 0xc) syz_clone(0x842a4011, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x20}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000014000000080000e5000000008000d791f7a62c2e46b50000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100}, 0x94) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ee) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4604070001010000000000000002000600030000000903000038000000ce0000000e0000000b002000010005000500000000f30000007f00000004"], 0x58) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x101300) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000240)=""/158) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) r3 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0x0) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000200)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x2000000a}}, 0x10) close_range(r5, r5, 0x0) 4.065523034s ago: executing program 4 (id=3542): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/87, 0x57, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x733, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102481, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r6, &(0x7f0000000140)='add 1', 0x5) write(r6, &(0x7f0000000180), 0x0) write(r6, &(0x7f00000001c0)='add 3', 0x5) write(r6, &(0x7f0000000240), 0x0) write(r6, &(0x7f0000000300)='add 8', 0x5) write(r6, &(0x7f0000000340)='add 1-', 0x6) write(r6, &(0x7f0000000380)='add 2-', 0x6) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}}, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) 3.862164436s ago: executing program 4 (id=3543): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/87, 0x57, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x733, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102481, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r6, &(0x7f0000000140)='add 1', 0x5) write(r6, 0x0, 0x0) write(r6, &(0x7f00000001c0)='add 3', 0x5) write(r6, &(0x7f0000000240), 0x0) write(r6, &(0x7f0000000300)='add 8', 0x5) write(r6, &(0x7f0000000340)='add 1-', 0x6) write(r6, &(0x7f0000000380)='add 2-', 0x6) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}}, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) 3.657237731s ago: executing program 4 (id=3544): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg$unix(r3, &(0x7f0000001c80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/74, 0x4a}, {&(0x7f0000001a40)=""/71, 0x47}, {&(0x7f0000000700)=""/67, 0x43}, {&(0x7f0000000100)=""/47, 0x2f}], 0x4, &(0x7f0000000900)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/32, 0x20}, {&(0x7f0000000ac0)=""/9, 0x9}, {&(0x7f0000000b00)=""/76, 0x4c}], 0x3, &(0x7f0000000bc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000cc0)=""/109, 0x6d}, {&(0x7f0000000d40)=""/169, 0xa9}, {&(0x7f0000000e00)=""/131, 0x83}, {&(0x7f0000000ec0)=""/170, 0xaa}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)=""/159, 0x9f}, {&(0x7f0000001080)=""/70, 0x46}, {&(0x7f0000001100)=""/142, 0x8e}, {&(0x7f00000011c0)=""/193, 0xc1}, {&(0x7f00000012c0)=""/30, 0x1e}], 0xa}}, {{&(0x7f0000001380), 0x6e, &(0x7f0000001580)=[{&(0x7f0000001400)=""/240, 0xf0}, {&(0x7f0000001500)=""/73, 0x49}], 0x2, &(0x7f00000015c0)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x114}}, {{&(0x7f0000001700), 0x6e, &(0x7f0000001900)=[{&(0x7f0000001780)=""/182, 0xb6}, {&(0x7f0000001840)=""/182, 0xb6}], 0x2, &(0x7f0000001940)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f00000019c0), 0x6e, &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x110}}], 0x6, 0x10041, &(0x7f0000001d40)) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="050000000000000071112400000000008510000002000000850000000e00000095000000000000009500a50500000000b043b21cb5761ce46a63ea6d3debad9455bc03c95227792d5e5b0225d3d7d624f7464408aba81d0688b23629f88994e76fbb6cb751178eca84adf1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.295871063s ago: executing program 5 (id=3546): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x3, 0xf8}}}, 0xc) syz_clone(0x842a4011, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x20}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000014000000080000e5000000008000d791f7a62c2e46b50000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100}, 0x94) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ee) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4604070001010000000000000002000600030000000903000038000000ce0000000e0000000b002000010005000500000000f30000007f00000004"], 0x58) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x101300) ioctl$EVIOCGKEYCODE(r1, 0x80084504, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) r3 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0x0) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x2000000a}}, 0x10) close_range(r5, r5, 0x0) 3.063933651s ago: executing program 5 (id=3547): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) vmsplice(r6, &(0x7f00000000c0), 0x0, 0xb) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000540)={0x0, 0xb3, 0x67}, &(0x7f0000000580)={'enc=', 'raw', ' hash=', {'wp384-generic\x00'}}, &(0x7f0000000600)="fce71d2874b3274313d8761462fe1eab01ad4e5150106b24cc376ba0c77ea180370375353657fcefe93fb5574281c3223542dbb13524bc03dc8aff8c9ad8ab78e12277fe2e5592338a8a57ae64554eca1929eec74d2edc4b26ac9d7629682c7bbf36bd5c83095c5dcddc62595ecd779f9d0b17402408d5b072556bf91d1bd066eea0411e7ad881d26d2fa94085b3287f05824a65c552bdb73da4ddf4f6b40df5948918ebe1cb33f9655bc450c84a909dc5e6a6", &(0x7f00000006c0)=""/103) recvmmsg(r6, &(0x7f0000001000), 0x0, 0x12180, &(0x7f0000001080)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x401) 3.050629997s ago: executing program 7 (id=3548): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) sendmsg$inet(0xffffffffffffffff, 0x0, 0xfffe) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) dup(r1) flistxattr(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x800, 0x7fff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000002c0)="5ccd31c2a8d829282236a0f185847d463952cce55e21f83e0207acfc3bedd1c966af06afbbcf678e5213bf6ad59727ec1a5fd09d27754a000feebf19c36d8b20c1fc744388f2316fe8c1e43b97fe0b61a279f13b64e3b88d206babe22cb47162fd963980342dc3a55ea12a0142347707d00eb51b6f0939b81daef5f3cd188b4a0f", 0x81) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f00000000c0)=0x8e, 0x8) listen(r3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_SETRSUBD(r4, 0x6410) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r3, 0x0, 0x0, 0xc00) sendto(r7, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 2.086219682s ago: executing program 7 (id=3550): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./export_dir\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='* ./export_dir', 0xe) 2.084896382s ago: executing program 5 (id=3551): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/87, 0x57, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x733, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102481, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r6, &(0x7f0000000140)='add 1', 0x5) write(r6, &(0x7f0000000180), 0x0) write(r6, &(0x7f00000001c0)='add 3', 0x5) write(r6, &(0x7f0000000240), 0x0) write(r6, &(0x7f0000000300)='add 8', 0x5) write(r6, &(0x7f0000000340)='add 1-', 0x6) write(r6, &(0x7f0000000380)='add 2-', 0x6) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}}, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) 2.050384668s ago: executing program 7 (id=3552): ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffff7fa]}, 0x8, 0x800) syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x3208}}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='Ed', 0x0, r0) socket$key(0xf, 0x3, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000ac1414000000000200000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000ae4f58741d2567c421f48ec91fcdea3c843efaa03dba50f7230ac216287364fe16d6763bee4b29b4a00c8c5865690211e8adeda83c8344d7201fbf05761ab6943534463fe52a552973ca2e3b8dd3eaf130bdecbca04060e991fa467454aa51c7523b8dee6df061a6500ff0277bdd6583a9f1c43bb0bf7ffeec0dc7b53f6a3490ead3e03187c0eba7055518e0c30c"], 0x50}}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x14, 0x2, 0x9, 0x46, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x0, 0x723, 0x400, 0x1, 0x13, 0x100, 0x2, 0x66, 0x34d, 0x5, 0x402, 0x9, 0x200, 0xe2df, 0x8, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6]}) r9 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$CDROMVOLCTRL(r9, 0x530a, &(0x7f00000000c0)={0x10, 0xa2, 0x1, 0x8}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)={0x34, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x4, 0x1c}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bind$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) write$tun(r11, 0x0, 0x0) syz_emit_ethernet(0x8e, 0x0, 0x0) 1.914908465s ago: executing program 5 (id=3553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0xa, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x78daf4b7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x3, 0x32d, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff}}}, &(0x7f0000000180)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, 0x78}, 0x1, 0x7}, 0x0) ioctl$UBLK_U_CMD_DEL_DEV(0xffffffffffffffff, 0xc0207505, &(0x7f00000001c0)={0x0}) ioctl$UBLK_U_CMD_START_USER_RECOVERY(r1, 0xc0207510, &(0x7f00000003c0)={r3}) 1.806353562s ago: executing program 5 (id=3554): syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) r1 = getpgid(0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000640)=""/207, &(0x7f0000000740)=0xcf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) memfd_create(&(0x7f00000003c0)='%\x00\xae\xdb\xb8\x18\xc1\xecWbNO\xde^\xff\x19\x17QE{*X\xe3\xe2\x06\x00\x00\x00\xcc\xf6\xc0H\xa2\x83?\xe7\x89*\xf1\xc5b\v\xec\xe4\xb0\xa2\xc5\xee\x04\x98\xa9\xb9\xe5\x8c\xc3\x97B\xaa+\xf2o\xf6k\xcc\xf7\x057\x8d\xb1\xa0\x86\xe8\xda\x90\xc2\x1e\x15\x11\x92\x9d\xc1M\xe5@\v\x001\xae\x19$\xf8\x96\x81\xcbR\xae`\xd3\xf8_R~7\xf5\x1c\xc8\xf9\xe2z\x00<\xdc\x11\x89\xc9&f\x00\x00\x00\xe2\x83\xf1\x0eg\a\xec\xac\xa5\x94~v\x80P5\xf9/$', 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x38}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32], 0x2c}}, 0x4000000) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000881}, 0x4c004) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x19, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x3, 0x4c, &(0x7f00000004c0)=""/76, 0x0, 0x70, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r9, 0x4048587b, &(0x7f0000000c40)={{0xffffffffffffffff, 0x0, 0x109e40, &(0x7f0000000880)={@align=0x3, {0x8000, 0x6, 0xfffffffb, 0xa1}}, 0x3, 0x0, 0x0}, 0x0, &(0x7f0000000bc0)}) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.770750559s ago: executing program 0 (id=3555): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x3, 0xf8}}}, 0xc) syz_clone(0x842a4011, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x20}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000014000000080000e5000000008000d791f7a62c2e46b50000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100}, 0x94) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ee) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4604070001010000000000000002000600030000000903000038000000ce0000000e0000000b002000010005000500000000f30000007f00000004"], 0x58) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x101300) ioctl$EVIOCGKEYCODE(r1, 0x80084504, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) r3 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0x0) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000200)) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x2000000a}}, 0x10) close_range(r5, r5, 0x0) 1.59021495s ago: executing program 4 (id=3556): mkdir(0x0, 0xb) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) unlink(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x145) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x14000000, 0x1c6a8b68, 0x800006}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000380)={0x1, r3, r2}) (fail_nth: 1) bind$inet(0xffffffffffffffff, 0x0, 0x0) 1.262095662s ago: executing program 4 (id=3557): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xeaac6000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) getsockopt(r2, 0xff, 0x1, 0x0, 0x0) r3 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r5, &(0x7f00000059c0)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x800, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x2, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded147e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd2bf35239d2", "4f000000dd9d9ac2f63a7ad700", [0x5]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r7, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r9, r10, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r11, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r7, &(0x7f000000a3c0)="428a6ce66c433e7d6473d37a71716ae84216bc67277f3e9626c032a88a7acfd09ce24f4255f37078d380c6723d7aacdc3e0220c069b0e3a64d5f03936770166422985d1b36eaea3166a4f1403dceba822af78c5c09a45e2174bb51f6e9f11deea936b040d91598d4aa373bf4c5765a17e6c33ddad61487bdd32e3e58af5741f560b4b08b02d3254eef9fe9b2f0bdbddffe42ca87595f21dd7ff6c3d5754346b6414d2d7dbb41f5de3181ef343faa894a332cfc895ad40b048dc597478a761ef691d4bad54af2c711334532ad94c6017b49990e1f01bedefed1eea35deff92249b09a7a5d762d4fef1fd20bd95c3fa810d6d99cc5b8c2dd70a8a62ddd217e069cb29c9e7ef5bec625b3a303188d8cad4f423eb71a4aee6bf69c9cf73f0884a277a9d2d39449053d13952eea2b4de2e61715f0b878bb42d48642399e4e5ff2ea4daf9bf21c73ce7d767db0171cb6d436bd0c3ea93920700e0cf64731f7cafb172b0866fbbfaacc940639d6741bb7e4c7ce69dd1a815387838b081b1d9a04bf6192bc0e8d4e16a8da6ff83df1bead9f6218e4684b78026a0b49a2a89d3f05549b12e8b07734ab867c41a9401abc9c3fc6cab66e57eaa9513fd491384a2c65715abadf29aa1036a4b78e47ecb95d76884b23fe89a251626e1c5d827dc1d96f83d6e524a93561fc1d43ceb28b9dc5b476cd0c6ee51f4f37b7792f9b5d862d69184830ab80a5fb6a53729cbef25d612640b688b72c9d77c83538ae181d2065250858adc72786027103a8e1a2d098a33f1a130db154925a8aef6c4752d6262932dc3cd957a9a91ba1021c726b8b16b0027ebf48e9f2f19bc82ac3f6743d584a5f3d3679487925157d5fee7280cac2a26934e35942c4ce233fe962bbc76b7efe9587b564b0b91f6f75c4ff570ccf8e5b15b09ca095ddcff7fef94e28cefbd1592fc30484b142838263ed9b72ee93e9db0dc0d7c60a750d80d90aa7f0fdfa3603aeb92e6f0166ae30ff4225e90ccd2d0fa3bf89407e1c038124bd628bbd864469b5b77eacd7af14a42487bd0bfd6b2fb1962d63d427ef318fc01dfac3c476611209fb2c0e599c62da902c0900b18b91c6d7f2637c5da80900d07557ff62563ae8d84537485d7102e86990476cf34acbb42b2683a247d64788c0500179d0452e879c6263c4a82bb10987dade8c195eaf8368daed13b2f46e62de7e72c5189868372f081b72e48871e6598e5076997755e6d70c8c78b8ff937003e9558b0e7809ca260bac8d2c165818287cfdf7eab197cbe17b9ecb556931dbb2494b4290ab1eed4d00fd4c3c88f942c57b70ccd9e618872d658111c25a7ca4f271fa92ba1f8bb3d625ebdf2c0635b74c6d10e1c67116eee87687974d1be802b883ce2e05296831cf0552454f0b6a1a29ff2d5ac9af44f10817d063142327170f30d15fb49baa3506313f4c859e23dd153d5fa303df32fd52d0c6e27db0860c2cd00128e3fcb7f63832ac42a507b83fa587049fec1cb4b171236835d1ffc2645686edc9e9b5233a38020ba84c7d3744a5041eb4056d0be3fe6a6ed2a9c87ae8c1010a7ae9a08b189cb10b989358f0d9b5501b31b876fa8e78e591d29e82ff391c913c6894b9dc7aee2fba54a03f020473abcaf75ca71b48e43a195de1be70e30895c34fce11dbcaa81d55f674fe84d2ddcfbcb6cda65c206c0d48e73e2d23c16d8871e409313177c564dfc98ae86ff903e1e37a5c7cc1f5e8ba7f2ea4fb2974a1af29d84d4470ab769eda38506d8a5dc6b7dadafd94847ee26ca5e8221e0269147828fb569a0873b50d9b82a698a58b04aaa3c0f39e76b8f5def74ac1921ffce7bd2d5c9e3ae3e1b78040c7492be0854e52ba0df6100c5bb6c1732a5fa989ddfd0713c12531856969f0cf40e4e6a3e7ec1491eb351967b9679cd733977d0cf8629fc7e32a668015de2a79c76e0ba30b1557acbc067a66630aff2d68409d59c04e0d507e88f35fd2d3af2eee43a06a69c963fd30b3606e08a172d2012ae8c7c25475249a3d8a2fb7aa48fec18893c8f8bde721ddae7d9444a5963007ebe36063515094d54f36de8b29877f2d6faf147d50beff0b5b5f17088452dd97c91d5872e3596cf2f26546e8009448ab45fd1351f09ea7138ae510512715692fa181483da711fa6a861c81d27ee0b8e2701c61c8e4844401e26e2136d9371e5edd223c98fcfe3d5ddf7e514ddde1be2450f64a6c6af79ff4ceb529cc573f178de2322d98091d81c0375e42dc600907c236cac3b3dd2a61dc706a228e803a54e4640cfdb318be734686e04e6deba7e85cd2bb5a2135c143cbc25d64d2e5a50df677f518cfdb178090b8be719e96b742d370f9ddfe4852ac3c9a3ca4d0f63ce5ffed0605c1efb72de7e5d79aa70aac1b1e7e622c6cc7732a2a08496d2d22191aa78a037c89f9c7620a7d3a9530f5b02fc460dbbc16b46d814d4c49c55771ba591daf6fe9300e8c2694c438da06383ea67ed6cb22cc1ead51c89a0eae2b221af22969b5e01be6b4ee752465b0b96e7c0bde2e2654260c63c7c711e23ceedfc7c8f60f94ddce5056684e3213e6e79ab800a9464d1c407ae07999d9a1733a075d10621f796aec1b93cfec393e609f6a317768fa6d90f450e3f77f54bbdc254806f22ae03933d72b0526b77679ddd89b1bbcfa7c0a97025dbc7f66e4fc99444ce2f1a9eff1b741de631ee206a53e1b53256c5722587b6722962576a0c519285f09e1a17df9d7da065b14d26d1fa50ec0c67dcae691eef2d581a262004c900243e1dfb39b8a5a8e0c8f565491895e4c589be089b32d0e92e0a6846885e39da03023197061b99c0b2304eb0a41ab1c99079fa99dbe1ad9b3930cbddaf433407b790a40d1669d8e764243488f53c9c5597320dc7abd32ae9e0207919cf2b9a955509f84f6c18e8aa676a13917fef06d65755ef538a624112d8c4f62c4ad4a1c6a39774fcac69fc0ff99e6d36bff208974ce4f08556032cb5b8ac3a75ad24a8f87b5d36119ea43aa37054b4e7d9bd68d5b0500e863464101185c7006082698afb70fba7a9a1db9a294019b195ee5364a77250a0742a0395d22397d57ec972f71955a6ab34f894ff08484a3565cd5e3a1793267cb186b40adb4056837843c90ad254814aae1d6e44406b148c829434fba7caa2c3db16ef5ac904f505a18b1f55c43f16591577ecbfdeaa960363c26f782335772f78a693fb8e45ed0418646e57b12d5ec9f96a4c400c96bc0f3a2b18eda4a279428bf34920a55e96c6d50d8c0f7e7728ec8667e39bba86664120fd688ea9f067f64e4d27ea53e14f8ee8560c347df20cf7ca4a7905420bab3e327fc875154a9e0f52596e86bdeadebaf6e79ad4bab8ec079720a414eb20f7938ccbf8204fe04c1b18f3f3e69b79bcd135f60d7c46c22cef7f8f72410516fc4be391c0c7f4a6f1063c0e739f91c757a34f3ff587051d4356c26bb0b2579b6096a912bf8cfdbc7d1d2adbc194441677c22ab17b108ea7f2491ab519f18d8ba2b20aefe1a694941050f27ec6ee6a2c230afac26dc93065f9cd52ca326378bf36e3260bdf011af695ebdb3b0fa321f80ced7d7024020e23d381474844019bf3f72a2afa6ebf43cd853b7852792b7b14a0e23f4ef42911e2c0748c44a8f2117e440c0ffda360d4f8252187b938dcc9b4eeacd97f374281ac31fefc69e6e8ac84300022f307c5c4e7fc96d3bbf8044e72c778ed85a3d02ca5fe9b15cc3245fae21f57a02383f06bfcc6a3b37a4b9df50baa1162b8669d7549e88b8731ec9e5e058d4e41150ce3d3acb17069d1c08519ca1d1896b843877b9c2beda2a5fa839930349e6331488cd3fa1dc8acd598767b03c5e633cdbbb7f84ae29ebbdf16751498cb6fabe81a50d0eea6887d8ed52b77448c1344647aed17903bb9f2ce08e03e73ddc8f94e27053b81066de7666004870094a5bc9902f866b191cad4603a17eb7c3d62bacbaa4ba524908517fb431f51f2777f7de4053113c5083358e696b9969f912376643aabe3b4a6ab9b6baf71f71673f5872f4367afeb514aa9647907776fc8527f48f75a87f8dbaaa59055753e89985864915ab8f323b1e6012009b49afa8201a3f6634882a5f88a9e6eece7a491a8f4652c32f27784d94d1ba715f6146b5ccb0ecb37109ddd4026d8af2c308f9d8475945d497ad5e0a47bcad2e70290c5085f886f3d58d2099b8e47012cb86e67eb3b760e15f345c001b4f950ea739762a752a22bfe0b9844660b92afb5a1fec179f155a95461230dce2607ffcfda4263907fa5053c6f84089677b8766daab786271d08eed53c228ee7d8c9a818c7aff7973dc86c1600a4e3decca6a6047e2e633e682425ec28e3a77dbb3a21fcd0aaf4b4826f5f9a99d52415faa21fc500d5c99a9bf5e43d7b11dd820975cddf18212df99a0166306e5e45d72c75a917ab0f844d35c2934af58e5b8a12e2e9a1f16925a3b342c3509e86885f3a487a5b74c94bdcb150a81f853b431a74cf47510e55f89da8e2089d07faacb650f64473dfbaf308264a361db8cccfdc4c80bf97c8c4bf9db7789c231e62c2878837c2e72585584de5d52c3f59fed0a4a14a8957279a8dcf8b6efa0e81f00c73b52f34eedf8f31840a0b18c9634570cfed3d7f4e13b78c0fcb16628d380de48e2807d884e9a46f7c2737e89cb7fbbff6491db2f9f6dafc248a5e417ba926304784be621e83db65dddb0b84141e5b97728a9bcd1b1916f9c2da403e86bd178a2ffb3a1f5d64253707f8f6da3ca22a00de18c8bb000384a38293da2ce968fc184b696fd5d26618b5d3b633145e971ff010ab9cbfb0f3173cf6f8016cdef01a2ed0921e3608f3e3e0a511a7480464638ecba810df33e2146a7f53258b440339d1eeb5e06eb94814d9fe24d835704cf34be75fc56f4bfb3f8355776f319095b1987a81dce624c6425d080258d355263224b888a8317782101769e1ec4874c20ff75b430037710bc9437234a791fc7606d9498f6c353af33adc0c92c53229574095a7988c59bfcda13bf1a4185fdd6318b250590aeedb15aeaccf049665316eb1873e4d5a4a7b686ec6279a987444c17927e530e598d5b5f672b88ff6f98fbc52b193053a516f19da80fb2873a49fb9cad5b037eaf9e9afd7c5a6bd0e3349c0aac078968f2655b789abc08b82af590bf7e3f1051188ad725dbff39c124915037afeccc741912def5645951b2ded95b29797da1ac40b16a3f89863047131e1d99879896db7d5e019bbbef6753752f665e0cbdb6473bf86da661e63ff8b0893de82ca786d08dd0a4b7f8cb9181aba271ef13bbb6d6b7ed79debf6105ac5a971dbae815ef10303b630cdfcd8ba9a0bcda0052a6c2a8a6135c6f466fc543d44a9e722bd2a3fc3d004e5f6430246c8e2fae6272cd238581412748d4ef37a404b7e4035a03a981be204606dec92a430c5cf303f663878c6b16215e63e41869496f634cdeced1475c47864e78a7cc398c06cd53d229ec08488651695ea5c018b00dcad9e48fdb8006fd38e1f53fcdea59aeb3570a1098659892d20b3be362edd0e587f4c3f78af67301c78e83b8aff103667709afd8968846caa34d9291fd549b4aaad4cc783042a117f3bdb009169eebde40bea76925218c7e964cd3e42c09220cbf27e2c253b3a4615af8039c4a713e9afb3dea376152cc9d011886674ca84f9aa413dc1ddc9936472bb7e9107c792da1dd56a7a396fd036f5caab4d4ffe35ee1f0771f3d04c9933a94aa0f28bc489bd81ad331a1cffaf1fcb44694bca71886978ac7ea1aeaf1e8cda64d195414c4da561a074ee28e2c983742477d7de8eeca587cf279aa948a037bd3b596862f928910d0d0e077c4949a0c7b340e41d41f5b217bd6ae4cb2b2a34561652978e64616863f56ffe91f896eb85823ade588333e6f9acccaeee63d0d4f19bf6eb58ce9311cfc1a731705e484ce612eba0bb81f89fe2ca223df2c3b9f37684c5d4419379e96e65830cff6e0e03c146f171cd9f9d287e8edc631d21887e7f63109dc9c57feb3cb3e67f3146c3d7c8735f73d5d6f038ed2ab29b6ab7a64aa936671d71a2a82abc41d907ec91d4aa187b53e1a5790974b3a65ef3e7f145b040a17991b287513c43ffc35d58440c200e1f5914f216dd2d8c1477bb7715dcb96b4ac12263e52bbf7869e82a0f1a2de61ac65af1e016f5cf811031c3ef2be67fc442114082688aba559ce993c523a9d60eb19245bca03dc2783fba384740295e86cdf6433ae624f0a84eea3d1d133f3cb8d3655601debfdfb89995aa86bdeaab4bf37ecd728958f32739030527b51532fad7ca3861ed5599568dbe9445f622b0a1cd9d5864544265752fecc10e874c2f1a0c6f11d5dc945696fcae70b50fdde191d0aafe50632a786dff3fd5f976aaa5af332156bc96c3c86a88f35f2ea876d050a0aeea72e61d57a988183bf3ff14508f825f86f2cb6742c809096c1c16a343e5e38be54b8426ed809e1ce15600b92f251ddfbc6244b82d3ec22bf888929a11cae3a145ece8ded5f0b63bb5f3928ea0a1996762b982e10394fb8a6b33bf62dc4a6f8f614ec856a9b1d790b9d06e675320afa41e1a465dcf6fbb49d737f66ff492f019b0c4b34f9dad26e088ec3b9019a19a78a6a25f7421702d87ce9d50415ecfb3cb4d5c6f3ed0c24ed3bc5dc7fcc26e54403d319a7e629664953aed9f96fa63f2b1aa9a6a066a12d004b7ec28bb92457ca3fd863745085bf6eb40794beb5363ccaf0371844a24252aae1e49ca4bac41961e7a155fb8938a01ba73ad66f55ce33c415a6c6b860021dbc61b0fbde29ad55556a11a7ca4c5a85b0608ca2a2a649ae7654974e8aca57c5d013a02de7f389245aba981d23fe4e115415d3f5c7a52951f122ef4ac3efd9783f6229576ee88e3320112e885038b17d9ce1847c84c972bf57b0cdbc30794b9f3ef626c897fb38db40141f8a0049a998524f90dec8e657289c49634e773e9d3e776b0fd14afcb3f54127d95f062c8078540efa31a11aaeffc8c68cd981ef531a1f166ea73c00590e1044db5e719947dabe2a8dff7ae0b8400a9fcdd6f5cf69250acec7b06ee2db86a45fc90bf5abeb90d1d11cb2b657475bac2a5cc4606fda1f19171fe63f72746d29a218cca87616d283fc5d35f0d36840bde80577ae91f1148960079d027a72a8084b5aebed10b201eacc4924bed0ca734772c8dbec33bc256cbbb08a80bbc4545d5b5ac9f610aa4ac32faa0bd741e6bc39c5840559a9a6de4646ff5b62ccaf3340985151203e885bfcffa11b9c77e0b42b903de4fd7db842135ea3efb1c227aa7eac69102b09832c6d5456315b894c15d706386a0cd336cb57dbd8b97fe4e03cba770ac356445449bc53754dcc18abee099ff5674c6637e433b448221bac334475f45ebaeabb3e0cc1d35164d501a75205253060c80db6c0e65b307375adeab281eb4433b3eccb1dc27d4e2db0b712dc21b0aafd05d07d59995f94d6b45070eee5174f54067871b29b02ec23fc2c6eb122fe690cbab49b040d48d9dc0217b9ac439001ad5ed7f73b673739010ca8b99ec3b2f1fb528e3db34c698fd5dee32794b31fd63c2b72f32bda74506e40b6f88e4495739f6c3863542ca7cb4ec69b5b48a3da1b808e9249c285811d6eb031ff7449e75f0ab1235c44bdadfb7f4549cc361f3d370831580269a2a0004596fb719dfe15faf4db82cf533f0e813e25e5ada6d06f235c695be58ae02bd0a05ea836d15faac2ceb330bd93abe5abe4355a4bcc00382845a0fee4d4c5b831cceb8d6c8bf543b18f34355a7d03e89be95f0ddce76625af30aa71a5090f7639f85accd686fce53abc71512a4289d14e992a64ad5303fb0fb1298648d268939136f1625039b472f0d144599290c909aa2924563a7ff5fd5cdaa5018e592e9b4853bcba57c34c1167f77dc7fc010a2fe8a8e3e82e5dfd8cbde7a73d1f0f84691b452c263ed4bf0fe336ab05910d42f95b8fe1b52421315d611b16820ae75089ddbc222edc1830a952c91180a6d3228d1e1fe823d908bfa4d24c1a6424461007d1b94f0fbc13a9e718243ced7e6f24522a80005a4fcff858dff00585cd9283ea1a597f0ca1e76c54747d050f392cd0e086326d0ddc766ab1fbe30c3b8cba924c01475b160e775c3d1d26c35840f83269a7e28f1338ea375e53dc98b862c8d15a19f772ac23b3ee9f90bb04e03dfde4e82fb9dd3a0890fe06a99101c59ae696ff1e1bb1d652b6f3f9635c18616a7c86b1b6ace325a6c62d132cda8d826654641b6e802acba840a4265e24e85cc274b55e0fbd01a76dd9af91441ae349e5bf7f585c9860f5c4500da889c3b72497b86f193fcf969d1424eb0f64e9ae1db82c102e1d57bb4f6646209a691cd0b286182f2a66dfd3dbda20a83156b0a108bb0e0a5c8e2bc7a2c19cbab09f25db581771af9fdcb09d77a46f337f2443962f1858e374c16b37f8e993646cf84b2869d9f93a4e38e0f4db5444c287d4030f4ed1bfaded4f37646d81255ec9bbad06687f49678dcb4690284c2db493464e7fc5c2e39832ae3ede01b136ff32532f5e670ba2d753983fdd2052f42311fbf917e96a1e29b4898d62130c683bc0d45cc2be5945cc41e35475fda252ee1c3f035afc352f34b77ea13a4fb09c09dea26110e700693cff04ce8e06b30f66535608968e65d2ebef57698ad72e69beea4db56b0e8c6f91cdf187fd0d49c84c1d5ab34900f6004b00503131e7d6c996dce0a84341ae8236bb5741adf6cf5b447d750f1e5f0cb5b3787e22992a9f26310f28d4789d09c53df3057113f6ffbf2978984762fa679cdacbe509d6dc4b637f17b6cf49283d5a523e04a2205b1a1af1c6880fce33502a83170a5b0ed1f384ed1451e683b622f44ccc0d385b3d7540ca3116d6112aaf905039471b564d3cf615ccb8823cfd34e635c3b2af982ed0a98fdf2358b42cfa8e8cf2ac184b7e08bf48988f000850163bffafe7f69b3f8a761936a3e1974e79ec92ce893f6a8474fe900b42025c9bf56799dc9a0db57239e8fa5dbb3b1972b0d2c456f7777ab2baa1aef60f5be9d48b4aba1aa934a493682c70687b4e7b05f5226eafe9a25d4fc33cc2af7a7315b37c7db101ad3456d8ad04ddc3b76d2baa96129da53c810d55377382a2a25d6ce0d4c113c3367fc906034eb775290c1d5e5c881d9a8c6567d8470d68b33b506bfab2d6b61a9a7ca6eb003772e30165ed01544d896f96c0f286a23ab55ae258c1554b8054e9f6de37e9f29bb644c4f2ee3ec42d51daf7d4da1cda30f16a56f12e299b5e302deae593fbbd6f75390f4eb25555185bf62eeaa882c23416872a4cc18d2534ddc4d2a1f3a0c3ca461d9b9e4fda10c3294ee74c631c65e840d5e4a94a1798e07a5e151968b7b22892d65ac2c81e7e8d9a471a790f66a9391b4e8c19a2251488255c96d498cda6ddb3aaef264454f2b4ff43a70c48b1fba3ed45c43d0dd44bc26452045e9fffa2b25901b3d5704ae3b0352fa3e8830774b6e38025c7552c13d312a273cb88c1649dc6d8ab38ebd1b2bfb16b2cc056f870c138052b951baacdee560e218972b1a0932bc266855062fafed6064bcc637db59713538c45a69c838b09e1b143b7c1e2e6b72a6a00b7cd0afff8d20b9008d61023aadf193d8ff8040220564c0bcbd9dc03a98ab1b8eb96c576291636c0c1de5e3d872c095876efafa7575f994f45c29cb3fa9e96f98012b7a84ce820e172e625b1de98031e5471cf5c9036864289d95d2f1956abf5d4f9a7e81ac2796c67a4aec8f54a5896bffd05b4514df6b2a7df1038183ea740459db4a07ad275e153a08cef7542abf7775a8ff164e73a424bd22815da91265c8c86c1dd90ed926fe313fe32be9c040f7065b27c8cd03d585bbdef6f149ebb3e3906fed7290a19ee7d42621393d634940c771c6dd95a9fd153bf25e029b453a69b10cd3c9d3fb17fd936ee6243a5357b38ccdfacff843aa2a51081925acac1b7ef3dae20304562be99ee3464885988d6e08b8f1ec22e51d5960b25c799d4ec379bec80219cacbcb4e312e744b6e5da1cb39e6d7b90c492ddacc215d1218891f65acb3d3917ed208bd6e8fd520eddf7584ecc920c9243c657cb6482dbf6a38af25d199f2137880b605f640a4f996f48da1f7058d81604a70c672414230105990aeb151560ab80379e346a1326c0438b68ce6bd291654d736881176ad30d11e1fad2871eb83f4b339e5fb0bb68eabe3b707324673b3ba607fa27953c9109185ecc2eeff24cc3a7494cbf04f70bbda0b85e644d8e2434bfdeb2bb242016bd82fc78e8ff2b1bb18167e7834f621225eef2607be6d2318ea29e507f7be94764f67aa5c61c7d15dba36cbea919c665137f9216e30310c1c3a410eb7ffd8bfb3d339273a8934b4089efeea8ce06cd5dcdc46907e169dad730be362e6583a512071d6a2b7ead9c4482dc91f55a62592925adcd3892dd57461ac830d74cb8ceb47c78ddaf2558cb8bde9dd3ce2edb882cbb0fe019ea611bbf778493d63a3b68b3d94a283470e4e682ee4cc569ebc6629b4f0a5e10fa9bbd6dc044cf7d61d11d0ec5563c0b7b86141e7a852fe64fa7c8496b112f366ca2e4afefc68ebd78bddfd5bf95b40f691b0d81fdb5126e9ed55e32db62af1dca33a3449aba59f12bd03c0f4a64e1fefb18ed08f6a9a1325248139659687a73d378f09002ebc4b2baab643ca44b4a7ee63dc4631f211181647daea7e36806eb0a79980ae519fbc77c9988db03cebecc1ce2db3acbdc928e2de2111fd171c89feac400009b28c14267f3e6f711206b0517aea57817e13d0f6553e6e9b73d99a3f85e5a9cc8bd7e3605dbf5b4f4e665bc7541fe888c7d86cac5811d560e044ebe3bb4768eb9307369da53a32201a7467c066b83b86c333876e821801f98b466dcd2dd6077468029722b01988324e101b8dc37d5d45be0cfa5655e232bebbdae8bd70e92a66140ddfa4bd182beecf5038d4f0bc31b37fa26ed21820c78450770d380c2f42386a5c27a93b2f85f37756d9b32df934ec4d1598e5b3ff6fc53d5cdaf6acdaa53566a122349bd1c21a73b634dfaf23130db368a236376144efbdfbcbea34e78000a261b3817a10eb7c0413534dafdc55cb12f65bbcb73a4467bbc2c2319ab070ffaaa8e4eb24ef9cfa2cdeab19e16e0b1a502104492ca060ce50381e7ebeae0341ab532bc8a4e9a4bdf31e25fbf7674353f347c274fcc40083486fd48c08602c12c9c6806c7517c5b8aa178f65286f5007ea8d94170a7b070e66bae28e5e143b477a2629efa8e33883c03e0e58a6f21e253d87683d4852abd31f1199496337eef9c8bb81c5e3313a0a4c96cd4e4a3997144340f0bd5d3fe3ecdcd0feeee6bcb3ba0cbd160298936e6c26e3be0b86644e2704b0ead40f64e486a95856736f04d5493944eba60794ebc538fe149367eec24d8855061ca11078832d771d0efdfa221f66af302e1424bd3e4afef26dab0cf76b51d95b90d75d4ea196f5eff677e4260170b21918b0882eeab5dba283b07b4feb99bdce197c6e453371c41be2a8fa6e29d6ab5cbeff600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='0\x00'], 0x0, 0x0, 0x0, 0x0}) getdents64(r11, &(0x7f0000000640)=""/193, 0xc1) syz_fuse_handle_req(r7, &(0x7f0000010ec0)="2c7f3a6fc245d681b084e71bc56b18ce046e3a78ede7077c0fa7890497e6e51fd41654be1eb9c2d19317839140b4519f3e8565dc8567eb4b60ef31856b8e5102bce08854a96fa59e2f9514cc941a2e3504fc642f22ba91631cb35ba6f5efaa8802c2daedb17217aa436fd3590f633dec00a56bca002732e08f28d42af0e9bb20e30a34ffedf9471ab60e2f7648d568edb191c6732ecf6704e27e979602663071244e9155fb4408944b5e4a60149debcab2f2e13b8200e917010b4f2dc8ea98d45a77ef00daec0f4852d2ea050606cae921869f9c5f6e5eeb4b1e83ab8bb7b28a69abd09e9221a22bab9f4be89261770000000000000080849722c4b46ed80289a881638b763d84ce5f70509a47f08c4f20e02119d15f1d85ac57c9ed6fb042fcca5cfac8fa563254ba5d093ee77d00ba8a73e328777d8b4e8bfc298e2d51ad63d8c546480093883aece2e0692c240f45b6771adb53c79731488afbf6231364c546daf3f55c48c79412c1b2c7b2170e29c514046d095e5fcaa7bf5d18d06ee00b067a23f8287929f977e9740469f479103d44df9368f5961998829cb66cf61ed458b1a55d3328cb757894d3202e886645122d995d3cd2c30c47ff46897cb880cd1409026cee957dbc154665664cfb725eef87cc39992dcc7b740693050e32398c91f1cd13a9fe7ef5268e8602149275c512a2aafcb4e9b3d484f7814516c569299b9b81a02facf43c0c5753b3000fb68f29c88d1e920c26f9ca0c002a20fe64857a025b249cebef97915dd708f9006cde6a7dab39422cf537ff9ef14802526a70bf477504c3d1059a75d8eb5378528c5edaaa096019bfe89cf9ed8b9aded0d93bc5f0e6dc21294948b630a5c1613ce168338152e1dc63c4d63b9bc64aad9836e24019d32327cb30f3e22a509dcd210d1e906b57a96013c589e8a96edf92baf736f0c69988030d93c5afac4f31d09a2b23d0bde1c818c58ce828d33bc810d8116807ec1a4acf537c077b1a5956edb9a581737fd3039420750ce4ea71564f071b55682487ba33e1478289a37cdcda771feb1d5864fce210036174bd24896844049a13a4f8a540bd7dfe32cf5896e2018f1b1b7dd603a019c3f5485c851b9e98e3110719c9680ba15578cbb5120730ebe8860b199eba93fbd63bb5150963bfac8bd5893a1b3d5ae457a1d74a8684aa7aaed4a28413ab4d59559cbd3a8c592c7bdb34e03e36809d9d8e470d4a88d38a6b1ffa1be60ab73c3eaef6a07f1d1572a438acc52e4a4d370eb87f3445daadc7ae52c15523414aa0b21abbef0bb97eee7b84e5e4d6b4573ce84eb16cc9139a03a100adad0aa2ec509b3fdc50aaa37244346071fdc3b23d10df5a9eaadb9aede01e02d67d0b5924a92f1d24c6d83329c4cec5abfc9678fb7dbd1aedf558eeda4bc917599948b8efafc9fbe0052559e9d2f94b779dc3b59825ae867bf647de5211ce8916c8ac01347804c9c5fe7958d44e63cea3241eeac5981ed5d93cadc2d21610f7d398d4526395d71cc97e5fbb20396a777977d92c47b912f0fcc93c171df535729e783337d0260db9db9959909c4913a3496f23244258419562f410ee8d68e30b05fd6d5cc88dc39659540d74a9d1eff09afc760ba6a32bd6405377881716de82a22970678c792d46b71e268ddcff321e1109cb27051ca54d9093da5e32d17bda5f90ee37cd172585489ff764f16adddcc59e94e7c3159ae4f60cf66c05af269d93f350a58ea0d5b6963a70264886170142f0502e81f0d922004f1776014ad2ed56175340d80f424702966438809542ff082033d1bcfd428fab8d54572a84fd1c1b357e8bce5db197af4f3110ef2b23379103e3f7d188f50c45e057cf468ef3e44123f7227ee60e2bbac3ae0311d9326660f8208e8544dc5aa66cfb3b9598585594d1dbd60f58bc7364baedc58062fad0854370d9788da40cebabf1ef729ed92ebfc74627c55c1b37ddbe7a2c8c254cf4121fc6d6686ae23c620e6615a594b975fcb49a319ea27a668c555dda48c4a1b40bdd45adc170d0cf1e02a5aa3856ad06c1951c77745e72420aca20348aadacb0ba9dc66ed46aa56c939228cbee5c8ad7f7aca94c2302c4908476290bdea9e7d262c23d9ddd9d5855eadb151eedf6d8d95766319bcf330a94110b0895657dcfb7d12dcbab7cc15df4b3cca9ff3b2295f0ad13c21f22573d1fdf5630c79b5fe46f1adfe7bb9cadb850418aea1ff10e2df9b49c5d07a000a619d21e13809414549ee0d89cf39f3c00fc2113b2884edbf18b00a8b1103d4f40bd5fccc6e50d8ee3d0f2588774fbbdde3869ac9940d74feb11983244a4517d57690a6503c63ed56d7d52ddb10bc0e331f4738b804c429d1c208de672296b3f87acbac1c9874e0f0b33edd5e1e2ebb0927730c86d7ad07e36402c3f1515d4cf29ac68789242f44bfaf775e5ba5fcfb6f4d4371ab8ad9d6eb8b2ae27fa8ffc9801fec0a107d19ddd4c25d36eb750ef4ed805e4fbff4122bc2b8afcd329c9170ae410731169f11e2015e9e2228d37b775809a28ec6a3b67e0572f47bf6498c2a147a594ab309b6a18ff5b8f41fa8535bc3b342bd5c23576c2fc78626a84765c71644e8bb2b033a5080f70ea05cbdef77922a668ea9415ca6602aab534187402e2840393854b331e91dbf9ac337a6d0d80deeb4ab423f0690babfe0571e355d2ac548d889abc896cfb867c147b29162d47899c4961354a5531baafa04aff30f1ce0eecb8218e922575037c19ad74f76e489a2d18b6fc5f1fa765a005c9acf03aa723f7321e8eedddcb4ebc839c188da378dc15575a6804e0cd79b9bfbc0c7fbbeaedd292b14644d3e962cad174fd62f9ded4630d27b6ad66575349d96ea055f26ab5645a41d64706c47036674180ea39e8d9031218bba148cc26d77fff99029629b88a644821f5e8149011cc0e2e3803680eda38bc771ff7f5eff707388d1d87f94cbfaa55e1a0de5e945f3aa0086114b5c64f29a0d09e2a7de267d61ba09b11020e34b17180f9929a1dd3d781df95365fd638cf3d858755b481880c6e529cc44b9fbd417a7cbf4f4e7bc5deed2c7f038afd955872baad9799f53b197182c917d3605cbb5de2c95fa9d09b883c3d9f6cf1cb30ff6aaadd6e17010325cabdb247af05faf9df9b0aee027857f88c3da7ad19e08da3cb5f663cc9dce6eec8416a0bfbe2e77a5b20a6da4e4acc9670c7cc63eddf615d13fd89e2f00aefb1439e69a2818b8f24d7ae04bc718a401fba508b0685e1e52dc7bca6c53c049d757d5755ba6394427ba45bafec43c39cbc3a5f68b88afdefa51df6be63a0c63f39c69e2ad10567cf7b408e15fd441ac365be897d6b60fe30bba997045c0ae891326369206cf9c53a609292eebe3f67c58964535710929c37211cade7dae9c965933b1aa2377d056ae400d8ef9f540f11c907f48858007fcb9303b0f2814cc6dd30636389f167d88847c9a55fb6a70adf41e54f7a433a79c9464f72ad2f615386cfa0b14081f1f55eb54b9dc96f4910ad369f37cb33259a4fae1dcf051699017ec8dce20f5401a768275f54cb61c346f06217de6eb195982b49b0a576d894fdeb1796a1b99b72d99783eca623fee56d239c263b0db23caea3462136cdac22128f0acbab8b332a7c1303bbb5997114f987398e0afbce9678ec9ce3a93b7d66fc8359c9ba1b53a65d90a1eb62caa8c56b98b337289809a56874f631edf56c508ef43106147be721c4597291f19dc8cd4150d2b34ea30846fcd8531b34dbbae516e7c42366e980c91d0180421195fb6bfb9574c2741d0a45583e275b1fd0e48f4b164957247b81a5c0292075a38f5016ab017d39c5783eb8b602281867cfdd980ee1fbe181617c526f2b3bc64905474d352b07ae36e89f5829c49b3bd2f27df0d11d1b893cfc16d2e3dcca2adc1f54915fdf6bf55be5995197bfdae10dec6556ff5f61e5e1f64112f153892b79051fa92f852854360eab66a2d9012eca143affe992ed5ad883bcb736a883e12c25d025790a1c477258a413b71fdf6321f2624efbe74f7bf816f6b07ef348bc8a8389c73293f320951d093307baa49f7544bab3b51cdc52a0cb1994358d4ca436aa66f791adae81921a01c807f1212e38b7dacc6ab7cd2a0809069c88787daecb201e7e82d321248c1f747eb9c31f76017436c2aa345c13ed45227214d37eb6701c15ff52b1d5d3d490dc80d67bd3b779009939a7dd65e759317103f21695ba06260f455d98454e3992f419899047e8ae24ef10b3c96621506d65a5c20dc5732a71478c019b240f1194fc959d77df7a1d5d6b1b6f8f43cf7e4d4d72dadf888041c3936f354045b15f2530bbdc38a2fbd8a966732ffe26d994b7ffa0c558259ff7395e4bad1f3225250ba85707e5c653e742bed1a342e6fe56c75a4c7cdf7f342e83b6a83e5dff2ee9aaab8edcc7a3ee33631887b2492995da3190e3ca8ba74ac2732a27d6524218605207c8387baf8372e3cc79879b78590dc5447ddc0aadd6c7aacbd354a445d826d6a07f89245c26ea48871a01dc9cdb40e0c6d20e5aae8141aa3aa15b5e6c85abf6eb8be70b056cabdd6da3f383b8e94fbbb1a0d9480dc55542cedb897a90b48a61776ddc4532c995c10c262c22bbac38ba5b111a09d3587ea98feaa6288bdb3f5bb3bee3ea69e4440f0192a34bf3498b933abdbfbeec830a6e74171cedc90847bc05047402f7f0501e5ca2503022c613dc779fe618ffec011ff69b9e37ad5cc2340f28656093f7b832c031432ba673213cde8c33d110a2723bd41db10e3842e4f019f10b56c18d2093d9b508a043e1242bbc9de165f21df3530c470cda9e60a3859833bcccb9715ffd7313bac4ac1b9c1d0a3e71bb5ddba842084683a3e2ebb2b1d9fc9dbb6ecfc92af8c7bba41f3eee1c861e73d1e1e6aa7310b9adf5fc32f94913ce8cb2f924c6fb5df0be37b10d50c58b201833b03c1712d4fe50a2054a045084b892fb77457d2f0e399256a599bd91feffe659f3feeab33f8ffa4e4747ccad3814d43980d5cdb46b3a1f033b782162cdc89162a1d901590f5344781ec7d96713103893766684a4a71bf482d4223ab8c0f71b09bdfe176063ba3a967f5b5907f501302d00ad10f030aa640559feca28d9d2362ad4be69d9012ccb8ed8bb031ed27c03134c2e00de5743adf4deb78f3162f3d194d70250b4020ff64d52a30755e699d58460cac659c63c4633b43317a2265d8be16bb1abbe492033ede9d12744741124370e441e6614ab896aa239b30cfe55db1cf09c527fd23725bbd209e89aab62e517bf1449c2fbc203d78ad763892cdd5934fdbc97f023334201501260588ec39bc7b6231fe38b5b9ac8fc121049cd61c33fd23ff0480363ddd82fcb6f5d118724427fde4671cd416b96298727927f476e83bbc17f0856c7988b88e76f0cedb5d397ce4cb76efc02d7fc626e838b08ed594659cba8537f319585365f83b1269c3d4dd253bf238690dcf542b715b419100b03857f57a0dad7d2f0e099597de6bdbd9f0e18ce6a6ca478bfd7644e3ddb913bef96569c74f5733176fd25749436d6f6c8852821ad5653401814657f7ff5ccb1d47161eabdf56573f38f766827cb8bbd1fd9fd26d5eeb2e9dc5c0b0e05d0a8e335da8180f384c6bac1ad872accfe09ac9ca9102f2c35dad7689cf734a5378dc8d834b267560a089da2372d5cfbbce9aa13a55dba0b03def8ee1dec2f6a97ff7ff9a35e65272a0fff7db3aec4e9456b1d310f9b69e910658dfd161de8f67b845805282a51572a7b3668c923d03a600cfa68a881bddcf814ff4a98d9adfa2d06e883d3e65f8b6d4ca5dc4667be08449be9d08cd6fbb78c11873b1ef3f081b10cf6314bbd06ffb380df233d0e644dc8ee498bd95333c2daf9db0e6801fb274577205e791071debdb01d9786b1cc624e1425b1561afb438feaf5069937de348c51e0b4c79c88856791e9bf736d6c748025f9b28182521b67596acdf15a9e41fa02b592de42d72702ba41c1976029e082d4bb2f63da60d73732bb98783db88cc0d09e849ffac5323b2b28290ba34d1a3e0c1228a2fb0c2e92503b51d54fd0825948ca15c5511b032c36cce2c04431a47cbc378e3ec1c57ad3b37aa2b667bbc23f21880dce621a3b203579da06ffb79359619b181a72ed4d192e52c13f2dacfc18ba40f7254071e1103a164f5cf8323bbec9cd9fa6f2c9eae70715a1ef57b18c6908dabb0f7c1efe1a6ae9b6068e510209d54f760f922ed4401f1709ab65a1e4953772054d585b8a8a738463f6d70ee9dc180feeab307e6ee094ad80050a3dd450a75a7e7dff6e7a74256f2b651ce905d1c99eb30786c00e1544872b76892286848b297f31d8222cf23a4a4a664bd784ffb7a2c3abadac43cc7a791926e59e0471bdc45186ff4f564b68a9b8beedd2ef63b79823acc0a81c867b443d8f8a2242e6efe1838a8db801930644cbc73d769c0e1668a413eb2609b6151329edce4a024c5ff11110beb54a408e752729e03300ccecbd321dfd8e4f16f79d16d13aa4ef212139d0cb81c8f755b6d189ef9c2869e5c2cee655df4b75c00828333c8b62c93b3ec270fe0c1af3fae784c950b441f6f78639ea5678652fbd216700d4ee85cd8662db78a061e959507787e12c7ba002f08fa01a860b34549e89bd1d3da3d23befc59ce2d50abcecba8671f4e8c312816f3977e65479b6fa8cfc618e1f569e9a12c8faea700e86748ff468c43adbd7ea74ce1702d2659bfc26ce49b24c62731dfc1f161bd31d8b6af4ea1100caf248ec18976f1a6c8143df40416e42ef9d225e40436b5fbf34450fad6f3bb8abfcffa367e0a16305dda8205bfdd33625667f709ec3a947e6ea1329c4f7d7aa8917aeccd6078e54ec7196ec7dfb27ee64e26df48a6a705c2ce330ca7b3f21a9ba1f55e2fc334adccbd7b05b489008a6d8c01f81b2b0d8933770e277ab8ceae9776e30df8573cc0032c487eea774893b300b7680188093074c71b4856436fb6dff8c82de2e227af5ea8dae0387a239c70ed977b9bc3087c55af8ec448eb4d819156fde9104bc6443d49ef5a4f3cf27614b99507c894af487637377d06476b3671c7158a870613e0a7d9ee3c693a7fd132adcc06c22e6d4655a2eef2570ab323f8a5a4b50360b0ec14c528b6cffa26b160a07c798947315ec19dafcb805b06dd45fd9a2f328dff773e680435b53349bb241cd82842f915fd23b27099b5ba5483a81fdea7f28408654f4932edfa33d10fd90281b208a9a5915543bc7e15427b4e5db36d1d1ab238e1c1cd5ffb646bf7cb033dd613bd2ddb6d56983d943618c5bd0e44f5c2d981b54ec7e5e7a988dbeb6d8b7c2707c3e7685ddbfe80fc77c1d9cb31c63c5436cd5b2b105dbc1cb7d024dcda8a47ba30068f24677b38503ba582c286437435d7b8a16dca4a56dad4db7e715a578391acfc62d6350ef92ef8b789877158c904803c3354affc8a235f2cc768856a13edf0a4cd9de6b67f7333e1b882a8ecadeb0fbc2005a708f838daf2dc86fe35d953a15d2ede3cc093e45f2719653da1d8936d10c596a66cfd588b5663e8c2afe73b5bc23c967826cf4d24fbbf9d68d18b8f65347933238d7242f69a458959cf51ae79f3f5c5a7180fe23cab53edbf0d81534b7f9b5c697981a0822c36aa483fd95111417834e5062e4ac25817727ac3380c91c7440bcb212a4354035c3813664c0fbf042623bd791873e90646940ef658f4784cdcb714e55d48cc3a30b0195895850aedc32df9435a53c0a9fab07ecfd8778d64b44be1d270fce94c2ff04e984b9f50d541e4d4d871d193a37a05f83d557be8d9cc66027d7dd3a6315b3c9838c0da8c897ca81bcb44e076bee3a7614d9806d018541c46c196b7fd677e2960306849be082875b535dd411428847dddfc2ee9af77a16c282c1ad32151ad2e2ec2a9a1281c593bddddda03afe69cd5bfd83a6e416fa2d47066533877a4dcf24b24d84dadd27acee6127fd94db9be4e3efe74650f2ad01a9adfcecfdc535cc48e3b770a9a8cde6cea193501fb89097c97d25f1bdf00c8b69ce94bd38e1c133b9f52fb8b05a7c477ce4bcaeffda896f457e21e4e93c779657cf05712a7ca161f9680a8619e1dee220ad153729b47789e737675a04733cf94fb494ecebfc8750dfe44e3959558d21ae42f76b705bf092e45445b2521162409cacc720aad8f00f5821f452953512798548369f5a5700c8d02d49cf797e7a48d05c7d7fcc09b9bbe21a907c81d5f4cbb978f21d25d802a047cd46640025f75f2c01c10a21c92a9dec5618dcbd6025dd67b215b038aaae91e76f7c729dd5b61092858013930675f124fc3c62b130f0d898affd9972a202785def90fe7f9ddd821c7de4b5acc2a30bc74085225c23e091cdb2ec42df6f5c88a6666ced41b601374c9e761c0686f71cc1c8f0daade0ba730dd6c2670df4db97c1d1ad250bf7eeaf7f5309ec18a4331e0c3a9808832898d208d7cd293bdfbb7c51d17e3f3d1397a579b8c81e5aec1e1b0ce4cd796f1cf68a49b19841126c73affc13641756cd954ad3c0e62caca61e71c9491441a294739e172d3306b00e4230febdb13bd7630184c8db1dc363fe62015e5985997d56b059dd0602b98a6bb4c0a8e0a10853cc19b2e9e187c0b2e8d70789cb863c71544445acb31edb4459698a21c1aed76a592786053f904f144d5e7715737c253a34a038cc47d4877f8140eb06fd7da9633772b445b21a7c6fe985997b64732bdf022538d57952f6f7340981ea8a2e1f19d639a3138e5f1e58f9413e74d1017f6f0649be152a3fb01a6f53521a446fd5f1a70d0279730a4ae15bc300490f55880232a3dc10a6519dc7b489160ef480e8fb3029428005c4cbee70ac0360094228e70afa66460d09e8d6ea83e89932d58a6a7ba76059de6ed122d3a02ca42bcb1572d214112e906ee607351663efea2dfd7d1a2bcb6d1d9f5d8351703b990944ca1db5452132de124677da884939c6b4890cb94f000d71f2edb511bb94a4f61afb5ee1edc7f4e14cf81ca27bbc5bcf7dd84dd495e0f174d3c9b43469c1ab1514430d7dd3adce3bdfeaa714162ea45e43f6a3b57d719449c7a191383d23069779fe7e57032c2d37d04054728acc67c2c87351d7615239978373bf22d2f5d70366eb7f3fb4a155293f98c9078b28aef1449e552616dc44963dd2b79061784f57a72105e180a6b2770c7cede4d321efda0dd526e0b5c05af55bfe606abf51569316dc0bdbc2f6f46c47a33b4bf9536acdf783dee9424605bd290f6ece0745b0890d836b24efb5361c457cc5fe6a61fe5251d60c60819365377c878a3a53229e88f3b02616ed33a23b46da3d3ecec20d174981ddb45bbfdafafc6d3296f6952e063f24a5024499b1a6b2045a29c1b8a7090e70c9f32bc187da0df89e3a1445057010206dc172ad0e247a84d8f665687f5c50eba70e019b88ebff42e9091675882af7c04c540e5b779603510d46f8e504a8a0cdcb9709ec0db4f882292c791398eefe3ac8951c0e055872c8cd29acf3b785dbd145a7c5b9e1e57853e6287ea09c2a167fd3f55ee323191dbc54f77c6875cd000a587896c658ccf47c66727d4e866206edd84b198a39adec533369ebaadb85b230b3457ed685548aa09c7c8a6e256b4c668a27a85871456e447fc221228a205ffe2b78276928416626d788feb47054db5409b03d923ab7d5443b135161171f70eee14f596d386707354be9422fcc4f3f318cd81ba2cce3e3d357b67e8fc70490a9a04d639d772077d5d8fb5665e4721e8142de055952f6c0152eb59d042f336e8e3b988de0cbad82fed64932fe71c3276ea1ec3034799b32761c71534f3b3db4037a9c541ccc6984b963c8da9cdc1ea4feaeb95ffece5aac1424a4e9d5e215c74c0f5d760e82d92126fc36eb5809ccc9e84e185494f5c0d01f68fc5623fedf20ba355166f22deabaaff5911b82ffefcb7e625ba4c3fd280d49eff03fe4114ed658c43a9d5321bd20ab75055fc3ae4270326f67e6d4ffc4ec54a727a5385f690aa18ca103edeeaf1725d4e13a7079314165e0ab1ed9e035bd530aaaaaee8f7e2a0134be70988795b535aefa64a8f52efb7ccaa3464dd9800a4281443dadfcc3d31d1acf1e205ff6f351a15efb2f19d587fbce90029ab9bc9d3dd3425c54b836492ae2c3726b91ce7e4b5082d83c8c22e394a529cb301c1288c03da50b3f16bb450522fcac0a2e7508640d130682557a615906be3506c27e6edfe2248182a5eb8f6df2da7be7d8db534b4f39e9ef46f336340e820a8433fd5df91c629e6bb459b770f750b3dd80f402b9297e72df4ef5a06d0e43acde89303cc7f5ed771f2b9fbc97166c48b277f6aa37766903d7d210899eede048a3ab9485edd521f917488913b5da3521c7b97717d27c26c7416276e9de97ea8427060c6c6c1d5049af3d793c99dd767177a6d5b123c688f93050956b024d4d49aa4573e9e99f9aa5402da85eafc14979cba26420a6bf0bb2621948295d45c3279065cd3a7313c280864f78d4b274f5f92adb20e374c6d2f7cda8938a52da1f56ac226612b95ea1e4ef5bfd11c5e3fe9604972447d3aa7fd4d78f56ecd2dd3d9f79ee12485f1b8ba3cd86e62402a76a5cad273a5446da398a66f4c36cd14bf834cdde99f18201ed3d1922b48171cc9b62d632b5fb34424e610f2fdcc8595d28842d78b26b1f2a7dcdad1c02f91a09626079470eea9f90d08a543ecf9e6b50756a160d240bcfdc5f3ee6ed995c98fb64efca7dcdba8223c07902e3117161ce2ec916888a9780cfd34ac52083301e30fdddb111c1bb61fe38d3489f09f89ef5823a6fa0b41ea013056c0a7f27ed2f3deba06b68661f5eeffe5d53829edace17a81d788f8eb8c7ce644312cc23e9b6ff48b0153f7df30f544e33f9b791ddb45e93cfda5f9874ee1e70c0864cd295be114ab8dd42d89cc1b4c34ad91d5779dc68294c7085a166c917e72cd09b637307a1fc5efe6fe163eabe16bbbca30ee1f292a904156ac4782889378d439c3dee4f95bd63c59b5ce44104d929c93c0648279b98cb7fe8ba7638d94e8e77cb74e2ea560932b3a28017783230ff22287e5c00d93f6923f8b6edccc412522f3fcd3c9146cb5c43f261705a08c64e84d923ce6b1a06e922c8dac6d7e5c22b2e5c9b8269b2810b490b8a43c0fe42b298bbc1f03f62dcdb67e24e89b14f7558fee85ca00f0a3d34b1664aeb940917dd3f1a08c5db10858f4cffee54f480e816a6dc9553b5043870d7f0a76134ee95a5a688b50281a1836fb721abe9105f9dfd7173f32bbb2bd00a75af11bc3a7618a0111cb8d5e30c5af5fe512bc23b5c590377817c063b25e2f5eed4a64825d4ca494518c4c0b9cac88cc3ccaa5477ad3e9c0b3577c156e88cd4df354d383efa800536d62790c86feb6a862cae1543e3e9c984c64ecb2b25319d62a3308e20b8ad261ecdb746bf28f58220c5ebe03204d5fe86094d81036a36ed905d4cfcc8054e7947f3ac9e88897a983adce3e3724745df71395b959b067ddc1bd8c30f092546d25a0b24f5df9136af84fb76a96d3eccefcf9ab5", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="50000000000000000b000000000000000100000000000000000000000000000001"], 0x0, 0x0, 0x0, 0x0}) 965.839956ms ago: executing program 0 (id=3558): setresgid(0xee00, 0x0, 0xffffffffffffffff) r0 = socket(0x1a, 0x2, 0x80000000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_coalesce={0x3d, 0x9, 0x7e, 0x9, 0x10003, 0xc, 0x7, 0x1000, 0x99, 0x81, 0xc000000, 0x9, 0x7, 0x8, 0x3, 0x1, 0x1a00, 0x8, 0xeeea, 0x401, 0x10000, 0x8}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x5, "dcdf04"}]}}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x3}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e22, 0xd, @loopback}}}, &(0x7f0000000440)=0x84) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd25, 0x65dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0xc, 0x6, 0x2) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x2c}}, 0x0) sendmmsg$unix(r1, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x18}}], 0x18, 0x20004004}}], 0x1, 0x0) 813.391107ms ago: executing program 5 (id=3559): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) vmsplice(r6, &(0x7f00000000c0), 0x0, 0xb) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000540)={0x0, 0xb3, 0x67}, &(0x7f0000000580)={'enc=', 'raw', ' hash=', {'wp384-generic\x00'}}, &(0x7f0000000600)="fce71d2874b3274313d8761462fe1eab01ad4e5150106b24cc376ba0c77ea180370375353657fcefe93fb5574281c3223542dbb13524bc03dc8aff8c9ad8ab78e12277fe2e5592338a8a57ae64554eca1929eec74d2edc4b26ac9d7629682c7bbf36bd5c83095c5dcddc62595ecd779f9d0b17402408d5b072556bf91d1bd066eea0411e7ad881d26d2fa94085b3287f05824a65c552bdb73da4ddf4f6b40df5948918ebe1cb33f9655bc450c84a909dc5e6a6", &(0x7f00000006c0)=""/103) recvmmsg(r6, &(0x7f0000001000), 0x0, 0x12180, &(0x7f0000001080)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x401) 805.758701ms ago: executing program 0 (id=3560): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./export_dir\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='* ./export_dir', 0xe) 714.244329ms ago: executing program 7 (id=3561): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/87, 0x57, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x733, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102481, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r6, &(0x7f0000000140)='add 1', 0x5) write(r6, &(0x7f0000000180), 0x0) write(r6, &(0x7f00000001c0)='add 3', 0x5) write(r6, &(0x7f0000000240), 0x0) write(r6, &(0x7f0000000300)='add 8', 0x5) write(r6, &(0x7f0000000340)='add 1-', 0x6) write(r6, &(0x7f0000000380)='add 2-', 0x6) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}}, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) 607.601565ms ago: executing program 0 (id=3562): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x4007, @fd_index=0x1, 0x2, 0x0, 0x0, 0xa, 0x1, {0x1, 0x0, 0x0, '\x00', 0x0}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/46, 0x2e}], 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10, 0x1000000}}}, &(0x7f0000000440)) 513.524108ms ago: executing program 0 (id=3563): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000001140)=[0xfffffffc, 0xfff]) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) r3 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x3c}}, 0x4044080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 438.115812ms ago: executing program 7 (id=3564): fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) 387.543367ms ago: executing program 7 (id=3565): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg$unix(r3, &(0x7f0000001c80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/74, 0x4a}, {&(0x7f0000001a40)=""/71, 0x47}, {&(0x7f0000000700)=""/67, 0x43}, {&(0x7f0000000100)=""/47, 0x2f}], 0x4, &(0x7f0000000900)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/32, 0x20}, {&(0x7f0000000ac0)=""/9, 0x9}, {&(0x7f0000000b00)=""/76, 0x4c}], 0x3, &(0x7f0000000bc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000cc0)=""/109, 0x6d}, {&(0x7f0000000d40)=""/169, 0xa9}, {&(0x7f0000000e00)=""/131, 0x83}, {&(0x7f0000000ec0)=""/170, 0xaa}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)=""/159, 0x9f}, {&(0x7f0000001080)=""/70, 0x46}, {&(0x7f0000001100)=""/142, 0x8e}, {&(0x7f00000011c0)=""/193, 0xc1}, {&(0x7f00000012c0)=""/30, 0x1e}], 0xa}}, {{&(0x7f0000001380), 0x6e, &(0x7f0000001580)=[{&(0x7f0000001400)=""/240, 0xf0}, {&(0x7f0000001500)=""/73, 0x49}], 0x2, &(0x7f00000015c0)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x114}}, {{&(0x7f0000001700), 0x6e, &(0x7f0000001900)=[{&(0x7f0000001780)=""/182, 0xb6}, {&(0x7f0000001840)=""/182, 0xb6}], 0x2, &(0x7f0000001940)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f00000019c0), 0x6e, &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x110}}], 0x6, 0x10041, &(0x7f0000001d40)) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="050000000000000071112400000000008510000002000000850000000e00000095000000000000009500a50500000000b043b21cb5761ce46a63ea6d3debad9455bc03c95227792d5e5b0225d3d7d624f7464408aba81d0688b23629f88994e76fbb6cb751178eca84adf1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 235.108809ms ago: executing program 4 (id=3566): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg$unix(r3, &(0x7f0000001c80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/74, 0x4a}, {&(0x7f0000001a40)=""/71, 0x47}, {&(0x7f0000000700)=""/67, 0x43}, {&(0x7f0000000100)=""/47, 0x2f}], 0x4, &(0x7f0000000900)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/32, 0x20}, {&(0x7f0000000ac0)=""/9, 0x9}, {&(0x7f0000000b00)=""/76, 0x4c}], 0x3, &(0x7f0000000bc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000cc0)=""/109, 0x6d}, {&(0x7f0000000d40)=""/169, 0xa9}, {&(0x7f0000000e00)=""/131, 0x83}, {&(0x7f0000000ec0)=""/170, 0xaa}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)=""/159, 0x9f}, {&(0x7f0000001080)=""/70, 0x46}, {&(0x7f0000001100)=""/142, 0x8e}, {&(0x7f00000011c0)=""/193, 0xc1}, {&(0x7f00000012c0)=""/30, 0x1e}], 0xa}}, {{&(0x7f0000001380), 0x6e, &(0x7f0000001580)=[{&(0x7f0000001400)=""/240, 0xf0}, {&(0x7f0000001500)=""/73, 0x49}], 0x2, &(0x7f00000015c0)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x114}}, {{&(0x7f0000001700), 0x6e, &(0x7f0000001900)=[{&(0x7f0000001780)=""/182, 0xb6}, {&(0x7f0000001840)=""/182, 0xb6}], 0x2, &(0x7f0000001940)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f00000019c0), 0x6e, &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0xc}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x11c}}], 0x6, 0x10041, &(0x7f0000001d40)) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="050000000000000071112400000000008510000002000000850000000e00000095000000000000009500a50500000000b043b21cb5761ce46a63ea6d3debad9455bc03c95227792d5e5b0225d3d7d624f7464408aba81d0688b23629f88994e76fbb6cb751178eca84adf1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 0s ago: executing program 0 (id=3567): socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setpriority(0x1, 0x0, 0x1) alarm(0x3) r0 = memfd_create(&(0x7f0000000480)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\b\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8-\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x13\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~f\xb4%!X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\x00\x00\x00\x00\x00\x00\x00\x00\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xaek\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\b\x00\x00\x00\x00\x00\x00\x00\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x93(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00'/704, 0x7) syz_usb_connect(0x3, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r0, @ANYBLOB="79a9"], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r1, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f00000007c0)=0x2) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001340)={{0x5, 0x0, 0x0, 0x7, 'syz1\x00'}, 0x3, 0x10, 0x8, 0x0, 0x1, 0x1, 'syz0\x00', &(0x7f0000000380)=['']}) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0308004d6b71ef288563", @ANYRESOCT=r5], 0xffdd) kernel console output (not intermixed with test programs): stead [ 730.278093][T17397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 730.278102][T17397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 730.278112][T17397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 730.278121][T17397] jffs2: Further such events for this erase block will not be printed [ 730.278153][T17397] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 730.278162][T17397] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 730.278169][T17397] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 730.300869][T17397] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 730.300879][T17397] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 730.364472][ T30] usb 48-1: device descriptor read/8, error -110 [ 730.423460][T16230] usb usb38-port8: attempt power cycle [ 730.936208][ T30] usb usb48-port1: attempt power cycle [ 730.995187][ T66] block nbd0: Receive control failed (result -104) [ 731.029643][T17402] Cannot find add_set index 32767 as target [ 731.227865][T17408] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 731.227932][T17408] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 731.227968][T17408] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 731.227992][T17408] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 731.228015][T17408] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 731.228041][T17408] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 731.228051][T17408] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 731.228067][T17408] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 731.228076][T17408] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 731.228086][T17408] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 731.228095][T17408] jffs2: Further such events for this erase block will not be printed [ 731.228129][T17408] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 731.228138][T17408] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 731.228146][T17408] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 731.247555][T17408] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 731.247570][T17408] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 731.269374][T16230] usb usb38-port8: unable to enumerate USB device [ 731.926078][ T30] usb usb48-port1: unable to enumerate USB device [ 732.146131][T17421] 9p: Bad value for 'rfdno' [ 732.286365][T17419] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 732.286395][T17419] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 732.286633][T17419] vhci_hcd vhci_hcd.0: Device attached [ 732.356506][T17419] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 732.356918][T17427] orangefs: client-core tried to read wrong size [ 732.554024][ T30] usb 48-1: SetAddress Request (106) to port 0 [ 732.554138][ T30] usb 48-1: new SuperSpeed USB device number 106 using vhci_hcd [ 732.828020][T17428] vhci_hcd: connection reset by peer [ 732.830706][ T5786] vhci_hcd vhci_hcd.5: stop threads [ 732.830797][ T5786] vhci_hcd vhci_hcd.5: release socket [ 732.842089][ T5786] vhci_hcd vhci_hcd.5: disconnect device [ 733.006753][T17439] Cannot find add_set index 32767 as target [ 733.464749][T17444] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 733.464803][T17444] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 733.478518][T17444] vhci_hcd vhci_hcd.0: Device attached [ 733.579928][T17449] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3177'. [ 733.589899][T17444] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 733.754421][ T151] usb 38-1: SetAddress Request (21) to port 0 [ 733.757057][ T151] usb 38-1: new SuperSpeed USB device number 21 using vhci_hcd [ 734.148362][T17445] vhci_hcd: connection reset by peer [ 734.148685][ T5786] vhci_hcd vhci_hcd.0: stop threads [ 734.148706][ T5786] vhci_hcd vhci_hcd.0: release socket [ 734.148790][ T5786] vhci_hcd vhci_hcd.0: disconnect device [ 734.194120][ T5832] usb 46-1: device descriptor read/8, error -110 [ 734.586388][ T5832] usb usb46-port1: attempt power cycle [ 735.167064][ T5832] usb usb46-port1: unable to enumerate USB device [ 735.883568][T17483] fuse: Unknown parameter '' [ 736.084065][ T42] usb 12-1: new full-speed USB device number 9 using dummy_hcd [ 736.195755][T17495] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3198'. [ 736.244550][ T42] usb 12-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 736.250611][ T42] usb 12-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 736.253589][ T42] usb 12-1: Product: syz [ 736.255549][ T42] usb 12-1: Manufacturer: syz [ 736.257282][ T42] usb 12-1: SerialNumber: syz [ 736.263041][ T42] usb 12-1: config 0 descriptor?? [ 736.497094][T16230] usb 12-1: USB disconnect, device number 9 [ 736.718631][T16506] udevd[16506]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 736.789981][T17506] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 736.790021][T17506] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 736.797567][T17506] vhci_hcd vhci_hcd.0: Device attached [ 736.849183][T17506] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 737.284085][ T1477] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 737.363076][T17507] vhci_hcd: connection closed [ 737.365163][T10204] vhci_hcd vhci_hcd.0: stop threads [ 737.369342][T10204] vhci_hcd vhci_hcd.0: release socket [ 737.369622][T10204] vhci_hcd vhci_hcd.0: disconnect device [ 737.418109][T17518] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 737.418148][T17518] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 737.419615][ T1477] usb 10-1: device descriptor read/64, error -71 [ 737.426806][T17518] vhci_hcd vhci_hcd.0: Device attached [ 737.434126][T17518] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3204'. [ 737.511031][T17518] rdma_rxe: rxe_newlink: failed to add wg2 [ 737.634042][ T30] usb 48-1: device descriptor read/8, error -110 [ 737.654069][ T1477] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 737.694058][T16230] usb 52-1: SetAddress Request (38) to port 0 [ 737.698909][T16230] usb 52-1: new SuperSpeed USB device number 38 using vhci_hcd [ 737.784040][ T1477] usb 10-1: device descriptor read/64, error -71 [ 737.894225][ T1477] usb usb10-port1: attempt power cycle [ 738.016546][T17526] Cannot find add_set index 32767 as target [ 738.025740][ T30] usb usb48-port1: attempt power cycle [ 738.051663][T17519] vhci_hcd: connection reset by peer [ 738.051999][T15920] vhci_hcd vhci_hcd.7: stop threads [ 738.052021][T15920] vhci_hcd vhci_hcd.7: release socket [ 738.052064][T15920] vhci_hcd vhci_hcd.7: disconnect device [ 738.233964][ T1477] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 738.254438][ T1477] usb 10-1: device descriptor read/8, error -71 [ 738.493985][ T1477] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 738.513991][ T65] Bluetooth: hci2: command 0x0406 tx timeout [ 738.522065][ T1477] usb 10-1: device descriptor read/8, error -71 [ 738.602261][ T30] usb usb48-port1: unable to enumerate USB device [ 738.625296][ T1477] usb usb10-port1: unable to enumerate USB device [ 738.816596][ T43] audit: type=1804 audit(1788817564.376:486): pid=17536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3210" name="/newroot/100/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 738.834219][ T151] usb 38-1: device descriptor read/8, error -110 [ 739.170002][T17542] netlink: 'syz.4.3212': attribute type 1 has an invalid length. [ 739.170044][T17542] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3212'. [ 739.235000][ T151] usb usb38-port1: attempt power cycle [ 739.445576][ T30] lo speed is unknown, defaulting to 1000 [ 739.445619][ T30] syz0: Port: 1 Link DOWN [ 739.579084][T17552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3216'. [ 739.607150][T17553] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3215'. [ 739.795080][ T151] usb usb38-port1: unable to enumerate USB device [ 740.095625][T17575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 740.100238][T17575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 740.105090][T17575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 740.109815][T17575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 740.114711][T17575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 740.119324][T17575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 740.123991][T17575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 740.128748][T17575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 740.133392][T17575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 740.138159][T17575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 740.142807][T17575] jffs2: Further such events for this erase block will not be printed [ 740.146903][T17575] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 740.151146][T17575] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 740.156781][T17575] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 740.175112][T17575] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 740.179203][T17575] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 740.267720][T17578] Cannot find add_set index 32767 as target [ 740.337509][T17580] netlink: 'syz.5.3224': attribute type 1 has an invalid length. [ 740.337562][T17580] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3224'. [ 740.355612][ T151] usb usb38-port8: attempt power cycle [ 740.499505][T17588] input: syz1 as /devices/virtual/input/input30 [ 740.675395][T17595] loop5: detected capacity change from 0 to 4095 [ 740.686347][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 740.709866][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 740.833233][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 740.845720][T17615] Cannot find add_set index 32767 as target [ 740.888344][T17618] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 740.888425][T17618] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 740.888704][T17618] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 740.888716][T17618] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 740.888725][T17618] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 740.888738][T17618] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 740.888747][T17618] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 740.888764][T17618] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 740.888774][T17618] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 740.888784][T17618] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 740.888792][T17618] jffs2: Further such events for this erase block will not be printed [ 740.888826][T17618] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 740.888835][T17618] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 740.888843][T17618] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 740.897214][T17618] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 740.897223][T17618] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 740.898584][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 740.946933][ T151] usb usb38-port8: unable to enumerate USB device [ 740.967820][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3236'. [ 740.974332][T17624] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3234'. [ 740.997440][ T5750] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 741.146824][ T5823] kernel read not supported for file /dsp1 (pid: 5823 comm: kworker/2:4) [ 741.403322][T17633] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 741.687923][ T43] audit: type=1400 audit(1788817567.246:487): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=232825C1D00E1CDA779D842F2F26407D2C5B272525265C232A pid=17637 comm="syz.0.3243" [ 742.017636][T17649] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 742.017677][T17649] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 742.025115][T17649] vhci_hcd vhci_hcd.0: Device attached [ 742.184017][ T5823] usb 10-1: new low-speed USB device number 37 using dummy_hcd [ 742.200065][T17649] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 742.344549][ T5823] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 742.345635][ T5823] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 742.345857][ T5823] usb 10-1: config 0 has no interface number 0 [ 742.345973][ T5823] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 742.346074][ T5823] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 742.346109][ T5823] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.349875][ T5823] usb 10-1: config 0 descriptor?? [ 742.350399][T17648] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 742.354434][ T5823] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 742.397517][ T151] usb 46-1: SetAddress Request (66) to port 0 [ 742.402724][ T151] usb 46-1: new SuperSpeed USB device number 66 using vhci_hcd [ 742.580413][ T5823] usb 10-1: USB disconnect, device number 37 [ 742.580535][ C2] iowarrior 10-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 742.630983][T17650] vhci_hcd: connection reset by peer [ 742.631339][T15920] vhci_hcd vhci_hcd.4: stop threads [ 742.631361][T15920] vhci_hcd vhci_hcd.4: release socket [ 742.631438][T15920] vhci_hcd vhci_hcd.4: disconnect device [ 742.764159][T16230] usb 52-1: device descriptor read/8, error -110 [ 742.789845][T17648] FAULT_INJECTION: forcing a failure. [ 742.789845][T17648] name fail_futex, interval 1, probability 0, space 0, times 0 [ 742.789929][T17648] CPU: 2 UID: 0 PID: 17648 Comm: syz.5.3247 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.789959][T17648] Tainted: [L]=SOFTLOCKUP [ 742.789968][T17648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 742.789981][T17648] Call Trace: [ 742.789989][T17648] [ 742.789997][T17648] dump_stack_lvl+0x100/0x190 [ 742.790029][T17648] should_fail_ex.cold+0x5/0xa [ 742.790055][T17648] get_futex_key+0x1d0/0x14f0 [ 742.790090][T17648] ? __pfx_get_futex_key+0x10/0x10 [ 742.790121][T17648] ? ___sys_sendmsg+0x127/0x1e0 [ 742.790146][T17648] futex_wake+0xf4/0x5e0 [ 742.790167][T17648] ? futex_wait+0x11e/0x370 [ 742.790193][T17648] ? __pfx_futex_wake+0x10/0x10 [ 742.790220][T17648] ? find_held_lock+0x2b/0x80 [ 742.790247][T17648] do_futex+0x2b2/0x440 [ 742.790268][T17648] ? __pfx_do_futex+0x10/0x10 [ 742.790290][T17648] ? fput+0x7c/0x100 [ 742.790317][T17648] __ia32_sys_futex_time32+0x2f4/0x470 [ 742.790343][T17648] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 742.790376][T17648] __do_fast_syscall_32+0x13a/0x8b0 [ 742.790404][T17648] ? lockdep_hardirqs_on+0x7d/0x110 [ 742.790434][T17648] do_fast_syscall_32+0x32/0x70 [ 742.790463][T17648] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 742.790488][T17648] RIP: 0023:0xf701efec [ 742.790510][T17648] Code: Unable to access opcode bytes at 0xf701efc2. [ 742.790519][T17648] RSP: 002b:00000000f540d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 742.790539][T17648] RAX: ffffffffffffffda RBX: 00000000f7414f8c RCX: 0000000000000081 [ 742.790552][T17648] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 742.790564][T17648] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 742.790577][T17648] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 742.790589][T17648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 742.790615][T17648] [ 742.960099][T17668] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 743.139441][T17671] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3254'. [ 743.444886][T16230] usb usb52-port1: attempt power cycle [ 744.435659][T16230] usb usb52-port1: unable to enumerate USB device [ 744.900664][T15290] usb 9-1: new low-speed USB device number 34 using dummy_hcd [ 745.464016][T15290] usb 9-1: device descriptor read/64, error -71 [ 745.746330][T17690] Cannot find add_set index 32767 as target [ 745.764120][T15290] usb 9-1: new low-speed USB device number 35 using dummy_hcd [ 745.894131][T15290] usb 9-1: device descriptor read/64, error -71 [ 746.006819][T15290] usb usb9-port1: attempt power cycle [ 746.354072][T15290] usb 9-1: new low-speed USB device number 36 using dummy_hcd [ 746.517120][T15290] usb 9-1: device descriptor read/8, error -71 [ 746.658404][T17698] syz.5.3262 invoked oom-killer: gfp_mask=0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 746.664392][T17698] CPU: 0 UID: 0 PID: 17698 Comm: syz.5.3262 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.664424][T17698] Tainted: [L]=SOFTLOCKUP [ 746.664430][T17698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 746.664438][T17698] Call Trace: [ 746.664443][T17698] [ 746.664448][T17698] dump_stack_lvl+0x100/0x190 [ 746.664486][T17698] dump_header+0xfb/0x606 [ 746.664501][T17698] oom_kill_process.cold+0xd/0x380 [ 746.664515][T17698] out_of_memory+0x1256/0x14f0 [ 746.664537][T17698] ? __pfx_out_of_memory+0x10/0x10 [ 746.664557][T17698] __alloc_frozen_pages_noprof+0x2852/0x3300 [ 746.664577][T17698] ? rcu_is_watching+0x13/0xc0 [ 746.664589][T17698] ? trace_sched_exit_tp+0x120/0x160 [ 746.664601][T17698] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 746.664613][T17698] ? __schedule+0x126b/0x6920 [ 746.664628][T17698] ? trace_sched_exit_tp+0x120/0x160 [ 746.664654][T17698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 746.664672][T17698] ? policy_nodemask+0xed/0x4f0 [ 746.664689][T17698] alloc_pages_mpol+0x201/0x550 [ 746.664706][T17698] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 746.664727][T17698] alloc_pages_noprof+0x1a/0x160 [ 746.664745][T17698] __vmalloc_node_range_noprof+0xc1b/0x1420 [ 746.664768][T17698] ? vdpasim_blk_dev_add+0x223/0x2a0 [ 746.664788][T17698] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 746.664805][T17698] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 746.664823][T17698] ? rcu_is_watching+0x13/0xc0 [ 746.664845][T17698] __kvmalloc_node_noprof+0x3da/0x9b0 [ 746.664866][T17698] ? vdpasim_blk_dev_add+0x223/0x2a0 [ 746.664890][T17698] ? vdpasim_create+0x539/0xcc0 [ 746.664915][T17698] ? vdpasim_blk_dev_add+0x223/0x2a0 [ 746.664936][T17698] vdpasim_blk_dev_add+0x223/0x2a0 [ 746.664954][T17698] ? __pfx_vdpasim_blk_dev_add+0x10/0x10 [ 746.664975][T17698] ? __pfx_vdpasim_blk_work+0x10/0x10 [ 746.664993][T17698] ? __pfx_vdpasim_blk_get_config+0x10/0x10 [ 746.665012][T17698] ? __pfx_vdpasim_blk_free+0x10/0x10 [ 746.665033][T17698] ? __pfx_down_write+0x10/0x10 [ 746.665052][T17698] ? vdpa_mgmtdev_get_from_attr+0x1fc/0x2a0 [ 746.665069][T17698] vdpa_nl_cmd_dev_add_set_doit+0x870/0xdc0 [ 746.665086][T17698] ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10 [ 746.665101][T17698] ? __nla_parse+0x40/0x60 [ 746.665115][T17698] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 746.665131][T17698] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 746.665163][T17698] genl_family_rcv_msg_doit+0x214/0x300 [ 746.665182][T17698] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 746.665197][T17698] ? genl_get_cmd+0x3e7/0x760 [ 746.665215][T17698] ? bpf_lsm_capable+0x9/0x10 [ 746.665232][T17698] ? security_capable+0x80/0x260 [ 746.665250][T17698] genl_rcv_msg+0x560/0x800 [ 746.665266][T17698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 746.665281][T17698] ? __lock_acquire+0x5c0/0x1f40 [ 746.665297][T17698] ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10 [ 746.665314][T17698] ? __lock_acquire+0x5c0/0x1f40 [ 746.665333][T17698] netlink_rcv_skb+0x159/0x420 [ 746.665346][T17698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 746.665362][T17698] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 746.665381][T17698] ? netlink_deliver_tap+0x1ae/0xcc0 [ 746.665396][T17698] genl_rcv+0x28/0x40 [ 746.665409][T17698] netlink_unicast+0x585/0x850 [ 746.665424][T17698] ? __pfx_netlink_unicast+0x10/0x10 [ 746.665442][T17698] netlink_sendmsg+0x8b0/0xda0 [ 746.665458][T17698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.665473][T17698] ? apparmor_socket_sendmsg+0x165/0x280 [ 746.665491][T17698] ____sys_sendmsg+0xa4d/0xbe0 [ 746.665509][T17698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.665525][T17698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 746.665552][T17698] ___sys_sendmsg+0x190/0x1e0 [ 746.665564][T17698] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.665576][T17698] ? futex_wait+0x11e/0x370 [ 746.665596][T17698] ? find_held_lock+0x2b/0x80 [ 746.665619][T17698] __sys_sendmsg+0x160/0x210 [ 746.665634][T17698] ? __pfx___sys_sendmsg+0x10/0x10 [ 746.665658][T17698] __do_fast_syscall_32+0x13a/0x8b0 [ 746.665676][T17698] ? lockdep_hardirqs_on+0x7d/0x110 [ 746.665694][T17698] do_fast_syscall_32+0x32/0x70 [ 746.665712][T17698] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 746.665727][T17698] RIP: 0023:0xf701efec [ 746.665741][T17698] Code: Unable to access opcode bytes at 0xf701efc2. [ 746.665747][T17698] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 746.665758][T17698] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 746.665766][T17698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 746.665773][T17698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 746.665780][T17698] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 746.665786][T17698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.665801][T17698] [ 746.675863][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.720105][T17698] Mem-Info: [ 746.720127][T17698] active_anon:440 inactive_anon:82 isolated_anon:0 [ 746.720127][T17698] active_file:1044 inactive_file:5660 isolated_file:0 [ 746.720127][T17698] unevictable:1000 dirty:15 writeback:9 [ 746.720127][T17698] slab_reclaimable:7659 slab_unreclaimable:81843 [ 746.720127][T17698] mapped:23388 shmem:1003 pagetables:1447 [ 746.720127][T17698] sec_pagetables:332 bounce:0 [ 746.720127][T17698] kernel_misc_reclaimable:0 [ 746.720127][T17698] free:29818 free_pcp:76 free_cma:0 [ 746.720176][T17698] Node 0 active_anon:52kB inactive_anon:72kB active_file:2172kB inactive_file:1884kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1116kB dirty:4kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8512kB pagetables:1312kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 746.720224][T17698] Node 1 active_anon:1708kB inactive_anon:256kB active_file:2004kB inactive_file:20756kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:92436kB dirty:56kB writeback:36kB shmem:4008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7616kB pagetables:4476kB sec_pagetables:220kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 746.720272][T17698] Node 0 DMA free:3120kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 746.720440][T17698] lowmem_reserve[]: 0 277 277 277 277 [ 746.720500][T17698] Node 0 DMA32 free:29512kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:52kB inactive_anon:72kB active_file:2172kB inactive_file:1884kB unevictable:0kB writepending:4kB zspages:3200kB present:1032196kB managed:284588kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 746.720556][T17698] lowmem_reserve[]: 0 0 0 0 0 [ 746.720590][T17698] Node 1 DMA32 free:86640kB boost:93780kB min:140924kB low:152708kB high:164492kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1708kB inactive_anon:256kB active_file:2004kB inactive_file:20456kB unevictable:4000kB writepending:92kB zspages:5184kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:436kB local_pcp:32kB free_cma:0kB [ 746.720647][T17698] lowmem_reserve[]: 0 0 0 0 0 [ 746.720681][T17698] Node 0 DMA: 136*4kB (U) 22*8kB (UE) 6*16kB (U) 14*32kB (UE) 7*64kB (U) 1*128kB (E) 1*256kB (E) 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 3120kB [ 746.720876][T17698] Node 0 DMA32: 1168*4kB (UME) 395*8kB (UME) 164*16kB (UM) 147*32kB (UME) 51*64kB (UME) 19*128kB (UME) 14*256kB (UME) 8*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 29560kB [ 746.721012][T17698] Node 1 DMA32: 2356*4kB (UME) 2047*8kB (UME) 1090*16kB (UME) 441*32kB (UME) 151*64kB (UME) 72*128kB (UME) 27*256kB (UME) 5*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 86728kB [ 746.721259][T17698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 746.721275][T17698] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 746.721291][T17698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 746.721305][T17698] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 746.721321][T17698] 7929 total pagecache pages [ 746.721328][T17698] 321 pages in swap cache [ 746.721334][T17698] Free swap = 94844kB [ 746.721342][T17698] Total swap = 124996kB [ 746.721350][T17698] 524155 pages RAM [ 746.721357][T17698] 0 pages HighMem/MovableOnly [ 746.721364][T17698] 212116 pages reserved [ 746.721372][T17698] 0 pages cma reserved [ 746.721379][T17698] Unreclaimable slab info: [ 746.721385][T17698] Name Used Total [ 746.721491][T17698] bio-184 13KB 16KB [ 746.721509][T17698] pid_3 39KB 63KB [ 746.721526][T17698] pid_2 31KB 70KB [ 746.721551][T17698] bio-464 17KB 31KB [ 746.721565][T17698] bio-528 19KB 31KB [ 746.721584][T17698] bio-544 19KB 31KB [ 746.721601][T17698] bio-552 19KB 31KB [ 746.721615][T17698] zswap_entry 584KB 620KB [ 746.721629][T17698] AF_VSOCK 61KB 183KB [ 746.721644][T17698] sw_flow_stats 30KB 36KB [ 746.721659][T17698] sw_flow 82KB 122KB [ 746.721676][T17698] batadv_tt_change_cache 8KB 16KB [ 746.721693][T17698] batadv_tl_cache 27KB 32KB [ 746.721707][T17698] ceph_osd_request 2KB 31KB [ 746.721719][T17698] ceph_msg 1KB 15KB [ 746.721734][T17698] IEEE-802.15.4-MAC 67KB 125KB [ 746.721749][T17698] IEEE-802.15.4-RAW 42KB 94KB [ 746.721762][T17698] p9_req_t 20KB 31KB [ 746.721775][T17698] INET_SMC 34KB 62KB [ 746.721789][T17698] SMC6 96KB 218KB [ 746.721804][T17698] SMC 100KB 187KB [ 746.721816][T17698] TIPC 47KB 184KB [ 746.721829][T17698] rds_tcp_incoming 7KB 15KB [ 746.721844][T17698] rds_tcp_connection 42KB 63KB [ 746.721863][T17698] RDS 51KB 154KB [ 746.721878][T17698] rds_connection 35KB 62KB [ 746.721893][T17698] SCTPv6 83KB 180KB [ 746.721907][T17698] SCTP 26KB 153KB [ 746.721920][T17698] sctp_chunk 9KB 54KB [ 746.721934][T17698] sctp_bind_bucket 10KB 16KB [ 746.721948][T17698] PNPIPE 48KB 92KB [ 746.721961][T17698] PHONET 30KB 63KB [ 746.721976][T17698] L2TP/IPv6 24KB 159KB [ 746.721991][T17698] L2TP/IP 28KB 157KB [ 746.722005][T17698] KCM 42KB 124KB [ 746.722019][T17698] kcm_mux 45KB 79KB [ 746.722031][T17698] RXRPC 64KB 224KB [ 746.722043][T17698] rxrpc_call_jar 232KB 350KB [ 746.722058][T17698] can_receiver 12KB 15KB [ 746.722072][T17698] net_bridge_fdb_entry 42KB 59KB [ 746.722090][T17698] MPTCPv6 105KB 223KB [ 746.722106][T17698] ip6-frags 9KB 15KB [ 746.722125][T17698] fib6_node 218KB 220KB [ 746.723750][T17698] ip6_dst_cache 242KB 382KB [ 746.723772][T17698] PINGv6 70KB 123KB [ 746.723787][T17698] RAWv6 169KB 278KB [ 746.723801][T17698] UDPv6 144KB 252KB [ 746.723816][T17698] tw_sock_TCPv6 19KB 31KB [ 746.723829][T17698] request_sock_TCPv6 21KB 30KB [ 746.723844][T17698] TCPv6 131KB 273KB [ 746.738418][T17698] ip_vs_conn 13KB 16KB [ 746.738445][T17698] nf_conntrack 38KB 63KB [ 746.738528][T17698] wg_peer 151KB 208KB [ 746.738544][T17698] allowedips_node 23KB 35KB [ 746.738564][T17698] t10_alua_lu_gp_cache 8KB 15KB [ 746.738580][T17698] scsi_sense_cache 60KB 60KB [ 746.738595][T17698] virtio_scsi_cmd 21KB 24KB [ 746.738610][T17698] bio-136 50KB 68KB [ 746.738638][T17698] io_kiocb 2KB 39KB [ 746.738653][T17698] bio-264 21KB 23KB [ 746.738665][T17698] mqueue_inode_cache 35KB 154KB [ 746.738685][T17698] f2fs_evict_inode_work 7KB 7KB [ 746.738698][T17698] bio-272 10KB 15KB [ 746.738709][T17698] f2fs_bio_post_read_ctx 30KB 31KB [ 746.738785][T17698] jfs_mp 14KB 15KB [ 746.738800][T17698] fuse_request 10KB 46KB [ 746.738814][T17698] jffs2_xattr_ref 9KB 20KB [ 746.738829][T17698] jffs2_xattr_datum 19KB 36KB [ 746.738840][T17698] jffs2_inode_cache 9KB 24KB [ 746.738850][T17698] jffs2_node_frag 11KB 15KB [ 746.738863][T17698] jffs2_refblock 13KB 30KB [ 746.738877][T17698] jffs2_tmp_dnode_info 10KB 23KB [ 746.738918][T17698] jffs2_raw_inode 18KB 32KB [ 746.738932][T17698] jffs2_raw_dirent 7KB 16KB [ 746.738946][T17698] jffs2_full_dnode 3KB 19KB [ 746.738963][T17698] cifs_small_rq 28KB 32KB [ 746.738977][T17698] cifs_request 67KB 67KB [ 746.738990][T17698] cifs_mpx_ids 8KB 15KB [ 746.739005][T17698] cifs_io_subrequest 42KB 47KB [ 746.739019][T17698] cifs_io_request 105KB 111KB [ 746.739047][T17698] nfs_commit_data 24KB 31KB [ 746.739060][T17698] nfs_write_data 40KB 63KB [ 746.739084][T17698] ecryptfs_sb_cache 10KB 15KB [ 746.739136][T17698] jbd2_inode 21KB 27KB [ 746.739152][T17698] ext4_system_zone 1KB 3KB [ 746.739164][T17698] ext4_io_end_vec 5KB 15KB [ 746.739186][T17698] kioctx 17KB 127KB [ 746.739199][T17698] aio_kiocb 25KB 46KB [ 746.739212][T17698] fanotify_fid_event 23KB 31KB [ 746.739225][T17698] fanotify_mark 33KB 35KB [ 746.739236][T17698] dnotify_mark 34KB 35KB [ 746.739247][T17698] dnotify_struct 8KB 11KB [ 746.739259][T17698] fasync_cache 35KB 47KB [ 746.739274][T17698] userfaultfd_ctx_cache 26KB 94KB [ 746.739290][T17698] zspage 178KB 212KB [ 746.739303][T17698] zs_handle 210KB 232KB [ 746.739316][T17698] pid_namespace 62KB 123KB [ 746.739329][T17698] kvm_gmem_inode_cache 25KB 30KB [ 746.739344][T17698] kvm_async_pf 2KB 19KB [ 746.739357][T17698] kvm_vcpu 30KB 212KB [ 746.739369][T17698] kvm_mmu_page_header 4KB 19KB [ 746.739382][T17698] pte_list_desc 3KB 15KB [ 746.739395][T17698] x86_emulator 78KB 159KB [ 746.740583][T17698] rpc_buffers 53KB 95KB [ 746.740600][T17698] rpc_tasks 14KB 23KB [ 746.740612][T17698] UNIX-STREAM 85KB 223KB [ 746.740627][T17698] UNIX 221KB 446KB [ 746.740639][T17698] ip4-frags 19KB 31KB [ 746.740652][T17698] mfc_cache 7KB 8KB [ 746.740667][T17698] MPTCP 73KB 183KB [ 746.740680][T17698] request_sock_subflow_v4 30KB 53KB [ 746.740694][T17698] tcp_bind2_bucket 22KB 32KB [ 746.740707][T17698] tcp_bind_bucket 15KB 32KB [ 746.740721][T17698] inet_peer 28KB 32KB [ 746.740735][T17698] xfrm_dst 9KB 15KB [ 746.740750][T17698] xfrm_state 15KB 159KB [ 746.740763][T17698] ip_fib_trie 37KB 40KB [ 746.740776][T17698] ip_fib_alias 132KB 134KB [ 746.740792][T17698] rtable 39KB 108KB [ 746.740806][T17698] PING 52KB 94KB [ 746.740819][T17698] RAW 86KB 223KB [ 746.740834][T17698] UDP 140KB 286KB [ 746.740848][T17698] tw_sock_TCP 28KB 47KB [ 746.740861][T17698] request_sock_TCP 29KB 38KB [ 746.740874][T17698] TCP 227KB 321KB [ 746.740887][T17698] fs_bio_integrity 7KB 8KB [ 746.740902][T17698] hugetlbfs_inode_cache 30KB 93KB [ 746.740918][T17698] netfs_subrequest 35KB 39KB [ 746.740932][T17698] netfs_request 105KB 111KB [ 746.740944][T17698] bio-288 31KB 31KB [ 746.740958][T17698] bio-328 12KB 15KB [ 746.740973][T17698] ep_head 3KB 23KB [ 746.740984][T17698] eventpoll_pwq 8KB 35KB [ 746.740997][T17698] eventpoll_epi 41KB 63KB [ 746.741010][T17698] inotify_inode_mark 39KB 50KB [ 746.741024][T17698] bpf_fs_inode_cache 44KB 94KB [ 746.741038][T17698] sgpool-128 38KB 238KB [ 746.741052][T17698] sgpool-64 55KB 223KB [ 746.741066][T17698] sgpool-32 38KB 63KB [ 746.741078][T17698] sgpool-16 21KB 62KB [ 746.741091][T17698] sgpool-8 23KB 46KB [ 746.741105][T17698] bio_crypt_ctx 9KB 11KB [ 746.741124][T17698] bio_integrity_data 7KB 8KB [ 746.741139][T17698] request_queue 244KB 272KB [ 746.741152][T17698] blkdev_ioc 11KB 31KB [ 746.741169][T17698] bio-200 43KB 89KB [ 746.741181][T17698] biovec-max 586KB 684KB [ 746.747473][T17698] biovec-128 59KB 127KB [ 746.747494][T17698] biovec-64 39KB 189KB [ 746.747508][T17698] biovec-16 20KB 39KB [ 746.747524][T17698] mm_slot 11KB 15KB [ 746.747537][T17698] ksm_mm_slot 11KB 12KB [ 746.747554][T17698] uid_cache 30KB 54KB [ 746.747666][T17698] iommu_iova_magazine 74KB 252KB [ 746.747682][T17698] iommu_iova 246KB 252KB [ 746.747694][T17698] dmaengine-unmap-256 26KB 30KB [ 746.747707][T17698] dmaengine-unmap-128 14KB 30KB [ 746.747721][T17698] dmaengine-unmap-16 7KB 8KB [ 746.747733][T17698] dmaengine-unmap-2 3KB 4KB [ 746.747746][T17698] QIPCRTR 37KB 125KB [ 746.747760][T17698] audit_buffer 22KB 39KB [ 746.747772][T17698] skbuff_ext_cache 7KB 28KB [ 746.747791][T17698] skbuff_small_head 1257KB 1559KB [ 746.747804][T17698] skbuff_fclone_cache 101KB 156KB [ 746.747819][T17698] skbuff_head_cache 1420KB 1445KB [ 746.747831][T17698] configfs_dir_cache 37KB 40KB [ 746.747844][T17698] file_lease_cache 18KB 71KB [ 746.747859][T17698] file_lock_cache 16KB 63KB [ 746.747872][T17698] file_lock_ctx 38KB 43KB [ 746.747887][T17698] fsnotify_inode_mark_connector 31KB 51KB [ 746.747902][T17698] posix_timers_cache 11KB 40KB [ 746.747916][T17698] taskstats 70KB 127KB [ 746.747930][T17698] mem_cgroup_per_node 148KB 183KB [ 746.747943][T17698] mem_cgroup 161KB 216KB [ 746.747959][T17698] proc_dir_entry 901KB 968KB [ 746.747973][T17698] pde_opener 6KB 31KB [ 746.747986][T17698] seq_file 34KB 70KB [ 746.748001][T17698] sigqueue 14KB 35KB [ 746.748020][T17698] shmem_inode_cache 7192KB 7631KB [ 746.748033][T17698] kernfs_iattrs_cache 25KB 31KB [ 746.748049][T17698] kernfs_node_cache 39613KB 39656KB [ 746.748064][T17698] mnt_cache 83KB 126KB [ 746.748077][T17698] bfilp 23KB 31KB [ 746.748099][T17698] filp 375KB 716KB [ 746.748116][T17698] names_cache 255KB 304KB [ 746.748138][T17698] net_namespace 138KB 266KB [ 746.748151][T17698] ima_iint_cache 37KB 71KB [ 746.748177][T17698] lsm_inode_cache 1676KB 1866KB [ 746.748198][T17698] lsm_file_cache 146KB 288KB [ 746.748213][T17698] key_jar 40KB 63KB [ 746.748228][T17698] uts_namespace 28KB 92KB [ 746.748244][T17698] nsproxy 10KB 31KB [ 746.748265][T17698] vm_area_struct 827KB 1140KB [ 746.748279][T17698] fs_cache 37KB 56KB [ 746.748294][T17698] files_cache 107KB 207KB [ 746.748307][T17698] task_exec_state 8KB 32KB [ 746.748325][T17698] signal_cache 966KB 1941KB [ 746.748343][T17698] sighand_cache 1230KB 2074KB [ 746.748361][T17698] task_struct 5071KB 5568KB [ 746.748381][T17698] cred 158KB 324KB [ 746.748399][T17698] anon_vma_chain 347KB 401KB [ 746.748417][T17698] anon_vma 298KB 471KB [ 746.748437][T17698] pid 175KB 414KB [ 746.748475][T17698] Acpi-Operand 204KB 328KB [ 746.748491][T17698] Acpi-ParseExt 31KB 51KB [ 746.748505][T17698] Acpi-Parse 12KB 23KB [ 746.748519][T17698] Acpi-State 14KB 35KB [ 746.748531][T17698] Acpi-Namespace 31KB 44KB [ 746.748545][T17698] shared_policy_node 7KB 8KB [ 746.748557][T17698] numa_policy 13KB 16KB [ 746.748569][T17698] perf_event 15KB 31KB [ 746.748583][T17698] trace_event_file 577KB 580KB [ 746.748595][T17698] ftrace_event_field 1124KB 1126KB [ 746.748609][T17698] pool_workqueue 2449KB 2464KB [ 746.748622][T17698] task_group 48KB 64KB [ 746.748743][T17698] maple_node 584KB 1544KB [ 746.748757][T17698] mm_struct 309KB 478KB [ 746.748792][T17698] vmap_area 411KB 1029KB [ 746.749118][T17698] debug_objects_cache 3349KB 13641KB [ 746.749142][T17698] page->ptl 106KB 145KB [ 746.749188][T17698] kmalloc-cg-8k 3536KB 3712KB [ 746.749207][T17698] kmalloc-cg-4k 22144KB 22592KB [ 746.749224][T17698] kmalloc-cg-2k 14312KB 14640KB [ 746.749238][T17698] kmalloc-cg-1k 4116KB 4288KB [ 746.749252][T17698] kmalloc-cg-512 1771KB 1776KB [ 746.749265][T17698] kmalloc-cg-256 553KB 600KB [ 746.749280][T17698] kmalloc-cg-128 376KB 388KB [ 746.749297][T17698] kmalloc-cg-64 81KB 132KB [ 746.749316][T17698] kmalloc-cg-32 53KB 164KB [ 746.749328][T17698] kmalloc-cg-16 7KB 28KB [ 746.749343][T17698] kmalloc-cg-8 31KB 52KB [ 746.749406][T17698] kmalloc-cg-192 70KB 88KB [ 746.749421][T17698] kmalloc-cg-96 81KB 96KB [ 746.749453][T17698] kmalloc-8k 8640KB 8896KB [ 746.749472][T17698] kmalloc-4k 33856KB 34528KB [ 746.749496][T17698] kmalloc-2k 13136KB 14112KB [ 746.749516][T17698] kmalloc-1k 8770KB 9632KB [ 746.749544][T17698] kmalloc-512 14324KB 14800KB [ 746.749569][T17698] kmalloc-256 5941KB 6264KB [ 746.749597][T17698] kmalloc-128 2180KB 2452KB [ 746.749624][T17698] kmalloc-64 3504KB 3596KB [ 746.749664][T17698] kmalloc-32 2556KB 2784KB [ 746.749686][T17698] kmalloc-16 510KB 816KB [ 746.749703][T17698] kmalloc-8 1384KB 1420KB [ 746.749820][T17698] kmalloc-192 2222KB 2496KB [ 746.749841][T17698] kmalloc-96 1758KB 1820KB [ 746.749855][T17698] kmem_cache_node 216KB 220KB [ 746.749870][T17698] kmem_cache 180KB 218KB [ 746.749882][T17698] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz5,task=syz.5.3262,pid=17698,uid=0 [ 746.751383][T17698] Out of memory (oom_kill_allocating_task): Killed process 17697 (syz.5.3262) total-vm:102036kB, anon-rss:188kB, file-rss:23460kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 746.752890][ T5137] klogd invoked oom-killer: gfp_mask=0xc2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), order=0, oom_score_adj=0 [ 746.752920][ T5137] CPU: 2 UID: 0 PID: 5137 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 746.752935][ T5137] Tainted: [L]=SOFTLOCKUP [ 746.752939][ T5137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 746.752947][ T5137] Call Trace: [ 746.752951][ T5137] [ 746.752956][ T5137] dump_stack_lvl+0x100/0x190 [ 746.752974][ T5137] dump_header+0xfb/0x606 [ 746.752987][ T5137] oom_kill_process.cold+0xd/0x380 [ 746.753004][ T5137] out_of_memory+0x1256/0x14f0 [ 746.753022][ T5137] ? __pfx_out_of_memory+0x10/0x10 [ 746.753041][ T5137] __alloc_frozen_pages_noprof+0x2852/0x3300 [ 746.753062][ T5137] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 746.753076][ T5137] ? stack_trace_save+0x8e/0xc0 [ 746.753090][ T5137] ? __pfx_stack_trace_save+0x10/0x10 [ 746.753103][ T5137] ? stack_depot_save_flags+0x27/0x9f0 [ 746.753119][ T5137] ? kasan_save_stack+0x3f/0x50 [ 746.753136][ T5137] ? __alloc_skb+0x140/0x710 [ 746.753148][ T5137] ? alloc_skb_with_frags+0xdd/0x760 [ 746.753163][ T5137] ? sock_alloc_send_pskb+0x801/0x980 [ 746.753174][ T5137] ? unix_dgram_sendmsg+0x3c7/0x1810 [ 746.753187][ T5137] ? __sys_sendto+0x48b/0x4e0 [ 746.753204][ T5137] ? __lock_acquire+0x5c0/0x1f40 [ 746.753221][ T5137] new_slab+0x1f6/0x6e0 [ 746.753233][ T5137] refill_objects+0xe3/0x410 [ 746.753248][ T5137] __pcs_replace_empty_main+0x35e/0x650 [ 746.753268][ T5137] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 746.753282][ T5137] ? trace_kmem_cache_alloc+0xdd/0x100 [ 746.753296][ T5137] ? __alloc_skb+0x185/0x710 [ 746.753311][ T5137] kmalloc_reserve+0xe8/0x350 [ 746.753330][ T5137] __alloc_skb+0x185/0x710 [ 746.753342][ T5137] ? __alloc_skb+0x5b7/0x710 [ 746.753354][ T5137] ? __pfx___alloc_skb+0x10/0x10 [ 746.753367][ T5137] ? try_to_wake_up+0x158/0x1c90 [ 746.753387][ T5137] alloc_skb_with_frags+0xdd/0x760 [ 746.753402][ T5137] ? __lock_acquire+0x5c0/0x1f40 [ 746.753420][ T5137] sock_alloc_send_pskb+0x801/0x980 [ 746.753435][ T5137] ? autoremove_wake_function+0x3d/0x150 [ 746.753450][ T5137] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 746.753462][ T5137] ? find_held_lock+0x2b/0x80 [ 746.753474][ T5137] ? find_held_lock+0x2b/0x80 [ 746.753485][ T5137] ? sock_def_readable+0x1d2/0x600 [ 746.753497][ T5137] ? sock_def_readable+0x1d2/0x600 [ 746.753510][ T5137] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 746.753528][ T5137] unix_dgram_sendmsg+0x3c7/0x1810 [ 746.753547][ T5137] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 746.753568][ T5137] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 746.753587][ T5137] ? __pfx_syslog_print+0x10/0x10 [ 746.753602][ T5137] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 746.753619][ T5137] ? apparmor_socket_sendmsg+0x165/0x280 [ 746.753635][ T5137] __sys_sendto+0x48b/0x4e0 [ 746.753646][ T5137] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 746.753661][ T5137] ? __pfx___sys_sendto+0x10/0x10 [ 746.753677][ T5137] ? do_syslog+0x18c/0x6d0 [ 746.753699][ T5137] ? xfd_validate_state+0x129/0x190 [ 746.753720][ T5137] __x64_sys_sendto+0xe0/0x1c0 [ 746.753732][ T5137] ? do_syscall_64+0xae/0x770 [ 746.753747][ T5137] ? lockdep_hardirqs_on+0x7d/0x110 [ 746.753763][ T5137] do_syscall_64+0x121/0x770 [ 746.753780][ T5137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.753791][ T5137] RIP: 0033:0x7f6222b57407 [ 746.753801][ T5137] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 746.753812][ T5137] RSP: 002b:00007fff218c4c00 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 746.753823][ T5137] RAX: ffffffffffffffda RBX: 00007f6222a07c80 RCX: 00007f6222b57407 [ 746.753831][ T5137] RDX: 000000000000005d RSI: 00007fff218c4d40 RDI: 0000000000000003 [ 746.753837][ T5137] RBP: 00007fff218c5170 R08: 0000000000000000 R09: 0000000000000000 [ 746.753844][ T5137] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff218c5188 [ 746.753851][ T5137] R13: 00007fff218c4d40 R14: 0000000000000042 R15: 00007fff218c4d40 [ 746.753879][ T5137] [ 746.754097][ T5137] Mem-Info: [ 746.754103][ T5137] active_anon:398 inactive_anon:105 isolated_anon:0 [ 746.754103][ T5137] active_file:1045 inactive_file:5320 isolated_file:0 [ 746.754103][ T5137] unevictable:1000 dirty:15 writeback:9 [ 746.754103][ T5137] slab_reclaimable:7659 slab_unreclaimable:81843 [ 746.754103][ T5137] mapped:23388 shmem:1003 pagetables:1447 [ 746.754103][ T5137] sec_pagetables:332 bounce:0 [ 746.754103][ T5137] kernel_misc_reclaimable:0 [ 746.754103][ T5137] free:30291 free_pcp:0 free_cma:0 [ 746.754129][ T5137] Node 0 active_anon:52kB inactive_anon:72kB active_file:2172kB inactive_file:1572kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1116kB dirty:4kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8512kB pagetables:1312kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 746.754158][ T5137] Node 1 active_anon:1540kB inactive_anon:348kB active_file:2008kB inactive_file:19708kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:92436kB dirty:56kB writeback:36kB shmem:4008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7616kB pagetables:4476kB sec_pagetables:220kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 746.754185][ T5137] Node 0 DMA free:3120kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 746.754216][ T5137] lowmem_reserve[]: 0 277 277 277 277 [ 746.754234][ T5137] Node 0 DMA32 free:29876kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:52kB inactive_anon:72kB active_file:2172kB inactive_file:1572kB unevictable:0kB writepending:4kB zspages:3200kB present:1032196kB managed:284588kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 746.754263][ T5137] lowmem_reserve[]: 0 0 0 0 0 [ 746.754280][ T5137] Node 1 DMA32 free:88168kB boost:93780kB min:140924kB low:152708kB high:164492kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1540kB inactive_anon:348kB active_file:2008kB inactive_file:19708kB unevictable:4000kB writepending:92kB zspages:5184kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 746.754310][ T5137] lowmem_reserve[]: 0 0 0 0 0 [ 746.754327][ T5137] Node 0 DMA: 136*4kB (U) 22*8kB (UE) 6*16kB (U) 14*32kB (UE) 7*64kB (U) 1*128kB (E) 1*256kB (E) 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 3120kB [ 746.754429][ T5137] Node 0 DMA32: 1175*4kB (UME) 393*8kB (UME) 167*16kB (UM) 151*32kB (UME) 53*64kB (UME) 19*128kB (UME) 14*256kB (UME) 8*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 29876kB [ 746.758259][ T5137] Node 1 DMA32: 2348*4kB (UME) 2073*8kB (UME) 1101*16kB (UME) 456*32kB (UME) 157*64kB (UME) 72*128kB (UME) 28*256kB (UME) 5*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 88200kB [ 746.758349][ T5137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 746.758358][ T5137] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 746.758366][ T5137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 746.758375][ T5137] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 746.758383][ T5137] 7701 total pagecache pages [ 746.758387][ T5137] 321 pages in swap cache [ 746.758391][ T5137] Free swap = 94796kB [ 746.758395][ T5137] Total swap = 124996kB [ 746.758399][ T5137] 524155 pages RAM [ 746.758403][ T5137] 0 pages HighMem/MovableOnly [ 746.758407][ T5137] 212116 pages reserved [ 746.758410][ T5137] 0 pages cma reserved [ 746.758415][ T5137] Unreclaimable slab info: [ 746.758418][ T5137] Name Used Total [ 746.760872][ T5137] bio-184 13KB 16KB [ 746.760884][ T5137] pid_3 39KB 63KB [ 746.760893][ T5137] pid_2 31KB 70KB [ 746.760907][ T5137] bio-464 17KB 31KB [ 746.760915][ T5137] bio-528 19KB 31KB [ 746.760924][ T5137] bio-544 19KB 31KB [ 746.760933][ T5137] bio-552 19KB 31KB [ 746.760942][ T5137] zswap_entry 586KB 624KB [ 746.760949][ T5137] AF_VSOCK 61KB 183KB [ 746.760957][ T5137] sw_flow_stats 30KB 36KB [ 746.760964][ T5137] sw_flow 82KB 122KB [ 746.760974][ T5137] batadv_tt_change_cache 8KB 16KB [ 746.760982][ T5137] batadv_tl_cache 27KB 32KB [ 746.760989][ T5137] ceph_osd_request 2KB 31KB [ 746.760996][ T5137] ceph_msg 1KB 15KB [ 746.761004][ T5137] IEEE-802.15.4-MAC 67KB 125KB [ 746.761011][ T5137] IEEE-802.15.4-RAW 42KB 94KB [ 746.761019][ T5137] p9_req_t 20KB 31KB [ 746.761026][ T5137] INET_SMC 34KB 62KB [ 746.761034][ T5137] SMC6 96KB 218KB [ 746.761041][ T5137] SMC 100KB 187KB [ 746.761051][ T5137] TIPC 47KB 184KB [ 746.761058][ T5137] rds_tcp_incoming 7KB 15KB [ 746.761065][ T5137] rds_tcp_connection 42KB 63KB [ 746.761074][ T5137] RDS 51KB 154KB [ 746.761081][ T5137] rds_connection 35KB 62KB [ 746.761089][ T5137] SCTPv6 83KB 180KB [ 746.761096][ T5137] SCTP 26KB 153KB [ 746.761103][ T5137] sctp_chunk 9KB 54KB [ 746.761111][ T5137] sctp_bind_bucket 10KB 16KB [ 746.761118][ T5137] PNPIPE 48KB 92KB [ 746.761124][ T5137] PHONET 30KB 63KB [ 746.761131][ T5137] L2TP/IPv6 24KB 159KB [ 746.761139][ T5137] L2TP/IP 28KB 157KB [ 746.761146][ T5137] KCM 42KB 124KB [ 746.761154][ T5137] kcm_mux 45KB 79KB [ 746.761161][ T5137] RXRPC 64KB 224KB [ 746.761169][ T5137] rxrpc_call_jar 232KB 350KB [ 746.761177][ T5137] can_receiver 12KB 15KB [ 746.761184][ T5137] net_bridge_fdb_entry 42KB 59KB [ 746.761194][ T5137] MPTCPv6 105KB 223KB [ 746.761202][ T5137] ip6-frags 9KB 15KB [ 746.761209][ T5137] fib6_node 218KB 220KB [ 746.761219][ T5137] ip6_dst_cache 242KB 382KB [ 746.761227][ T5137] PINGv6 70KB 123KB [ 746.761234][ T5137] RAWv6 169KB 278KB [ 746.761242][ T5137] UDPv6 144KB 252KB [ 746.761249][ T5137] tw_sock_TCPv6 19KB 31KB [ 746.761256][ T5137] request_sock_TCPv6 21KB 30KB [ 746.761264][ T5137] TCPv6 131KB 273KB [ 746.761270][ T5137] ip_vs_conn 13KB 16KB [ 746.761281][ T5137] nf_conntrack 38KB 63KB [ 746.761303][ T5137] wg_peer 151KB 208KB [ 746.761311][ T5137] allowedips_node 23KB 35KB [ 746.761321][ T5137] t10_alua_lu_gp_cache 8KB 15KB [ 746.761329][ T5137] scsi_sense_cache 60KB 60KB [ 746.761338][ T5137] virtio_scsi_cmd 21KB 24KB [ 746.761346][ T5137] bio-136 50KB 68KB [ 746.761361][ T5137] io_kiocb 2KB 39KB [ 746.761369][ T5137] bio-264 21KB 23KB [ 746.761376][ T5137] mqueue_inode_cache 35KB 154KB [ 746.761388][ T5137] f2fs_evict_inode_work 7KB 7KB [ 746.761395][ T5137] bio-272 10KB 15KB [ 746.761402][ T5137] f2fs_bio_post_read_ctx 30KB 31KB [ 746.761441][ T5137] jfs_mp 14KB 15KB [ 746.761451][ T5137] fuse_request 10KB 46KB [ 746.761458][ T5137] jffs2_xattr_ref 9KB 20KB [ 746.761466][ T5137] jffs2_xattr_datum 19KB 36KB [ 746.761473][ T5137] jffs2_inode_cache 9KB 24KB [ 746.761480][ T5137] jffs2_node_frag 11KB 15KB [ 746.761488][ T5137] jffs2_refblock 13KB 30KB [ 746.761495][ T5137] jffs2_tmp_dnode_info 10KB 23KB [ 746.761503][ T5137] jffs2_raw_inode 18KB 32KB [ 746.761510][ T5137] jffs2_raw_dirent 7KB 16KB [ 746.761517][ T5137] jffs2_full_dnode 3KB 19KB [ 746.761526][ T5137] cifs_small_rq 28KB 32KB [ 746.761533][ T5137] cifs_request 67KB 67KB [ 746.761539][ T5137] cifs_mpx_ids 8KB 15KB [ 746.761551][ T5137] cifs_io_subrequest 42KB 47KB [ 746.761558][ T5137] cifs_io_request 105KB 111KB [ 746.761572][ T5137] nfs_commit_data 24KB 31KB [ 746.761579][ T5137] nfs_write_data 40KB 63KB [ 746.761590][ T5137] ecryptfs_sb_cache 10KB 15KB [ 746.761602][ T5137] jbd2_inode 21KB 27KB [ 746.761609][ T5137] ext4_system_zone 1KB 3KB [ 746.761617][ T5137] ext4_io_end_vec 5KB 15KB [ 746.761628][ T5137] kioctx 17KB 127KB [ 746.761636][ T5137] aio_kiocb 25KB 46KB [ 746.761649][ T5137] fanotify_fid_event 23KB 31KB [ 746.761659][ T5137] fanotify_mark 33KB 35KB [ 746.761670][ T5137] dnotify_mark 34KB 35KB [ 746.761680][ T5137] dnotify_struct 8KB 11KB [ 746.761691][ T5137] fasync_cache 35KB 47KB [ 746.761703][ T5137] userfaultfd_ctx_cache 26KB 94KB [ 746.761715][ T5137] zspage 178KB 212KB [ 746.761727][ T5137] zs_handle 210KB 232KB [ 746.761742][ T5137] pid_namespace 62KB 123KB [ 746.761753][ T5137] kvm_gmem_inode_cache 25KB 30KB [ 746.761764][ T5137] kvm_async_pf 2KB 19KB [ 746.761776][ T5137] kvm_vcpu 30KB 212KB [ 746.761786][ T5137] kvm_mmu_page_header 4KB 19KB [ 746.761797][ T5137] pte_list_desc 3KB 15KB [ 746.761810][ T5137] x86_emulator 78KB 159KB [ 746.761822][ T5137] rpc_buffers 53KB 95KB [ 746.761832][ T5137] rpc_tasks 14KB 23KB [ 746.761840][ T5137] UNIX-STREAM 85KB 223KB [ 746.761849][ T5137] UNIX 221KB 446KB [ 746.761856][ T5137] ip4-frags 19KB 31KB [ 746.761864][ T5137] mfc_cache 7KB 8KB [ 746.761871][ T5137] MPTCP 73KB 183KB [ 746.761878][ T5137] request_sock_subflow_v4 30KB 53KB [ 746.761886][ T5137] tcp_bind2_bucket 22KB 32KB [ 746.761893][ T5137] tcp_bind_bucket 15KB 32KB [ 746.761901][ T5137] inet_peer 28KB 32KB [ 746.761907][ T5137] xfrm_dst 9KB 15KB [ 746.761914][ T5137] xfrm_state 15KB 159KB [ 746.761921][ T5137] ip_fib_trie 37KB 40KB [ 746.761929][ T5137] ip_fib_alias 132KB 134KB [ 746.761938][ T5137] rtable 39KB 108KB [ 746.761945][ T5137] PING 52KB 94KB [ 746.761952][ T5137] RAW 86KB 223KB [ 746.761960][ T5137] UDP 140KB 286KB [ 746.761967][ T5137] tw_sock_TCP 28KB 47KB [ 746.761974][ T5137] request_sock_TCP 29KB 38KB [ 746.761982][ T5137] TCP 227KB 321KB [ 746.761989][ T5137] fs_bio_integrity 7KB 8KB [ 746.761996][ T5137] hugetlbfs_inode_cache 30KB 93KB [ 746.762004][ T5137] netfs_subrequest 35KB 39KB [ 746.762011][ T5137] netfs_request 105KB 111KB [ 746.762019][ T5137] bio-288 31KB 31KB [ 746.762025][ T5137] bio-328 12KB 15KB [ 746.762034][ T5137] ep_head 3KB 23KB [ 746.762042][ T5137] eventpoll_pwq 8KB 35KB [ 746.762049][ T5137] eventpoll_epi 41KB 63KB [ 746.762056][ T5137] inotify_inode_mark 39KB 50KB [ 746.762064][ T5137] bpf_fs_inode_cache 44KB 94KB [ 746.762072][ T5137] sgpool-128 38KB 238KB [ 746.762080][ T5137] sgpool-64 55KB 223KB [ 746.762087][ T5137] sgpool-32 38KB 63KB [ 746.762094][ T5137] sgpool-16 21KB 62KB [ 746.762101][ T5137] sgpool-8 23KB 46KB [ 746.762108][ T5137] bio_crypt_ctx 9KB 11KB [ 746.762114][ T5137] bio_integrity_data 7KB 8KB [ 746.762122][ T5137] request_queue 244KB 272KB [ 746.762129][ T5137] blkdev_ioc 11KB 31KB [ 746.762137][ T5137] bio-200 43KB 89KB [ 746.762144][ T5137] biovec-max 586KB 684KB [ 746.762152][ T5137] biovec-128 59KB 127KB [ 746.762159][ T5137] biovec-64 39KB 189KB [ 746.762167][ T5137] biovec-16 20KB 39KB [ 746.762174][ T5137] mm_slot 11KB 15KB [ 746.762181][ T5137] ksm_mm_slot 11KB 12KB [ 746.762190][ T5137] uid_cache 30KB 54KB [ 746.762198][ T5137] iommu_iova_magazine 74KB 252KB [ 746.762205][ T5137] iommu_iova 246KB 252KB [ 746.762212][ T5137] dmaengine-unmap-256 26KB 30KB [ 746.762220][ T5137] dmaengine-unmap-128 14KB 30KB [ 746.762227][ T5137] dmaengine-unmap-16 7KB 8KB [ 746.762233][ T5137] dmaengine-unmap-2 3KB 4KB [ 746.762240][ T5137] QIPCRTR 37KB 125KB [ 746.762248][ T5137] audit_buffer 22KB 39KB [ 746.762256][ T5137] skbuff_ext_cache 7KB 28KB [ 746.762266][ T5137] skbuff_small_head 1257KB 1559KB [ 746.762274][ T5137] skbuff_fclone_cache 101KB 156KB [ 746.762282][ T5137] skbuff_head_cache 1420KB 1445KB [ 746.762289][ T5137] configfs_dir_cache 37KB 40KB [ 746.762297][ T5137] file_lease_cache 18KB 71KB [ 746.762305][ T5137] file_lock_cache 16KB 63KB [ 746.762318][ T5137] file_lock_ctx 38KB 43KB [ 746.762326][ T5137] fsnotify_inode_mark_connector 31KB 51KB [ 746.762335][ T5137] posix_timers_cache 11KB 40KB [ 746.762343][ T5137] taskstats 70KB 127KB [ 746.762350][ T5137] mem_cgroup_per_node 148KB 183KB [ 746.762357][ T5137] mem_cgroup 161KB 216KB [ 746.762367][ T5137] proc_dir_entry 901KB 968KB [ 746.762375][ T5137] pde_opener 6KB 31KB [ 746.762383][ T5137] seq_file 34KB 70KB [ 746.762391][ T5137] sigqueue 14KB 35KB [ 746.762403][ T5137] shmem_inode_cache 7192KB 7631KB [ 746.762411][ T5137] kernfs_iattrs_cache 25KB 31KB [ 746.762421][ T5137] kernfs_node_cache 39613KB 39656KB [ 746.762429][ T5137] mnt_cache 83KB 126KB [ 746.762436][ T5137] bfilp 23KB 31KB [ 746.762451][ T5137] filp 375KB 716KB [ 746.762460][ T5137] names_cache 255KB 304KB [ 746.762468][ T5137] net_namespace 138KB 266KB [ 746.762476][ T5137] ima_iint_cache 37KB 71KB [ 746.762497][ T5137] lsm_inode_cache 1676KB 1866KB [ 746.762509][ T5137] lsm_file_cache 146KB 288KB [ 746.762516][ T5137] key_jar 40KB 63KB [ 746.762524][ T5137] uts_namespace 28KB 92KB [ 746.762532][ T5137] nsproxy 10KB 31KB [ 746.762549][ T5137] vm_area_struct 827KB 1140KB [ 746.762557][ T5137] fs_cache 37KB 56KB [ 746.762566][ T5137] files_cache 107KB 207KB [ 746.762573][ T5137] task_exec_state 8KB 32KB [ 746.762586][ T5137] signal_cache 966KB 1941KB [ 746.762600][ T5137] sighand_cache 1230KB 2074KB [ 746.762611][ T5137] task_struct 5071KB 5568KB [ 746.762624][ T5137] cred 158KB 324KB [ 746.762634][ T5137] anon_vma_chain 347KB 401KB [ 746.762645][ T5137] anon_vma 298KB 471KB [ 746.762656][ T5137] pid 175KB 414KB [ 746.762669][ T5137] Acpi-Operand 204KB 328KB [ 746.762677][ T5137] Acpi-ParseExt 31KB 51KB [ 746.762684][ T5137] Acpi-Parse 12KB 23KB [ 746.762692][ T5137] Acpi-State 14KB 35KB [ 746.762699][ T5137] Acpi-Namespace 31KB 44KB [ 746.762706][ T5137] shared_policy_node 7KB 8KB [ 746.762714][ T5137] numa_policy 13KB 16KB [ 746.762722][ T5137] perf_event 15KB 31KB [ 746.762728][ T5137] trace_event_file 577KB 580KB [ 746.762736][ T5137] ftrace_event_field 1124KB 1126KB [ 746.762743][ T5137] pool_workqueue 2449KB 2464KB [ 746.762751][ T5137] task_group 48KB 64KB [ 746.762773][ T5137] maple_node 584KB 1544KB [ 746.762782][ T5137] mm_struct 309KB 478KB [ 746.762807][ T5137] vmap_area 411KB 1029KB [ 746.763046][ T5137] debug_objects_cache 3349KB 13641KB [ 746.763055][ T5137] page->ptl 106KB 145KB [ 746.763088][ T5137] kmalloc-cg-8k 3536KB 3712KB [ 746.763100][ T5137] kmalloc-cg-4k 22144KB 22592KB [ 746.763112][ T5137] kmalloc-cg-2k 14312KB 14640KB [ 746.763120][ T5137] kmalloc-cg-1k 4116KB 4288KB [ 746.763127][ T5137] kmalloc-cg-512 1771KB 1776KB [ 746.763136][ T5137] kmalloc-cg-256 553KB 600KB [ 746.763143][ T5137] kmalloc-cg-128 376KB 388KB [ 746.763152][ T5137] kmalloc-cg-64 81KB 132KB [ 746.763162][ T5137] kmalloc-cg-32 53KB 164KB [ 746.763170][ T5137] kmalloc-cg-16 7KB 28KB [ 746.763179][ T5137] kmalloc-cg-8 31KB 52KB [ 746.763187][ T5137] kmalloc-cg-192 70KB 88KB [ 746.763195][ T5137] kmalloc-cg-96 81KB 96KB [ 746.763212][ T5137] kmalloc-8k 8640KB 8896KB [ 746.763225][ T5137] kmalloc-4k 33856KB 34528KB [ 746.763239][ T5137] kmalloc-2k 13136KB 14112KB [ 746.763254][ T5137] kmalloc-1k 8770KB 9632KB [ 746.763275][ T5137] kmalloc-512 14324KB 14800KB [ 746.763292][ T5137] kmalloc-256 5941KB 6264KB [ 746.763312][ T5137] kmalloc-128 2180KB 2452KB [ 746.763330][ T5137] kmalloc-64 3504KB 3596KB [ 746.763358][ T5137] kmalloc-32 2556KB 2784KB [ 746.763374][ T5137] kmalloc-16 510KB 816KB [ 746.763384][ T5137] kmalloc-8 1384KB 1420KB [ 746.763405][ T5137] kmalloc-192 2222KB 2496KB [ 746.763417][ T5137] kmalloc-96 1758KB 1820KB [ 746.763424][ T5137] kmem_cache_node 216KB 220KB [ 746.763432][ T5137] kmem_cache 180KB 218KB [ 746.763439][ T5137] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=klogd,pid=5137,uid=0 [ 746.763639][ T5137] Out of memory (oom_kill_allocating_task): Killed process 5137 (klogd) total-vm:4044kB, anon-rss:56kB, file-rss:352kB, shmem-rss:0kB, UID:0 pgtables:44kB oom_score_adj:0 [ 746.934453][T15290] usb 9-1: new low-speed USB device number 37 using dummy_hcd [ 746.994125][T15290] usb 9-1: device descriptor read/8, error -71 [ 747.125145][T15290] usb usb9-port1: unable to enumerate USB device [ 747.289459][T17712] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 747.289475][T17712] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 747.289513][T17712] vhci_hcd vhci_hcd.0: Device attached [ 747.380327][T17708] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 747.477468][ T151] usb 46-1: device descriptor read/8, error -110 [ 747.563988][T16230] usb 48-1: SetAddress Request (110) to port 0 [ 747.564024][T16230] usb 48-1: new SuperSpeed USB device number 110 using vhci_hcd [ 747.857029][T17713] vhci_hcd: connection reset by peer [ 747.864829][T10204] vhci_hcd vhci_hcd.5: stop threads [ 747.864893][T10204] vhci_hcd vhci_hcd.5: release socket [ 747.864936][T10204] vhci_hcd vhci_hcd.5: disconnect device [ 747.945882][ T151] usb usb46-port1: attempt power cycle [ 748.849582][ T151] usb usb46-port1: unable to enumerate USB device [ 749.117902][T17739] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3274'. [ 749.249417][T17743] Cannot find add_set index 32767 as target [ 749.388611][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3277'. [ 750.562116][T17775] Cannot find add_set index 32767 as target [ 750.892706][T17779] netlink: 'syz.0.3288': attribute type 10 has an invalid length. [ 750.895330][T17780] fuse: Bad value for 'user_id' [ 750.895341][T17780] fuse: Bad value for 'user_id' [ 750.895496][T17780] fuse: Bad value for 'user_id' [ 750.895503][T17780] fuse: Bad value for 'user_id' [ 750.909976][T17779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.915697][T17779] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 752.520662][T17802] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 752.520701][T17802] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 752.527649][T17802] vhci_hcd vhci_hcd.0: Device attached [ 752.608974][T17805] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 752.674022][T16230] usb 48-1: device descriptor read/8, error -110 [ 752.803993][ T30] usb 38-1: SetAddress Request (29) to port 0 [ 752.806510][ T30] usb 38-1: new SuperSpeed USB device number 29 using vhci_hcd [ 752.930341][T10450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.930410][T10450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.081445][T16230] usb usb48-port1: attempt power cycle [ 753.186974][T17811] Cannot find add_set index 32767 as target [ 753.368487][T17803] vhci_hcd: connection reset by peer [ 753.368900][T15853] vhci_hcd vhci_hcd.0: stop threads [ 753.368921][T15853] vhci_hcd vhci_hcd.0: release socket [ 753.368965][T15853] vhci_hcd vhci_hcd.0: disconnect device [ 753.534140][T17820] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 753.534177][T17820] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 753.534458][T17820] vhci_hcd vhci_hcd.0: Device attached [ 753.618333][T16230] usb 48-1: SetAddress Request (113) to port 0 [ 753.618649][T16230] usb 48-1: new SuperSpeed USB device number 113 using vhci_hcd [ 753.649781][T17820] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 753.768113][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3302'. [ 755.375856][T17853] 9pnet_virtio: no channels available for device syz [ 755.389030][T17821] vhci_hcd: connection reset by peer [ 755.415162][T10204] vhci_hcd vhci_hcd.5: stop threads [ 755.415214][T10204] vhci_hcd vhci_hcd.5: release socket [ 755.415284][T10204] vhci_hcd vhci_hcd.5: disconnect device [ 755.575756][T17860] trusted_key: encrypted_key: insufficient parameters specified [ 755.680252][T17864] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 755.680293][T17864] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 755.687433][T17864] vhci_hcd vhci_hcd.0: Device attached [ 755.779799][T17864] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 756.416725][T17878] overlay: ./file1 is not a directory [ 756.459215][T17865] vhci_hcd: connection closed [ 756.459636][ T13] vhci_hcd vhci_hcd.0: stop threads [ 756.463740][ T13] vhci_hcd vhci_hcd.0: release socket [ 756.466158][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 756.925472][ T5921] block nbd0: Possible stuck request ffff88802765e000: control (read@0,1024B). Runtime 30 seconds [ 756.927698][ T5921] block nbd0: Possible stuck request ffff88802765e1c0: control (read@1024,1024B). Runtime 30 seconds [ 756.928433][ T5921] block nbd0: Possible stuck request ffff88802765e380: control (read@2048,1024B). Runtime 30 seconds [ 756.928449][ T5921] block nbd0: Possible stuck request ffff88802765e540: control (read@3072,1024B). Runtime 30 seconds [ 757.148992][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'. [ 757.230670][ T5750] Bluetooth: hci1: link tx timeout [ 757.231206][ T5750] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 757.258646][T17901] Cannot find add_set index 32767 as target [ 757.363168][ T65] Bluetooth: hci1: link tx timeout [ 757.363562][ T65] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 757.406804][ T65] Bluetooth: hci1: link tx timeout [ 757.407196][ T65] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 757.648063][ T65] Bluetooth: hci1: link tx timeout [ 757.648525][ T65] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 758.034048][ T30] usb 38-1: device descriptor read/8, error -110 [ 758.130328][ T65] Bluetooth: hci1: link tx timeout [ 758.135628][ T65] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 758.601612][ T30] usb usb38-port1: attempt power cycle [ 758.673983][T16230] usb 48-1: device descriptor read/8, error -110 [ 758.678980][ T65] Bluetooth: hci1: link tx timeout [ 758.679104][ T65] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 758.784237][T16230] usb usb48-port1: unable to enumerate USB device [ 758.952019][ T65] Bluetooth: hci1: link tx timeout [ 758.952068][ T65] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 759.193986][ T42] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 759.227322][ T65] Bluetooth: hci1: link tx timeout [ 759.227365][ T65] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 759.234413][ T65] Bluetooth: hci1: command 0x0405 tx timeout [ 759.246005][ T30] usb usb38-port1: unable to enumerate USB device [ 759.291869][T17930] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3321'. [ 759.343951][ T42] usb 12-1: Using ep0 maxpacket: 8 [ 759.344704][ T42] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 759.345701][ T42] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 759.345719][ T42] usb 12-1: config 0 has no interface number 0 [ 759.345748][ T42] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 759.345778][ T42] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.351248][ T42] usb 12-1: config 0 descriptor?? [ 759.355835][ T42] iowarrior 12-1:0.1: no interrupt-in endpoint found [ 759.454972][T17940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3325'. [ 759.597625][ T5824] usb 12-1: USB disconnect, device number 10 [ 759.815527][ T30] usb usb38-port8: attempt power cycle [ 760.375355][ T30] usb usb38-port8: unable to enumerate USB device [ 760.764002][ T30] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 760.924505][ T30] usb 9-1: Using ep0 maxpacket: 8 [ 760.925229][ T30] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 760.927866][ T30] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 760.927887][ T30] usb 9-1: config 0 has no interface number 0 [ 760.927918][ T30] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 760.927951][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.948468][ T30] usb 9-1: config 0 descriptor?? [ 760.958254][ T30] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 760.987315][T17979] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3339'. [ 761.199709][ T5886] usb 9-1: USB disconnect, device number 38 [ 761.402521][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3344'. [ 761.821608][T18009] tipc: Started in network mode [ 761.821656][T18009] tipc: Node identity 0e8706f8c912, cluster identity 4711 [ 761.821795][T18009] tipc: Enabled bearer , priority 0 [ 761.824806][T18008] syzkaller0: entered promiscuous mode [ 761.824818][T18008] syzkaller0: entered allmulticast mode [ 761.849272][T18010] tipc: Resetting bearer [ 761.851531][T18007] tipc: Resetting bearer [ 761.873059][T18007] tipc: Disabling bearer [ 762.203053][T18020] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 762.203081][T18020] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 762.213186][T18020] vhci_hcd vhci_hcd.0: Device attached [ 762.218682][T18021] Cannot find add_set index 32767 as target [ 762.279196][T18020] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 762.504027][ T30] usb 46-1: SetAddress Request (70) to port 0 [ 762.506063][ T30] usb 46-1: new SuperSpeed USB device number 70 using vhci_hcd [ 762.731223][T18037] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3357'. [ 762.803313][T18022] vhci_hcd: connection reset by peer [ 762.803733][ T5786] vhci_hcd vhci_hcd.4: stop threads [ 762.803758][ T5786] vhci_hcd vhci_hcd.4: release socket [ 762.803838][ T5786] vhci_hcd vhci_hcd.4: disconnect device [ 762.863778][ T43] audit: type=1326 audit(1788817588.416:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.7.3358" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x0 [ 762.883950][ T5886] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 763.037086][T18047] Cannot find add_set index 32767 as target [ 763.044257][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 763.049507][ T5886] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 763.050602][ T5886] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 763.050622][ T5886] usb 5-1: config 0 has no interface number 0 [ 763.050650][ T5886] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 763.050680][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.055113][ T5886] usb 5-1: config 0 descriptor?? [ 763.058511][ T5886] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 763.319352][T15290] usb 5-1: USB disconnect, device number 19 [ 764.330793][T18066] (syz.5.3367,18066,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 764.330848][T18066] (syz.5.3367,18066,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 764.397343][T18071] Cannot find add_set index 32767 as target [ 764.784308][T18081] netlink: 'syz.5.3372': attribute type 2 has an invalid length. [ 764.823591][T18081] : entered promiscuous mode [ 765.103995][ T5824] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 765.255718][ T5824] usb 5-1: Using ep0 maxpacket: 8 [ 765.258557][ T5824] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 765.264198][ T5824] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 765.264233][ T5824] usb 5-1: config 0 has no interface number 0 [ 765.264267][ T5824] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 765.264301][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.276644][ T5824] usb 5-1: config 0 descriptor?? [ 765.283269][ T5824] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 765.631881][ T5824] usb 5-1: USB disconnect, device number 20 [ 765.792638][T18099] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 765.792693][T18099] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 765.800252][T18099] vhci_hcd vhci_hcd.0: Device attached [ 765.939392][T18104] Cannot find add_set index 32767 as target [ 766.117781][T18099] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 766.370490][T18117] netlink: 'syz.0.3385': attribute type 58 has an invalid length. [ 766.370776][T18117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3385'. [ 766.528526][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3388'. [ 766.656635][T18100] vhci_hcd: connection closed [ 766.657096][T10204] vhci_hcd vhci_hcd.4: stop threads [ 766.657144][T10204] vhci_hcd vhci_hcd.4: release socket [ 766.657250][T10204] vhci_hcd vhci_hcd.4: disconnect device [ 766.910809][T18139] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3394'. [ 766.915564][T18139] syzkaller1: entered promiscuous mode [ 766.915619][T18139] syzkaller1: entered allmulticast mode [ 767.072421][T18144] Cannot find add_set index 32767 as target [ 767.183984][ T1477] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 767.334053][ T1477] usb 10-1: Using ep0 maxpacket: 8 [ 767.334895][ T1477] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 767.335740][ T1477] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 767.335753][ T1477] usb 10-1: config 0 has no interface number 0 [ 767.335771][ T1477] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 767.335789][ T1477] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.337355][ T1477] usb 10-1: config 0 descriptor?? [ 767.340534][ T1477] iowarrior 10-1:0.1: no interrupt-in endpoint found [ 767.554784][ T30] usb 46-1: device descriptor read/8, error -110 [ 767.624815][ T10] usb 10-1: USB disconnect, device number 38 [ 767.809478][T18160] comedi comedi0: Minor -4 is invalid! [ 767.917420][T18156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3400'. [ 767.958181][ T30] usb usb46-port1: attempt power cycle [ 768.000132][T18156] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3400'. [ 768.000184][T18156] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3400'. [ 768.012339][T18168] Cannot find add_set index 32767 as target [ 768.535424][ T30] usb usb46-port1: unable to enumerate USB device [ 768.688686][T18189] loop5: detected capacity change from 0 to 4095 [ 768.700224][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 768.832210][T18209] netlink: 'syz.4.3415': attribute type 58 has an invalid length. [ 768.832266][T18209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3415'. [ 768.940069][T18214] Cannot find add_set index 32767 as target [ 769.035712][T18219] input: syz1 as /devices/virtual/input/input32 [ 769.043977][ T1477] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 769.097457][T16829] Buffer I/O error on dev loop5, logical block 511, async page read [ 769.139578][T16829] Buffer I/O error on dev loop5, logical block 511, async page read [ 769.169089][T16230] kernel read not supported for file /dsp1 (pid: 16230 comm: kworker/1:5) [ 769.205217][ T1477] usb 5-1: Using ep0 maxpacket: 8 [ 769.206686][ T1477] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 769.215258][ T1477] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 769.215635][ T1477] usb 5-1: config 0 has no interface number 0 [ 769.215655][ T1477] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 769.215674][ T1477] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.219812][ T1477] usb 5-1: config 0 descriptor?? [ 769.221746][ T1477] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 769.249909][T16506] Buffer I/O error on dev loop5, logical block 511, async page read [ 769.454858][ T2237] usb 5-1: USB disconnect, device number 21 [ 769.819096][T18238] netlink: 'syz.7.3422': attribute type 2 has an invalid length. [ 770.061763][T18238] : entered promiscuous mode [ 770.717153][T18252] Cannot find add_set index 32767 as target [ 770.894534][T18261] netlink: 'syz.4.3428': attribute type 4 has an invalid length. [ 771.334326][ T5824] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 771.484031][ T5824] usb 10-1: Using ep0 maxpacket: 8 [ 771.486239][ T5824] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 771.489942][ T5824] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 771.492659][ T5824] usb 10-1: config 0 has no interface number 0 [ 771.494736][ T5824] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 771.498066][ T5824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.502262][ T5824] usb 10-1: config 0 descriptor?? [ 771.507953][ T5824] iowarrior 10-1:0.1: no interrupt-in endpoint found [ 771.737818][ T5824] usb 10-1: USB disconnect, device number 39 [ 772.839388][T18297] FAULT_INJECTION: forcing a failure. [ 772.839388][T18297] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 772.839432][T18297] CPU: 2 UID: 0 PID: 18297 Comm: syz.4.3440 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.839460][T18297] Tainted: [L]=SOFTLOCKUP [ 772.839466][T18297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 772.839473][T18297] Call Trace: [ 772.839478][T18297] [ 772.839484][T18297] dump_stack_lvl+0x100/0x190 [ 772.839502][T18297] should_fail_ex.cold+0x5/0xa [ 772.839515][T18297] ? prepare_alloc_pages+0x16d/0x5b0 [ 772.839533][T18297] should_fail_alloc_page+0xeb/0x140 [ 772.839550][T18297] prepare_alloc_pages+0x1f0/0x5b0 [ 772.839565][T18297] ? is_bpf_text_address+0x94/0x1a0 [ 772.839584][T18297] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 772.839603][T18297] ? stack_trace_save+0x8e/0xc0 [ 772.839617][T18297] ? __pfx_stack_trace_save+0x10/0x10 [ 772.839631][T18297] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 772.839645][T18297] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 772.839657][T18297] ? is_bpf_text_address+0x94/0x1a0 [ 772.839674][T18297] ? kasan_save_stack+0x3f/0x50 [ 772.839687][T18297] ? kasan_save_stack+0x30/0x50 [ 772.839699][T18297] ? kasan_save_track+0x14/0x30 [ 772.839712][T18297] ? __kasan_slab_alloc+0x89/0x90 [ 772.839726][T18297] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 772.839738][T18297] ? alloc_vmap_area+0x1814/0x2bb0 [ 772.839751][T18297] ? __get_vm_area_node+0x1ed/0x350 [ 772.839765][T18297] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 772.839780][T18297] ? __vmalloc_node_noprof+0xad/0xf0 [ 772.839795][T18297] ? copy_process+0x803/0x8370 [ 772.839812][T18297] ? kernel_clone+0x176/0x9d0 [ 772.839828][T18297] ? __do_compat_sys_ia32_clone+0xd4/0x120 [ 772.839845][T18297] ? __do_fast_syscall_32+0x13a/0x8b0 [ 772.839863][T18297] ? do_fast_syscall_32+0x32/0x70 [ 772.839879][T18297] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 772.839899][T18297] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 772.839915][T18297] ? policy_nodemask+0xed/0x4f0 [ 772.839932][T18297] alloc_pages_mpol+0x201/0x550 [ 772.839948][T18297] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 772.839968][T18297] alloc_pages_noprof+0x1a/0x160 [ 772.839987][T18297] get_free_pages_noprof+0x10/0xb0 [ 772.840000][T18297] __kasan_populate_vmalloc+0xa0/0x210 [ 772.840016][T18297] alloc_vmap_area+0x95d/0x2bb0 [ 772.840033][T18297] ? kasan_save_track+0x14/0x30 [ 772.840053][T18297] ? __kasan_kmalloc+0xaa/0xb0 [ 772.840067][T18297] ? __pfx_alloc_vmap_area+0x10/0x10 [ 772.840083][T18297] ? __get_vm_area_node+0x124/0x350 [ 772.840102][T18297] __get_vm_area_node+0x1ed/0x350 [ 772.840143][T18297] __vmalloc_node_range_noprof+0x268/0x1420 [ 772.840169][T18297] ? kernel_clone+0x176/0x9d0 [ 772.840192][T18297] ? lock_acquire+0x1d1/0x380 [ 772.840208][T18297] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 772.840220][T18297] ? find_held_lock+0x2b/0x80 [ 772.840232][T18297] ? rcu_read_unlock+0x17/0x60 [ 772.840252][T18297] ? kernel_clone+0x176/0x9d0 [ 772.840271][T18297] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 772.840289][T18297] ? rcu_is_watching+0x13/0xc0 [ 772.840301][T18297] ? trace_kmem_cache_alloc+0xdd/0x100 [ 772.840317][T18297] ? kernel_clone+0x176/0x9d0 [ 772.840354][T18297] __vmalloc_node_noprof+0xad/0xf0 [ 772.840371][T18297] ? kernel_clone+0x176/0x9d0 [ 772.840390][T18297] copy_process+0x803/0x8370 [ 772.840410][T18297] ? __pfx___futex_wait+0x10/0x10 [ 772.840425][T18297] ? futex_hash+0x311/0x400 [ 772.840446][T18297] ? __pfx_copy_process+0x10/0x10 [ 772.840472][T18297] kernel_clone+0x176/0x9d0 [ 772.840490][T18297] ? find_held_lock+0x2b/0x80 [ 772.840503][T18297] ? __pfx_kernel_clone+0x10/0x10 [ 772.840525][T18297] ? ksys_write+0x190/0x250 [ 772.840540][T18297] __do_compat_sys_ia32_clone+0xd4/0x120 [ 772.840558][T18297] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 772.840574][T18297] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 772.840602][T18297] __do_fast_syscall_32+0x13a/0x8b0 [ 772.840621][T18297] do_fast_syscall_32+0x32/0x70 [ 772.840638][T18297] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 772.840653][T18297] RIP: 0023:0xf7f73fec [ 772.840667][T18297] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 772.840673][T18297] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 772.840685][T18297] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 772.840692][T18297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 772.840700][T18297] RBP: 00000000f54365ec R08: 0000000000000000 R09: 0000000000000000 [ 772.840707][T18297] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 772.840715][T18297] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 772.840730][T18297] [ 772.840805][T18297] warn_alloc: 1 callbacks suppressed [ 772.840834][T18297] syz.4.3440: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 772.840945][T18297] CPU: 2 UID: 0 PID: 18297 Comm: syz.4.3440 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.840972][T18297] Tainted: [L]=SOFTLOCKUP [ 772.840977][T18297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 772.840984][T18297] Call Trace: [ 772.840988][T18297] [ 772.840993][T18297] dump_stack_lvl+0x100/0x190 [ 772.841010][T18297] warn_alloc.cold+0x9e/0xb2 [ 772.841023][T18297] ? __pfx_warn_alloc+0x10/0x10 [ 772.841039][T18297] ? lockdep_hardirqs_on+0x7d/0x110 [ 772.841057][T18297] ? __get_vm_area_node+0x2f0/0x350 [ 772.841076][T18297] ? __get_vm_area_node+0x22b/0x350 [ 772.841095][T18297] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 772.841111][T18297] ? lock_acquire+0x1d1/0x380 [ 772.841127][T18297] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 772.841140][T18297] ? find_held_lock+0x2b/0x80 [ 772.841153][T18297] ? rcu_read_unlock+0x17/0x60 [ 772.841173][T18297] ? kernel_clone+0x176/0x9d0 [ 772.841193][T18297] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 772.841210][T18297] ? rcu_is_watching+0x13/0xc0 [ 772.841222][T18297] ? trace_kmem_cache_alloc+0xdd/0x100 [ 772.841238][T18297] ? kernel_clone+0x176/0x9d0 [ 772.841254][T18297] __vmalloc_node_noprof+0xad/0xf0 [ 772.841270][T18297] ? kernel_clone+0x176/0x9d0 [ 772.841288][T18297] copy_process+0x803/0x8370 [ 772.841307][T18297] ? __pfx___futex_wait+0x10/0x10 [ 772.841320][T18297] ? futex_hash+0x311/0x400 [ 772.841341][T18297] ? __pfx_copy_process+0x10/0x10 [ 772.841365][T18297] kernel_clone+0x176/0x9d0 [ 772.841381][T18297] ? find_held_lock+0x2b/0x80 [ 772.841394][T18297] ? __pfx_kernel_clone+0x10/0x10 [ 772.841414][T18297] ? ksys_write+0x190/0x250 [ 772.841430][T18297] __do_compat_sys_ia32_clone+0xd4/0x120 [ 772.841447][T18297] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 772.841463][T18297] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 772.841490][T18297] __do_fast_syscall_32+0x13a/0x8b0 [ 772.841509][T18297] do_fast_syscall_32+0x32/0x70 [ 772.841525][T18297] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 772.841540][T18297] RIP: 0023:0xf7f73fec [ 772.841551][T18297] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 772.841556][T18297] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 772.841567][T18297] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 772.841574][T18297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 772.841581][T18297] RBP: 00000000f54365ec R08: 0000000000000000 R09: 0000000000000000 [ 772.841588][T18297] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 772.841595][T18297] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 772.841609][T18297] [ 772.841626][T18297] Mem-Info: [ 772.841646][T18297] active_anon:4401 inactive_anon:1147 isolated_anon:50 [ 772.841646][T18297] active_file:743 inactive_file:17732 isolated_file:0 [ 772.841646][T18297] unevictable:2526 dirty:1062 writeback:0 [ 772.841646][T18297] slab_reclaimable:7805 slab_unreclaimable:82136 [ 772.841646][T18297] mapped:26912 shmem:3879 pagetables:1492 [ 772.841646][T18297] sec_pagetables:342 bounce:0 [ 772.841646][T18297] kernel_misc_reclaimable:0 [ 772.841646][T18297] free:30921 free_pcp:2059 free_cma:0 [ 772.841688][T18297] Node 0 active_anon:32kB inactive_anon:88kB active_file:16kB inactive_file:1308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:476kB dirty:4kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8512kB pagetables:1264kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 772.841732][T18297] Node 1 active_anon:17572kB inactive_anon:4500kB active_file:2956kB inactive_file:69620kB unevictable:10104kB isolated(anon):200kB isolated(file):0kB mapped:107172kB dirty:4244kB writeback:0kB shmem:15512kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:7920kB pagetables:4704kB sec_pagetables:252kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 772.956452][T18297] Node 0 DMA free:3120kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 772.956490][T18297] lowmem_reserve[]: 0 277 277 277 277 [ 772.956510][T18297] Node 0 DMA32 free:35484kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32kB inactive_anon:88kB active_file:16kB inactive_file:1308kB unevictable:0kB writepending:4kB zspages:1672kB present:1032196kB managed:284588kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 772.956544][T18297] lowmem_reserve[]: 0 0 0 0 0 [ 772.956564][T18297] Node 1 DMA32 free:76652kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:5872kB inactive_anon:4500kB active_file:2956kB inactive_file:76420kB unevictable:12104kB writepending:4244kB zspages:4852kB present:1048432kB managed:948208kB mlocked:8168kB bounce:0kB free_pcp:22740kB local_pcp:11884kB free_cma:0kB [ 772.956598][T18297] lowmem_reserve[]: 0 0 0 0 0 [ 772.956618][T18297] Node 0 DMA: 136*4kB (U) 22*8kB (UE) 6*16kB (U) 14*32kB (UE) 7*64kB (U) 1*128kB (E) 1*256kB (E) 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 3120kB [ 772.956693][T18297] Node 0 DMA32: 1351*4kB (UME) 430*8kB (UME) 163*16kB (UM) 202*32kB (UME) 55*64kB (UME) 20*128kB (UME) 15*256kB (UME) 11*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 35516kB [ 772.956769][T18297] Node 1 DMA32: 770*4kB (UE) 657*8kB (UME) 262*16kB (UME) 212*32kB (UE) 129*64kB (UME) 82*128kB (UE) 50*256kB (UME) 20*512kB (U) 11*1024kB (UM) 2*2048kB (M) 0*4096kB = 76464kB [ 772.956848][T18297] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 772.956857][T18297] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 772.956866][T18297] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 772.956874][T18297] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 772.956882][T18297] 19758 total pagecache pages [ 772.956886][T18297] 1406 pages in swap cache [ 772.956890][T18297] Free swap = 97244kB [ 772.956900][T18297] Total swap = 124996kB [ 772.956905][T18297] 524155 pages RAM [ 772.956909][T18297] 0 pages HighMem/MovableOnly [ 772.956914][T18297] 212116 pages reserved [ 772.956918][T18297] 0 pages cma reserved [ 773.135926][T18306] loop5: detected capacity change from 0 to 4095 [ 773.184327][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 773.543962][T15290] kernel read not supported for file /dsp1 (pid: 15290 comm: kworker/0:3) [ 773.613969][T16230] kernel read not supported for file /dsp1 (pid: 16230 comm: kworker/1:5) [ 773.660314][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 773.704689][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 774.257203][T18337] netlink: 'syz.7.3454': attribute type 1 has an invalid length. [ 774.257256][T18337] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3454'. [ 774.437364][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3455'. [ 774.446370][T18346] loop5: detected capacity change from 0 to 4095 [ 774.451457][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 774.711279][T18360] Cannot find add_set index 32767 as target [ 774.924521][T16230] kernel read not supported for file /dsp1 (pid: 16230 comm: kworker/1:5) [ 774.999920][T11948] IPVS: starting estimator thread 0... [ 775.002219][ T43] audit: type=1326 audit(1788817600.556:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.4.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 775.002676][ T43] audit: type=1326 audit(1788817600.556:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.4.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 775.003313][ T43] audit: type=1326 audit(1788817600.556:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.4.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 775.003501][ T43] audit: type=1326 audit(1788817600.556:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.4.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 775.003524][ T43] audit: type=1326 audit(1788817600.556:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.4.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 775.003680][ T43] audit: type=1326 audit(1788817600.556:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.4.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 775.003768][ T43] audit: type=1326 audit(1788817600.556:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.4.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 775.006919][ T43] audit: type=1326 audit(1788817600.556:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.4.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 775.007258][ T43] audit: type=1326 audit(1788817600.566:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.4.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 775.007378][ T43] audit: type=1326 audit(1788817600.566:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.4.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 775.087445][T18379] IPVS: using max 42 ests per chain, 100800 per kthread [ 775.136739][T18383] evm: overlay not supported [ 775.250592][T18383] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 775.345558][T18391] 9pnet_virtio: no channels available for device syz [ 775.577370][T18400] syzkaller0: entered promiscuous mode [ 775.580550][T18400] syzkaller0: entered allmulticast mode [ 775.585687][T18401] Invalid ELF header magic: != ELF [ 776.509321][T18415] loop5: detected capacity change from 0 to 4095 [ 776.533162][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 776.914442][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 776.984157][ T5824] kernel read not supported for file /dsp1 (pid: 5824 comm: kworker/2:5) [ 777.197699][ T2237] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 777.460390][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3489'. [ 777.573972][ T2237] usb 10-1: Using ep0 maxpacket: 8 [ 777.587645][ T2237] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 777.604515][T18444] Console: switching to colour dummy device 80x25 [ 777.620552][ T2237] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.620588][ T2237] usb 10-1: config 0 has no interface number 0 [ 777.620622][ T2237] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 777.620658][ T2237] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.925296][ T2237] usb 10-1: config 0 descriptor?? [ 779.303818][ T2237] iowarrior 10-1:0.1: no interrupt-in endpoint found [ 779.416870][T18445] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 779.433392][T18445] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 779.434332][T18445] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 779.434811][T18445] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 779.445763][T18445] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 779.528486][ T5823] usb 10-1: USB disconnect, device number 40 [ 779.615594][T18445] pci 0000:00:01.0: Adding to iommu group 1 [ 779.619969][T18445] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 779.619994][T18445] pci 0000:00:01.0: vgaarb: bridge control possible [ 779.620004][T18445] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 779.737828][T18453] FAULT_INJECTION: forcing a failure. [ 779.737828][T18453] name failslab, interval 1, probability 0, space 0, times 0 [ 779.737894][T18453] CPU: 2 UID: 0 PID: 18453 Comm: syz.0.3492 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.737921][T18453] Tainted: [L]=SOFTLOCKUP [ 779.737927][T18453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 779.737934][T18453] Call Trace: [ 779.737970][T18453] [ 779.737975][T18453] dump_stack_lvl+0x100/0x190 [ 779.738034][T18453] should_fail_ex.cold+0x5/0xa [ 779.738048][T18453] should_failslab+0xc2/0x120 [ 779.738083][T18453] __kmalloc_noprof+0xfc/0x840 [ 779.738096][T18453] ? aa_label_asxprint+0x75/0x130 [ 779.738113][T18453] aa_label_asxprint+0x75/0x130 [ 779.738128][T18453] apparmor_lsmprop_to_secctx+0xb2/0x1a0 [ 779.738147][T18453] security_lsmprop_to_secctx+0x146/0x1a0 [ 779.738161][T18453] audit_log_subj_ctx+0x34f/0x460 [ 779.738175][T18453] ? map_id_range_up+0x2ce/0x3b0 [ 779.738190][T18453] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 779.738205][T18453] ? audit_log_format+0xe8/0x130 [ 779.738217][T18453] ? apparmor_current_getlsmprop_subj+0x107/0x3c0 [ 779.738234][T18453] audit_log_task_context+0x88/0xb0 [ 779.738246][T18453] ? __pfx_audit_log_task_context+0x10/0x10 [ 779.738263][T18453] audit_log_task+0x1b7/0x3a0 [ 779.738278][T18453] ? __pfx_audit_log_task+0x10/0x10 [ 779.738295][T18453] ? rcu_read_lock_any_held+0x6a/0x90 [ 779.738308][T18453] ? vfs_write+0x15d/0x1050 [ 779.738321][T18453] audit_seccomp+0x79/0x190 [ 779.738334][T18453] __seccomp_filter+0x88c/0x1130 [ 779.738347][T18453] ? __pfx___seccomp_filter+0x10/0x10 [ 779.738362][T18453] ? ksys_write+0x1ac/0x250 [ 779.738375][T18453] __seccomp_permit_syscall+0x207/0x2d0 [ 779.738389][T18453] __do_fast_syscall_32+0x420/0x8b0 [ 779.738424][T18453] ? lockdep_hardirqs_on+0x7d/0x110 [ 779.738441][T18453] do_fast_syscall_32+0x32/0x70 [ 779.738457][T18453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.738471][T18453] RIP: 0023:0xf706efec [ 779.738485][T18453] Code: Unable to access opcode bytes at 0xf706efc2. [ 779.738518][T18453] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000ea [ 779.738529][T18453] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 779.738536][T18453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 779.738543][T18453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 779.738549][T18453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.738556][T18453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 779.738570][T18453] [ 779.886506][T18456] loop5: detected capacity change from 0 to 4095 [ 779.888996][T18445] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 779.890587][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 779.922989][T18441] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 779.925486][T18445] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 779.925950][T18441] Bluetooth: MGMT ver 1.23 [ 779.927444][T18445] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff] [ 779.932282][T18445] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 780.005166][T18445] pci 0000:00:05.0: Adding to iommu group 5 [ 780.019194][T18445] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 780.019358][T18445] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 780.021687][T18445] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 780.021809][T18445] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 780.022809][T18445] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 780.024880][T18445] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 780.043989][T18445] [drm] Found bochs VGA, ID 0xb0c5. [ 780.044000][T18445] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 780.071585][T18445] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 780.127354][T18445] Console: switching to colour frame buffer device 160x50 [ 780.127441][T18445] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 780.138270][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 780.153663][T18461] FAULT_INJECTION: forcing a failure. [ 780.153663][T18461] name failslab, interval 1, probability 0, space 0, times 0 [ 780.157946][T18461] CPU: 2 UID: 0 PID: 18461 Comm: syz.4.3495 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.157980][T18461] Tainted: [L]=SOFTLOCKUP [ 780.157986][T18461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 780.157993][T18461] Call Trace: [ 780.157997][T18461] [ 780.158002][T18461] dump_stack_lvl+0x100/0x190 [ 780.158022][T18461] should_fail_ex.cold+0x5/0xa [ 780.158036][T18461] should_failslab+0xc2/0x120 [ 780.158051][T18461] __kmalloc_cache_node_noprof+0x94/0x720 [ 780.158067][T18461] ? __get_vm_area_node+0x124/0x350 [ 780.158083][T18461] __get_vm_area_node+0x124/0x350 [ 780.158099][T18461] __vmalloc_node_range_noprof+0x268/0x1420 [ 780.158115][T18461] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 780.158130][T18461] ? process_measurement+0x4c8/0x2350 [ 780.158144][T18461] ? down_write+0x146/0x1f0 [ 780.158163][T18461] ? up_write+0x2dc/0x5b0 [ 780.158180][T18461] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 780.158198][T18461] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 780.158213][T18461] ? __lock_acquire+0x5c0/0x1f40 [ 780.158232][T18461] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 780.158246][T18461] __vmalloc_node_noprof+0xad/0xf0 [ 780.158261][T18461] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 780.158277][T18461] __vmalloc_noprof+0xa3/0x120 [ 780.158292][T18461] ? __pfx___vmalloc_noprof+0x10/0x10 [ 780.158306][T18461] ? lock_acquire+0x1d1/0x380 [ 780.158321][T18461] ? is_bpf_text_address+0x25/0x1a0 [ 780.158336][T18461] ? rcu_is_watching+0x13/0xc0 [ 780.158347][T18461] ? apparmor_capable+0x1d7/0x4d0 [ 780.158363][T18461] bpf_prog_alloc_no_stats+0x58/0x690 [ 780.158377][T18461] ? security_capable+0x80/0x260 [ 780.158391][T18461] bpf_prog_alloc+0x3b/0x200 [ 780.158404][T18461] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 780.158420][T18461] bpf_prog_load+0x49e/0x2a80 [ 780.158435][T18461] ? __lock_acquire+0x5c0/0x1f40 [ 780.158457][T18461] ? __pfx_bpf_prog_load+0x10/0x10 [ 780.158484][T18461] __sys_bpf+0x1f46/0x4a30 [ 780.158499][T18461] ? __pfx___sys_bpf+0x10/0x10 [ 780.158509][T18461] ? lock_acquire+0x1d1/0x380 [ 780.158523][T18461] ? get_pid_task+0x2a/0x250 [ 780.158535][T18461] ? find_held_lock+0x2b/0x80 [ 780.158546][T18461] ? get_pid_task+0xfc/0x250 [ 780.158556][T18461] ? get_pid_task+0xfc/0x250 [ 780.158570][T18461] ? proc_fail_nth_write+0x9f/0x220 [ 780.158582][T18461] ? find_held_lock+0x2b/0x80 [ 780.158597][T18461] ? rcu_read_lock_any_held+0x6a/0x90 [ 780.158609][T18461] ? find_held_lock+0x2b/0x80 [ 780.158620][T18461] ? ksys_write+0x190/0x250 [ 780.158631][T18461] ? ksys_write+0x190/0x250 [ 780.158642][T18461] ? lock_acquire+0x1d1/0x380 [ 780.158665][T18461] ? fput+0x7c/0x100 [ 780.158680][T18461] ? __ia32_sys_bpf+0xcc/0x170 [ 780.158692][T18461] __ia32_sys_bpf+0xcc/0x170 [ 780.158704][T18461] ? __do_fast_syscall_32+0xb3/0x8b0 [ 780.158722][T18461] __do_fast_syscall_32+0x13a/0x8b0 [ 780.158738][T18461] ? lockdep_hardirqs_on+0x7d/0x110 [ 780.158754][T18461] do_fast_syscall_32+0x32/0x70 [ 780.158770][T18461] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 780.158785][T18461] RIP: 0023:0xf7f73fec [ 780.158799][T18461] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 780.158804][T18461] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 780.158815][T18461] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 780.158823][T18461] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 780.158829][T18461] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 780.158836][T18461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.158842][T18461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 780.158855][T18461] [ 780.177490][T18445] virtio-pci 0000:00:05.0: PCI INT A: failed to register GSI [ 780.177526][T18445] virtio-pci 0000:00:05.0: probe with driver virtio-pci failed with error -16 [ 780.341096][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 780.373983][ T5823] kernel read not supported for file /dsp1 (pid: 5823 comm: kworker/2:4) [ 780.401577][T18470] overlayfs: failed lookup in lower (newroot/176, name='file0', err=-40): overlapping layers [ 780.404942][T18470] overlayfs: failed lookup in lower (newroot/176, name='file0', err=-40): overlapping layers [ 780.408097][T18470] overlayfs: failed lookup in lower (newroot/176, name='file0', err=-40): overlapping layers [ 780.409200][T18470] fuse: fd is not a fuse device [ 780.608978][T16506] Buffer I/O error on dev loop5, logical block 511, async page read [ 780.763781][T18483] netlink: 'syz.5.3505': attribute type 4 has an invalid length. [ 780.788951][T18483] netlink: 'syz.5.3505': attribute type 4 has an invalid length. [ 780.835029][T18483] fuse: Bad value for 'user_id' [ 780.838266][T18483] fuse: Bad value for 'user_id' [ 780.919891][T18496] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3506'. [ 781.457819][T18515] loop5: detected capacity change from 0 to 4095 [ 781.468383][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 781.619875][T18520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3515'. [ 781.881879][T18521] Console: switching to colour dummy device 80x25 [ 781.936820][T16230] kernel read not supported for file /dsp1 (pid: 16230 comm: kworker/1:5) [ 782.110468][ T5750] Bluetooth: hci0: unexpected event for opcode 0x0403 [ 782.178529][T18533] netlink: 'syz.7.3519': attribute type 1 has an invalid length. [ 782.230075][T18534] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3519'. [ 782.230149][T18534] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3519'. [ 784.275440][T18522] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 784.291417][T18522] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 784.295305][T18522] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 784.296242][T18522] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 784.314451][T18522] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 784.334236][T18522] pci 0000:00:01.0: Adding to iommu group 1 [ 784.341742][T18522] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 784.341777][T18522] pci 0000:00:01.0: vgaarb: bridge control possible [ 784.341791][T18522] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 784.359806][T18522] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 784.360476][T18522] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 784.374234][T18522] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 784.456529][T18522] [drm] Found bochs VGA, ID 0xb0c5. [ 784.456817][T18522] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 784.462555][T18533] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 784.659916][T18547] Cannot find add_set index 32767 as target [ 784.708679][T18522] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 784.934144][T15290] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 785.062163][T18558] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 785.062216][T18558] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 785.066262][T18558] vhci_hcd vhci_hcd.0: Device attached [ 785.095760][T15290] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 785.102342][T15290] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.102776][T15290] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.102811][T15290] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.117364][T15290] usb 10-1: config 0 descriptor?? [ 785.150900][T18558] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 785.344028][ T30] usb 52-1: SetAddress Request (42) to port 0 [ 785.344092][ T30] usb 52-1: new SuperSpeed USB device number 42 using vhci_hcd [ 785.384983][T18522] Console: switching to colour frame buffer device 160x50 [ 785.385095][T18522] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 785.603231][T18563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 785.607138][T18563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 785.610672][T18563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 785.610882][T18563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 785.614063][T18563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 785.617581][T18563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 785.617705][T18563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 785.627230][T18563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 785.627642][T18563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 785.631099][T18563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 785.639119][T18563] jffs2: Further such events for this erase block will not be printed [ 785.641928][T18563] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 785.641942][T18563] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 785.641950][T18563] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 785.751954][T18563] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 785.752036][T18563] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 786.176506][T18559] vhci_hcd: connection reset by peer [ 786.183948][T11592] vhci_hcd vhci_hcd.7: stop threads [ 786.184702][T11592] vhci_hcd vhci_hcd.7: release socket [ 786.185242][T11592] vhci_hcd vhci_hcd.7: disconnect device [ 786.208651][T15290] usbhid 10-1:0.0: can't add hid device: -71 [ 786.208758][T15290] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 786.214428][T15290] usb 10-1: USB disconnect, device number 41 [ 786.231113][T18568] comedi comedi1: comedi_config --init_data is deprecated [ 786.235153][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3527'. [ 786.294653][T18570] binder: 18569:18570 ioctl 400454d8 80000780 returned -22 [ 786.295670][T18570] binder_alloc: 18569: binder_alloc_buf, no vma [ 786.610089][T18582] Cannot find add_set index 32767 as target [ 786.994243][ T5921] block nbd0: Possible stuck request ffff88802765e000: control (read@0,1024B). Runtime 60 seconds [ 786.994303][ T5921] block nbd0: Possible stuck request ffff88802765e1c0: control (read@1024,1024B). Runtime 60 seconds [ 786.994332][ T5921] block nbd0: Possible stuck request ffff88802765e380: control (read@2048,1024B). Runtime 60 seconds [ 786.994347][ T5921] block nbd0: Possible stuck request ffff88802765e540: control (read@3072,1024B). Runtime 60 seconds [ 787.263842][T18601] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 787.275624][T18601] qnx6: unable to read the first superblock [ 787.275839][T18601] qnx6: unable to read the first superblock [ 787.275847][T18601] qnx6: unable to read the first superblock [ 787.535126][T18602] i2c i2c-0: new_device: Instantiated device rtl2832 at 0x01 [ 787.854049][T15290] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 788.004040][T15290] usb 12-1: Using ep0 maxpacket: 32 [ 788.057755][T15290] usb 12-1: unable to get BOS descriptor or descriptor too short [ 788.057841][T15290] usb 12-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 788.058695][T15290] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 788.058723][T15290] usb 12-1: can't read configurations, error -71 [ 788.407378][T18619] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 788.407418][T18619] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 788.407748][T18619] vhci_hcd vhci_hcd.0: Device attached [ 788.540481][T11948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.548011][T11948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.559978][T18625] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 788.682816][ T43] kauditd_printk_skb: 63 callbacks suppressed [ 788.682877][ T43] audit: type=1326 audit(1788817614.236:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.7.3548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 788.684246][T16230] usb 46-1: SetAddress Request (74) to port 0 [ 788.684300][T16230] usb 46-1: new SuperSpeed USB device number 74 using vhci_hcd [ 788.685247][ T43] audit: type=1326 audit(1788817614.246:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.7.3548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 788.738159][ T43] audit: type=1326 audit(1788817614.296:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.7.3548" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70befec code=0x7ffc0000 [ 788.739352][ T43] audit: type=1326 audit(1788817614.296:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.7.3548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 788.740027][ T43] audit: type=1326 audit(1788817614.296:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.7.3548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 788.743400][ T43] audit: type=1326 audit(1788817614.296:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.7.3548" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70befec code=0x7ffc0000 [ 788.743440][ T43] audit: type=1326 audit(1788817614.296:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.7.3548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 788.743466][ T43] audit: type=1326 audit(1788817614.296:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.7.3548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 788.823947][ T43] audit: type=1326 audit(1788817614.306:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.7.3548" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70befec code=0x7ffc0000 [ 788.831892][ T43] audit: type=1326 audit(1788817614.386:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.7.3548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 789.442867][T18620] vhci_hcd: connection reset by peer [ 789.446007][ T5814] vhci_hcd vhci_hcd.4: stop threads [ 789.448024][ T5814] vhci_hcd vhci_hcd.4: release socket [ 789.448073][ T5814] vhci_hcd vhci_hcd.4: disconnect device [ 790.219376][T18658] FAULT_INJECTION: forcing a failure. [ 790.219376][T18658] name failslab, interval 1, probability 0, space 0, times 0 [ 790.233007][T18658] CPU: 0 UID: 0 PID: 18658 Comm: syz.4.3556 Tainted: G L syzkaller #0 PREEMPT(full) [ 790.233038][T18658] Tainted: [L]=SOFTLOCKUP [ 790.233044][T18658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 790.233051][T18658] Call Trace: [ 790.233056][T18658] [ 790.233061][T18658] dump_stack_lvl+0x100/0x190 [ 790.233128][T18658] should_fail_ex.cold+0x5/0xa [ 790.233143][T18658] should_failslab+0xc2/0x120 [ 790.233177][T18658] __kmalloc_noprof+0xfc/0x840 [ 790.233202][T18658] ? rcu_is_watching+0x13/0xc0 [ 790.233214][T18658] ? tomoyo_realpath_from_path+0xb6/0x690 [ 790.233229][T18658] tomoyo_realpath_from_path+0xb6/0x690 [ 790.233243][T18658] tomoyo_path_number_perm+0x23c/0x580 [ 790.233258][T18658] ? tomoyo_path_number_perm+0x22e/0x580 [ 790.233275][T18658] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 790.233291][T18658] ? get_pid_task+0x106/0x250 [ 790.233306][T18658] ? __lock_acquire+0x5c0/0x1f40 [ 790.233327][T18658] ? __fget_files+0x34/0x3d0 [ 790.233340][T18658] ? find_held_lock+0x2b/0x80 [ 790.233351][T18658] ? __fget_files+0x215/0x3d0 [ 790.233362][T18658] ? hook_file_ioctl_common+0x140/0x440 [ 790.233378][T18658] ? __fget_files+0x215/0x3d0 [ 790.233392][T18658] ? __fget_files+0x21f/0x3d0 [ 790.233407][T18658] security_file_ioctl_compat+0xd3/0x230 [ 790.233424][T18658] __ia32_compat_sys_ioctl+0xc2/0x360 [ 790.233444][T18658] __do_fast_syscall_32+0x13a/0x8b0 [ 790.233480][T18658] ? lockdep_hardirqs_on+0x7d/0x110 [ 790.233496][T18658] do_fast_syscall_32+0x32/0x70 [ 790.233513][T18658] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 790.233528][T18658] RIP: 0023:0xf7f73fec [ 790.233541][T18658] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 790.233546][T18658] RSP: 002b:00000000f541550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 790.233558][T18658] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01064ab [ 790.233565][T18658] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 790.233572][T18658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 790.233578][T18658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.233585][T18658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 790.233599][T18658] [ 790.328181][T18658] ERROR: Out of memory at tomoyo_realpath_from_path. [ 790.434345][ T30] usb 52-1: device descriptor read/8, error -110 [ 790.658221][T18661] loop5: detected capacity change from 0 to 4095 [ 790.673571][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 790.834815][ T30] usb usb52-port1: attempt power cycle [ 790.898670][T17500] Buffer I/O error on dev loop5, logical block 511, async page read [ 791.234185][ T42] kernel read not supported for file /dsp1 (pid: 42 comm: kworker/1:1) [ 791.750123][ T30] usb usb52-port1: unable to enumerate USB device [ 791.973932][ T2237] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 792.124829][ T2237] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 792.126601][ T2237] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 792.126628][ T2237] usb 5-1: config 0 interface 0 has no altsetting 0 [ 792.129660][ T2237] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 792.129680][ T2237] usb 5-1: Product: syz [ 792.129693][ T2237] usb 5-1: Manufacturer: syz [ 792.129707][ T2237] usb 5-1: SerialNumber: syz [ 792.135963][ T2237] usb 5-1: config 0 descriptor?? [ 792.139436][ T2237] usb 5-1: selecting invalid altsetting 0 [ 792.259061][T18690] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 792.259099][T18690] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 792.264514][T18690] vhci_hcd vhci_hcd.0: Device attached [ 792.366703][ C3] ================================================================== [ 792.366725][ C3] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 792.366778][ C3] Read of size 1 at addr ffff8880768d70e8 by task syz.0.3567/18685 [ 792.366787][ C3] [ 792.366794][ C3] CPU: 3 UID: 0 PID: 18685 Comm: syz.0.3567 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.366810][ C3] Tainted: [L]=SOFTLOCKUP [ 792.366814][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 792.366821][ C3] Call Trace: [ 792.366826][ C3] [ 792.366831][ C3] dump_stack_lvl+0x100/0x190 [ 792.366846][ C3] print_report+0x13d/0x4b0 [ 792.366863][ C3] ? __virt_addr_valid+0x239/0x430 [ 792.366879][ C3] ? find_endpoint+0x2a3/0x2c0 [ 792.366888][ C3] kasan_report+0xdf/0x1c0 [ 792.366903][ C3] ? find_endpoint+0x2a3/0x2c0 [ 792.366914][ C3] find_endpoint+0x2a3/0x2c0 [ 792.366924][ C3] dummy_timer+0x500/0x3700 [ 792.366939][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 792.366954][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 792.366970][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 792.366981][ C3] ? rcu_is_watching+0x13/0xc0 [ 792.366993][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 792.367007][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 792.367018][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 792.367032][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 792.367044][ C3] handle_softirqs+0x1e6/0x9d0 [ 792.367061][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 792.367077][ C3] ? _raw_spin_unlock+0x28/0x50 [ 792.367089][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 792.367102][ C3] __irq_exit_rcu+0x16a/0x210 [ 792.367117][ C3] irq_exit_rcu+0x9/0x30 [ 792.367132][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 792.367148][ C3] [ 792.367151][ C3] [ 792.367155][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 792.367168][ C3] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 792.367182][ C3] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 3a 97 15 f6 48 89 df e8 c2 ed 15 f6 e8 9d 94 42 f6 fb bf 01 00 00 00 42 e3 04 f6 65 48 83 3d 81 d5 ba 08 00 74 06 5b c3 cc cc cc cc [ 792.367192][ C3] RSP: 0018:ffffc90005a9f8c8 EFLAGS: 00000206 [ 792.367203][ C3] RAX: 00000000000012ed RBX: ffff8880554018f8 RCX: 0000000000000000 [ 792.367210][ C3] RDX: 0000000000000001 RSI: ffffffff8e3f0ed3 RDI: 0000000000000001 [ 792.367217][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 792.367224][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888029182580 [ 792.367231][ C3] R13: 0000000000007000 R14: dffffc0000000000 R15: ffff88805804a000 [ 792.367241][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 792.367254][ C3] snd_pcm_stream_unlock_irq+0x99/0xc0 [ 792.367271][ C3] __snd_pcm_lib_xfer+0x1298/0x20a0 [ 792.367289][ C3] ? __pfx_default_write_copy+0x10/0x10 [ 792.367305][ C3] ? __pfx_interleaved_copy+0x10/0x10 [ 792.367318][ C3] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 792.367334][ C3] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 792.367350][ C3] ? mark_held_locks+0x40/0x70 [ 792.367365][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 792.367378][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 792.367392][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 792.367407][ C3] snd_pcm_oss_write3+0x8f/0x180 [ 792.367423][ C3] io_playback_transfer+0x26e/0x2f0 [ 792.367435][ C3] snd_pcm_plug_write_transfer+0x2c7/0x400 [ 792.367467][ C3] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 792.367496][ C3] ? snd_pcm_format_physical_width+0x76/0xa0 [ 792.367515][ C3] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 792.367527][ C3] snd_pcm_oss_write2+0x24a/0x400 [ 792.367543][ C3] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 792.367559][ C3] ? snd_pcm_kernel_ioctl+0x12e/0x280 [ 792.367571][ C3] ? snd_pcm_oss_prepare+0x11e/0x240 [ 792.367586][ C3] snd_pcm_oss_write+0x729/0xa30 [ 792.367602][ C3] ? security_file_permission+0x76/0x210 [ 792.367620][ C3] vfs_write+0x2aa/0x1050 [ 792.367631][ C3] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 792.367647][ C3] ? lock_acquire+0x1d1/0x380 [ 792.367660][ C3] ? __fget_files+0x34/0x3d0 [ 792.367672][ C3] ? __pfx_vfs_write+0x10/0x10 [ 792.367682][ C3] ? find_held_lock+0x2b/0x80 [ 792.367693][ C3] ? __fget_files+0x215/0x3d0 [ 792.367704][ C3] ? __fget_files+0x215/0x3d0 [ 792.367716][ C3] ? __fget_files+0x21f/0x3d0 [ 792.367729][ C3] ksys_write+0x12a/0x250 [ 792.367739][ C3] ? __pfx_ksys_write+0x10/0x10 [ 792.367751][ C3] __do_fast_syscall_32+0x13a/0x8b0 [ 792.367771][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 792.367786][ C3] do_fast_syscall_32+0x32/0x70 [ 792.367802][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 792.367815][ C3] RIP: 0023:0xf706efec [ 792.367828][ C3] Code: Unable to access opcode bytes at 0xf706efc2. [ 792.367833][ C3] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 792.367843][ C3] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080002200 [ 792.367850][ C3] RDX: 00000000fffffcd9 RSI: 0000000000000000 RDI: 0000000000000000 [ 792.367857][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 792.367864][ C3] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 792.367870][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 792.367880][ C3] [ 792.367885][ C3] [ 792.367887][ C3] Allocated by task 5815: [ 792.367893][ C3] kasan_save_stack+0x30/0x50 [ 792.367905][ C3] kasan_save_track+0x14/0x30 [ 792.367916][ C3] __kasan_kmalloc+0xaa/0xb0 [ 792.367927][ C3] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 792.367943][ C3] batadv_forw_packet_alloc+0x3a9/0x4d0 [ 792.367959][ C3] batadv_iv_ogm_aggregate_new+0x11e/0x4c0 [ 792.367974][ C3] batadv_iv_ogm_schedule_buff+0x110a/0x15d0 [ 792.367988][ C3] batadv_iv_send_outstanding_bat_ogm_packet+0x517/0x7d0 [ 792.368002][ C3] process_one_work+0xac7/0x1b10 [ 792.368015][ C3] worker_thread+0x5ef/0xe50 [ 792.368026][ C3] kthread+0x373/0x450 [ 792.368036][ C3] ret_from_fork+0x730/0xd60 [ 792.368051][ C3] ret_from_fork_asm+0x1a/0x30 [ 792.368060][ C3] [ 792.368063][ C3] Freed by task 5814: [ 792.368068][ C3] kasan_save_stack+0x30/0x50 [ 792.368079][ C3] kasan_save_track+0x14/0x30 [ 792.368090][ C3] kasan_save_free_info+0x3b/0x70 [ 792.368105][ C3] __kasan_slab_free+0x5f/0x80 [ 792.368116][ C3] kfree+0x22b/0x6d0 [ 792.368130][ C3] batadv_iv_send_outstanding_bat_ogm_packet+0x22f/0x7d0 [ 792.368145][ C3] process_one_work+0xac7/0x1b10 [ 792.368156][ C3] worker_thread+0x5ef/0xe50 [ 792.368167][ C3] kthread+0x373/0x450 [ 792.368177][ C3] ret_from_fork+0x730/0xd60 [ 792.368192][ C3] ret_from_fork_asm+0x1a/0x30 [ 792.368200][ C3] [ 792.368203][ C3] Last potentially related work creation: [ 792.368206][ C3] kasan_save_stack+0x30/0x50 [ 792.368217][ C3] kasan_record_aux_stack+0xa7/0xc0 [ 792.368233][ C3] insert_work+0x36/0x230 [ 792.368260][ C3] __queue_work+0x481/0x1370 [ 792.368272][ C3] call_timer_fn+0x198/0x5f0 [ 792.368284][ C3] __run_timers+0x570/0xb00 [ 792.368296][ C3] run_timer_base+0x114/0x190 [ 792.368309][ C3] run_timer_softirq+0x1a/0x50 [ 792.368322][ C3] handle_softirqs+0x1e6/0x9d0 [ 792.368336][ C3] __irq_exit_rcu+0x16a/0x210 [ 792.368349][ C3] irq_exit_rcu+0x9/0x30 [ 792.368363][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 792.368376][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 792.368387][ C3] [ 792.368389][ C3] The buggy address belongs to the object at ffff8880768d7000 [ 792.368389][ C3] which belongs to the cache kmalloc-512 of size 512 [ 792.368398][ C3] The buggy address is located 232 bytes inside of [ 792.368398][ C3] freed 512-byte region [ffff8880768d7000, ffff8880768d7200) [ 792.368408][ C3] [ 792.368411][ C3] The buggy address belongs to the physical page: [ 792.368416][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x768d4 [ 792.368426][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 792.368435][ C3] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 792.368445][ C3] page_type: f5(slab) [ 792.368455][ C3] raw: 04fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 792.368464][ C3] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 792.368474][ C3] head: 04fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 792.368483][ C3] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 792.368493][ C3] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 792.368502][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 792.368508][ C3] page dumped because: kasan: bad access detected [ 792.368513][ C3] page_owner tracks the page as allocated [ 792.368517][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10245, tgid 10243 (syz.5.1154), ts 286085990363 [ 792.368534][ C3] post_alloc_hook+0xfd/0x120 [ 792.368549][ C3] get_page_from_freelist+0x110d/0x35d0 [ 792.368558][ C3] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 792.368568][ C3] new_slab+0xa9/0x6e0 [ 792.368576][ C3] refill_objects+0xe3/0x410 [ 792.368585][ C3] __pcs_replace_empty_main+0x35e/0x650 [ 792.368600][ C3] __kmalloc_noprof+0x67c/0x840 [ 792.368609][ C3] hash_netportnet6_resize+0xacd/0x1e20 [ 792.368635][ C3] call_ad.isra.0+0x37f/0x950 [ 792.368651][ C3] ip_set_ad.isra.0+0x3f1/0x8b0 [ 792.368666][ C3] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 792.368680][ C3] netlink_rcv_skb+0x159/0x420 [ 792.368690][ C3] nfnetlink_rcv+0x1b3/0x440 [ 792.368703][ C3] netlink_unicast+0x585/0x850 [ 792.368713][ C3] netlink_sendmsg+0x8b0/0xda0 [ 792.368723][ C3] ____sys_sendmsg+0xa4d/0xbe0 [ 792.368738][ C3] page last free pid 5654 tgid 5654 ts 285922304424 stack trace: [ 792.368746][ C3] __free_frozen_pages+0x79f/0x10f0 [ 792.368760][ C3] qlist_free_all+0x47/0xf0 [ 792.368774][ C3] kasan_quarantine_reduce+0x1a0/0x1f0 [ 792.368785][ C3] __kasan_slab_alloc+0x69/0x90 [ 792.368797][ C3] kmem_cache_alloc_noprof+0x269/0x6a0 [ 792.368807][ C3] jbd2__journal_start+0x194/0x6b0 [ 792.368822][ C3] __ext4_journal_start_sb+0x314/0x610 [ 792.368834][ C3] ext4_dirty_inode+0xa1/0x130 [ 792.368845][ C3] __mark_inode_dirty+0x1f3/0x16e0 [ 792.368860][ C3] file_update_time_flags+0x49c/0x520 [ 792.368874][ C3] ext4_page_mkwrite+0x324/0x1860 [ 792.368885][ C3] do_page_mkwrite+0x17a/0x440 [ 792.368896][ C3] do_wp_page+0x9ed/0x45c0 [ 792.368907][ C3] __handle_mm_fault+0x1cd2/0x2f60 [ 792.368921][ C3] handle_mm_fault+0x363/0xa20 [ 792.368935][ C3] do_user_addr_fault+0x59c/0x12f0 [ 792.368946][ C3] [ 792.368948][ C3] Memory state around the buggy address: [ 792.368954][ C3] ffff8880768d6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 792.368961][ C3] ffff8880768d7000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 792.368968][ C3] >ffff8880768d7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 792.368974][ C3] ^ [ 792.368980][ C3] ffff8880768d7100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 792.368987][ C3] ffff8880768d7180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 792.368993][ C3] ================================================================== [ 792.368999][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 792.723883][ C3] CPU: 3 UID: 0 PID: 18685 Comm: syz.0.3567 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.727232][ C3] Tainted: [L]=SOFTLOCKUP [ 792.728589][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 792.731680][ C3] Call Trace: [ 792.732738][ C3] [ 792.733651][ C3] dump_stack_lvl+0x100/0x190 [ 792.735130][ C3] vpanic+0x553/0x970 [ 792.736400][ C3] ? __pfx_vpanic+0x10/0x10 [ 792.737825][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 792.739406][ C3] ? find_endpoint+0x2a3/0x2c0 [ 792.740919][ C3] panic+0xd1/0xe0 [ 792.742106][ C3] ? __pfx_panic+0x10/0x10 [ 792.743505][ C3] ? end_report.part.0+0x23/0x90 [ 792.745138][ C3] ? rcu_is_watching+0x13/0xc0 [ 792.746762][ C3] ? end_report.part.0+0x23/0x90 [ 792.748520][ C3] check_panic_on_warn.cold+0x19/0x34 [ 792.750483][ C3] end_report.part.0+0x3a/0x90 [ 792.752052][ C3] kasan_report.cold+0xe/0x18 [ 792.753635][ C3] ? find_endpoint+0x2a3/0x2c0 [ 792.755474][ C3] find_endpoint+0x2a3/0x2c0 [ 792.757324][ C3] dummy_timer+0x500/0x3700 [ 792.759068][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 792.761426][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 792.763696][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 792.765701][ C3] ? rcu_is_watching+0x13/0xc0 [ 792.767589][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 792.769946][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 792.771947][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 792.773750][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 792.775695][ C3] handle_softirqs+0x1e6/0x9d0 [ 792.777482][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 792.779234][ C3] ? _raw_spin_unlock+0x28/0x50 [ 792.780775][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 792.782547][ C3] __irq_exit_rcu+0x16a/0x210 [ 792.784021][ C3] irq_exit_rcu+0x9/0x30 [ 792.785360][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 792.787107][ C3] [ 792.788027][ C3] [ 792.788988][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 792.790857][ C3] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 792.792680][ C3] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 3a 97 15 f6 48 89 df e8 c2 ed 15 f6 e8 9d 94 42 f6 fb bf 01 00 00 00 42 e3 04 f6 65 48 83 3d 81 d5 ba 08 00 74 06 5b c3 cc cc cc cc [ 792.799295][ C3] RSP: 0018:ffffc90005a9f8c8 EFLAGS: 00000206 [ 792.801791][ C3] RAX: 00000000000012ed RBX: ffff8880554018f8 RCX: 0000000000000000 [ 792.805053][ C3] RDX: 0000000000000001 RSI: ffffffff8e3f0ed3 RDI: 0000000000000001 [ 792.808299][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 792.811561][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888029182580 [ 792.814795][ C3] R13: 0000000000007000 R14: dffffc0000000000 R15: ffff88805804a000 [ 792.818048][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 792.820210][ C3] snd_pcm_stream_unlock_irq+0x99/0xc0 [ 792.822054][ C3] __snd_pcm_lib_xfer+0x1298/0x20a0 [ 792.823695][ C3] ? __pfx_default_write_copy+0x10/0x10 [ 792.825497][ C3] ? __pfx_interleaved_copy+0x10/0x10 [ 792.827180][ C3] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 792.828912][ C3] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 792.830789][ C3] ? mark_held_locks+0x40/0x70 [ 792.832324][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 792.834147][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 792.835783][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 792.837682][ C3] snd_pcm_oss_write3+0x8f/0x180 [ 792.839201][ C3] io_playback_transfer+0x26e/0x2f0 [ 792.840779][ C3] snd_pcm_plug_write_transfer+0x2c7/0x400 [ 792.842571][ C3] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 792.844541][ C3] ? snd_pcm_format_physical_width+0x76/0xa0 [ 792.846409][ C3] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 792.848414][ C3] snd_pcm_oss_write2+0x24a/0x400 [ 792.849988][ C3] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 792.851703][ C3] ? snd_pcm_kernel_ioctl+0x12e/0x280 [ 792.853378][ C3] ? snd_pcm_oss_prepare+0x11e/0x240 [ 792.855021][ C3] snd_pcm_oss_write+0x729/0xa30 [ 792.856586][ C3] ? security_file_permission+0x76/0x210 [ 792.858331][ C3] vfs_write+0x2aa/0x1050 [ 792.859703][ C3] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 792.861396][ C3] ? lock_acquire+0x1d1/0x380 [ 792.862875][ C3] ? __fget_files+0x34/0x3d0 [ 792.864334][ C3] ? __pfx_vfs_write+0x10/0x10 [ 792.865835][ C3] ? find_held_lock+0x2b/0x80 [ 792.867309][ C3] ? __fget_files+0x215/0x3d0 [ 792.868837][ C3] ? __fget_files+0x215/0x3d0 [ 792.870319][ C3] ? __fget_files+0x21f/0x3d0 [ 792.871806][ C3] ksys_write+0x12a/0x250 [ 792.873194][ C3] ? __pfx_ksys_write+0x10/0x10 [ 792.874728][ C3] __do_fast_syscall_32+0x13a/0x8b0 [ 792.876386][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 792.878025][ C3] do_fast_syscall_32+0x32/0x70 [ 792.879582][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 792.881570][ C3] RIP: 0023:0xf706efec [ 792.882856][ C3] Code: Unable to access opcode bytes at 0xf706efc2. [ 792.884923][ C3] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 792.887499][ C3] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080002200 [ 792.889963][ C3] RDX: 00000000fffffcd9 RSI: 0000000000000000 RDI: 0000000000000000 [ 792.892486][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 792.894947][ C3] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 792.897420][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 792.899846][ C3] [ 792.901438][ C3] Kernel Offset: disabled [ 792.902728][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:42:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=1ffff92000b5becc RCX=1ffff11005667808 RDX=0000000000000004 RSI=0000000000000000 RDI=ffffffff8e6b9920 RBP=ffff888029d6a5b4 RSP=ffffc90005adf638 R8 =ffff888029d6a594 R9 =ffffffff948db040 R10=ffff888029d6aa37 R11=0000000000000000 R12=0000000000000010 R13=ffffed10053ad4b6 R14=ffff888029d6b000 R15=ffff888029d6a580 RIP=ffffffff81d8a2ce RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096961000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73af488 CR3=000000006c8b4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc9000598fd58 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff8880256ecb00 RSI=ffffffff824ab6af RDI=ffff8880256ecb00 RBP=ffffc9000598fd58 RSP=ffffc9000598fa28 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffea0001d5a820 R13=dffffc0000000000 R14=ffff8880519d1a38 R15=ffffea0001d5a800 RIP=ffffffff824ab6b3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096a61000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c34f3bb CR3=000000005d8fb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000001184b33 RBX=ffff88801cbfa580 RCX=ffffffff8bce3185 RDX=0000000000000001 RSI=ffffffff8e3f0ed3 RDI=ffffffff8c622580 RBP=ffffed100397f4b0 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056867bd R10=ffff88802b433deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bce16bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056345a085000 CR3=000000004bfcb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000b06 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81e719de ffffffff8207e1e9 0000000100000004 0000000600040008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000df7 0000001800000000 0000000000000000 ffffffff8288ef93 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80030208000fffff ffff02040007c42a 0000083400000014 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 196866b24a8603c1 651cdbfaa7a61938 f2e6c7e3595996e8 5fb80aeb8a3d80d7 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e6d3b8b35527e41e f2d7cb8dc8f846bc c424fc7b819f982d 44f06422d5cc8465 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fad4df2ce6f86262 5ceac337b5c99368 d2158d01ef2ae0cc 5da9f21c49bd5ff6 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2400000000000000 00537100002000d0 0023003001ffffff fffffffffb870823 ZMM24=9530b2869530b286 9530b2869530b286 9530b2869530b286 9530b2869530b286 9530b2869530b286 9530b2869530b286 9530b2869530b286 9530b2869530b286 ZMM25=d75569ced75569ce d75569ced75569ce d75569ced75569ce d75569ced75569ce d75569ced75569ce d75569ced75569ce d75569ced75569ce d75569ced75569ce ZMM26=adc14c92adc14c92 adc14c92adc14c92 adc14c92adc14c92 adc14c92adc14c92 adc14c92adc14c92 adc14c92adc14c92 adc14c92adc14c92 adc14c92adc14c92 ZMM27=4f961bac4f961bac 4f961bac4f961bac 4f961bac4f961bac 4f961bac4f961bac 4f961bac4f961bac 4f961bac4f961bac 4f961bac4f961bac 4f961bac4f961bac ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=481c0000481c0000 481c0000481c0000 481c0000481c0000 481c0000481c0000 481c0000481c0000 481c0000481c0000 481c0000481c0000 481c0000481c0000 info registers vcpu 3 CPU#3 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ae8025 RDI=ffffffff9bc561e0 RBP=ffffffff9bc561a0 RSP=ffffc900005f83c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043 R12=0000000000000000 R13=0000000000000032 R14=0000000000000005 R15=ffffc900005f86e0 RIP=ffffffff85ae804f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c61000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f706f000 CR3=000000004d5e3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000b06 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000