last executing test programs: 6.586063113s ago: executing program 3 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00010000000000002000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 6.578966433s ago: executing program 3 (id=224): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f00000005c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/168, 0xa8}, {&(0x7f0000000400)=""/23, 0x17}, {&(0x7f0000000440)=""/125, 0x7d}], 0x3, &(0x7f0000000500)=""/88, 0x58}, 0x4}], 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x891e, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd4}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="f572c10000a88c430826f0a6380778c72739a00bfecab311355ef17d571f0bf30ea1fa434391ab245aa041f926c3108d35fea0a94353c1f2bceef76705b321f90d8783cf6e3b5aafab91dcfd56cc703bd675d0a478920e9c57832a93fa91551ee8", @ANYRESOCT=r0], &(0x7f0000000080)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x6a040000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x4}) fcntl$lock(r6, 0x24, &(0x7f0000000000)={0x2, 0x0, 0x990, 0xfae}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r2, 0xbbc5e000) r7 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r7, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc2c45513, &(0x7f0000000640)={{0x9, 0x5, 0x0, 0x6, 'syz0\x00', 0x81}, 0x1, [0x2, 0xfe1, 0x800, 0x5, 0x0, 0x6, 0x6, 0x5, 0x7fffffff, 0x8001, 0x4, 0x7ff, 0xd26, 0x5, 0x9, 0x5, 0x51, 0x8, 0x5, 0xaa9, 0x2, 0x8, 0x2, 0xa19, 0x1, 0x6, 0x5, 0x2, 0x6, 0x401, 0x2a3c, 0x2, 0x4, 0x1, 0xffff, 0xc, 0x0, 0xff, 0x1ff, 0x0, 0xda, 0x50000000, 0xf, 0x5, 0x7, 0x100, 0xd213, 0x4106, 0xdb, 0x6, 0xfffffffa, 0x1, 0x3, 0x7, 0x6e4f, 0x1, 0x66864664, 0x7, 0x401, 0x0, 0x37, 0x94, 0xcf1, 0x6f, 0x4, 0x4, 0x1, 0x6, 0xf, 0x8, 0x140bd702, 0x7, 0x2, 0xfffffff7, 0x8, 0x2, 0xffffff12, 0x4, 0xcee, 0xe, 0x10000, 0x7fffffff, 0x3, 0x7, 0x1, 0x3, 0x7, 0x1, 0x2, 0xf, 0x7, 0x2, 0x5, 0x5, 0xe7, 0x8, 0x2, 0x0, 0x9, 0x1, 0x4c2cb89e, 0xfffffff7, 0x40, 0xee733bf, 0x4, 0x1, 0xf, 0xffff3ca0, 0x7f, 0xc, 0xfffff801, 0x8, 0x3, 0x5, 0x0, 0x4, 0xb6, 0xe, 0x9, 0xe7d, 0x1ff, 0x7, 0xb2d1, 0x1, 0x4, 0x4, 0x4, 0xff4]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') ioctl$BLKRRPART(r7, 0x125f, 0x1f) 6.457813158s ago: executing program 2 (id=225): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3, 0x0, 0x0, 0x1}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) 5.527643241s ago: executing program 1 (id=227): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) (fail_nth: 3) 5.527173084s ago: executing program 3 (id=228): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) 4.837828416s ago: executing program 1 (id=230): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r5, 0xc0207511, &(0x7f0000000140)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0e7a4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea655430673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fe49f04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac29507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a143d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) r11 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) unshare(0x20000400) syz_ublk_setup_queues(r1, r10, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x3, 0xb2}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x0, 0x2, 0x2ad, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x102, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x1000, 0x2, 0x21b, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r9, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) 4.69890592s ago: executing program 2 (id=231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB="38007a800c000300a0d4e01051d6ff6314000100b10322bb5fe7e232f07da3e8bcfa46d3140003"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 4.654585987s ago: executing program 2 (id=232): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000003b00), 0x0, 0x0, 0x0, 0x0, 0x2000000000000583}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r6 = getpgrp(0x0) ptrace$setopts(0x4206, r6, 0x0, 0x20004f) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x2f, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000005c0)={'rose0\x00', 0x2}) socket$kcm(0x2, 0x7, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) 4.203897639s ago: executing program 3 (id=233): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYRES8=r2], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) r7 = socket(0x1e, 0x3, 0x8) r8 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4f, 0x0, r4, 0x80, &(0x7f0000000400)=@hci, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x1, 0x1, 0x1, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094) r12 = openat$nullb(0xffffff9c, &(0x7f0000000080), 0x80a000, 0x0) fstat(r12, &(0x7f0000000e80)) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) r13 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) socket(0xf, 0x3, 0x2) getsockopt$sock_buf(r3, 0x1, 0x37, 0x0, &(0x7f00000000c0)=0xfffffffffffffe99) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_NESTED_STATE(r14, 0x4080aebf, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.387945785s ago: executing program 2 (id=236): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x2f, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x7, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x305) 2.604475494s ago: executing program 0 (id=237): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) splice(r0, &(0x7f0000000080)=0xfffffffffffff3c2, r1, &(0x7f00000000c0)=0x2, 0x5, 0xd) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f0000000240)={&(0x7f0000000100)=[{0xfffffffffffffffe, 0xa21a, 0x0, 0x6}, {0x7fff, 0x9, 0x3, 0xfffffffffffff688}, {0x7, 0x5, 0x7, 0x8000000000000001}, {0x7, 0x9, 0x0, 0xc}, {0x2, 0x3, 0x401, 0x3}, {0x31, 0x820c, 0xfffffffffffffffb, 0x400}, {0xffffffffffffffff, 0x2, 0x2, 0x40}, {0x4, 0x9, 0x1ff}, {0x4, 0x2, 0x0, 0x81}], 0x9, 0x20, 0x7, 0x5}) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0xd7442f5fa452d6}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000440), 0x700, 0x200001) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000480)={0xe}) r5 = signalfd4(r4, &(0x7f00000004c0)={[0x7fff]}, 0x8, 0x80800) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000600)={0x0, 0xffff, 0x0, 0x0, 0x0}) r7 = getuid() lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() r11 = socket$rds(0x15, 0x5, 0x0) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x18}, 0x14) r13 = getpid() getresuid(&(0x7f0000000880), &(0x7f00000008c0)=0x0, &(0x7f0000000900)) r15 = openat$procfs(0xffffff9c, &(0x7f0000000c40)='/proc/meminfo\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000c80)={0x5, 0x101, {0xffffffffffffffff}, {}, 0x40, 0x9}) read$FUSE(r2, &(0x7f0000000cc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r18 = getgid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000002d00)={'\x00', 0x0, 0x1, 0x5, 0x8aa2, 0x8, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000050c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000005100)={0x3, 0x0, {}, {0x0}, 0x5, 0x5}) sendmmsg$unix(r5, &(0x7f000000ab80)=[{{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000580)="77ccecbad491c65077b504dd37f2751f46361f63e1bb633804edf4ae8d9008e1771d4210f11ff149df8ca80dd7625d", 0x2f}], 0x1, &(0x7f0000000940)=[@cred={{0x18, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x18, 0x1, 0x2, {0x0, r9, r10}}}, @rights={{0x2c, 0x1, 0x1, [r2, r1, r2, r4, r11, r4, r2, r0]}}, @rights={{0x10, 0x1, 0x1, [r12]}}, @cred={{0x18, 0x1, 0x2, {r13, r14, 0xee00}}}], 0x84, 0x8c0}}, {{&(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000a80)="16b86b5cd133496df21d3479b4b63ffba02a243c5f26e8f1f69d9d5032c4c0426898dc6d5a232001449d4df6c23c396d7638fe52de8a2f477fe906a302abf0022fc7f0bd5fe028e549dec97a7cb915282e3baa9962a2868f96a86c1b6e302295fd466d51b5c35a8cf37af13ece2268f6c948199002205e14e6c16c9d597e77c5b5146b6d3db1ed0e02556fef34b6dc63d1fd2da96f23145e3ebe1270a2f759b8b2cd97cc7bbc6383cd65ca1dba0a24a000", 0xb1}, {&(0x7f0000000b40)="04faee5aa9a6b515902c49868c2e647faf765379d2176353b8293187613f683249f7d9e94e5c723ef697cdbd74a97d3d26e23d70db6dcf7b9156ccc0a4064991f8d3475091e52de9a963938752bb0b2cdbb56ed5bfd6b8614f84152e6f905a534e8cc9823b6c3ffb97ea4b63f46ede36cfe2cbe3c43642a0c5caf21fce098c278bd0", 0x82}], 0x2, &(0x7f0000004d80)=[@rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2, r15, r0, r2, r1]}}, @rights={{0x28, 0x1, 0x1, [r0, r2, r2, r1, r2, r1, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @cred={{0x18, 0x1, 0x2, {r16, r17, r18}}}, @cred={{0x18, 0x1, 0x2, {r19, 0xffffffffffffffff, r20}}}], 0x98, 0x8000}}, {{&(0x7f0000004e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005080)=[{&(0x7f0000004ec0)="843df4c26f12e30c65e6ccf9a1ef6d1faa82f749c90826889135fc28b059ab72b65c808b9cb0314446fa22fc6121f8099c0164d9505022e7b81d542505c976a4fca6667a440fef59dab2e53b17ed9fd64855f2ec20c48857f71e896a59177623b418b83355536320fdd888c79830bb7c2126f6acbf80a025d9995ad7797ce8f54756c632bc55d3b8afb5c2ee865c3afa30f56400922e1221b41b36", 0x9b}, {&(0x7f0000004f80)="6f9e84c7a772c223ea894baaf206de7a6ac590d21c2f95f6851fbeb9c1bb2d7881f5956127cf8e1a02912f6a55b2a3b58bddf97ab1d93c5a5dc399d6eaa5b97447da", 0x42}, {&(0x7f0000005000)="3d33de651b314edb82fd6dffed04c6b5c6754cf5a7ff0e8497c2a02f2eaf161603dea6a130454c5ac39b12b8362c6a6bdd6cd2a66a5f21f1f8d5575e42df803b59984d1e55f8228f50763c232ead229b7b2386fb9438b5d958cb44eddcced343059f1b4241b6c1aa7bb0d53ddb02a310808658d33493b9bf", 0x78}], 0x3, &(0x7f00000071c0)=[@cred={{0x18, 0x1, 0x2, {r21, r22}}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}], 0x30, 0x4008000}}, {{&(0x7f0000007200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007540)=[{&(0x7f0000007280)="f2dc58e1d1eebf41b534692b8b61e925e2cfd505cb75ec16601e618c31f0169af1a9df4ef0842befed35dccc58c9faef8d2c1e2dc848d506757bf38d7135a151a30d12609c9251974b89189523561f93da0fbc8952e764e9ec9670c119f7657f936965381a5fb36004c0cbcb6dade650f29381d13ae6ebae0977cf9211f0529c6156e2402e3fb93ca5d1b97320a88495d4304d8743f1b749caa3c1319875451da8d80194fe85d20513feec6dfcd9663340203fec", 0xb4}, {&(0x7f0000007340)}, {&(0x7f0000007380)="b962c04571f79424daef60ef4077b1f746280e46cfe3ec4d4bad71661bf8f5308b13b490bc0baf0d09af24fc7d74ecc98430b4395c458e88b90f80c52249bd96e87c81b94cd60835e3a3bcd3949bad422a4fe514f34fab78fc169a92a9ecb9362afe8db3317840e460056f212890cbecfb5b07e3ca52f44f6c7824da2ae464340f3553d1072dcef347507ba3cad3747469f85426fb169d99b4126e212913387ab8c7ab3a5afd3a7c4002d6adab00fba4cd9d2c84d4d25239d4c4590c5888b762", 0xc0}, {&(0x7f0000007440)="a8067f9e11e87af3ca3662eb2ca57db5ad6c76235cea1bf60798858192ae874763ad23b117720349ee6d681f077fc3d4a9f5cc757b0c944ebd9a26b134e8a10b84c3d32c7f2628af85f496", 0x4b}, {&(0x7f00000074c0)="2929c0f796958e58f7ad3b721927881689d252cadd49bc73e83fb66747152a2299de8d29a5b4695aa9471322dc8912706baac8b6f42c84f1737096336ce06a3f76ba22fa0d90fbbd4b1c9c54d065b32a7a710980a1757e50095a190cf2828593f489dc0e6bc840549a945db2b71acbabd1b7ba443f", 0x75}], 0x5, &(0x7f0000009d00)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r2, r2]}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, 0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [r2, r2, r4, 0xffffffffffffffff, r2]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r1, 0xffffffffffffffff, r1, r2, r0, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x100, 0x20008000}}, {{&(0x7f0000009e00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000a280)=[{&(0x7f0000009e80)="7bc30aa00e334d8ad600eb27", 0xc}, {&(0x7f0000009ec0)="7174c84e27442b45fd1f2ab31aa93485f27fb5d793c58fcfedfaaa9869429adf7b98b6809a8da647601e386a9a2f6305f0204e894a4c16c940cb6bc3188bf108e428773b942100abd2d11aa2c2f6c0b3c1b01e8b6298", 0x56}, {&(0x7f0000009f40)="3c8dde35ae8b8c1e362862a96a78d7bd262c45a877d5afea9c27d37b378cbaee5bb0f10aa528c1082d57b916cecbf42f407d268c9393d66acfba45b6e65f4f43393810ddf576f551d305b7f9672e249b9da0a8682a1005c5d5e175c8aa4fdf586e5aa4ec70f426987e62cae34bc2f5c598bd69efdaea", 0x76}, {&(0x7f0000009fc0)="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", 0xfc}, {&(0x7f000000a0c0)="5f21c1ffa40e2308acae96d9ca3728a2566756511660c5ae1636fd161c447ca003519e39d5f17425ca171b3802e3740c955f5878ac888dc69be8eb69ae15cb4f6c7059f86f5dfd910d1734b1751606fd71103fc05278aa421320d6f3077b6ece3fadfc9e0617670710c4f5a476800ec26c2176ceb71dea529f2cddf720e4750851309c12e58cd90b681470b618bdef3a8799fd0cc8e9b953d39388b85e62659cc186bcb2a168eccc6ff987cbae46810ce1ac67fabfccc297411297b763bc8ba0d0f19d72427392715c8ceabc4f589b4d2f5a2ee9337adca2c8ff9c41e7fc805d84289c3dbd9eb9b0e2e91ac3d52a559a8aa23d9cf340996753", 0xf9}, {&(0x7f000000a1c0)="c69d5a96eb1222087b1bab7c2fc918fb2db88d2251193890cb993e6386d33b2a6ca0a2f85d9c1d3db065a4fee62713f28d119650a6ba4a0567f98d12c5737f454908a949ed0b2802c78ce0fc203fd55b5dd5ad4ab23754a5bb6422954f77060f9b58e4028bff2c2bb37ca87ebcbdc86a122018d060636b44f80fcd0c8215cf7e0ce3f54004f3a05e08eec0b883cff8992e5c3bfeb69cff86a5151f2276985c0b49b0a70c6c8e98e81ac5db9452b75e55", 0xb0}], 0x6, &(0x7f000000a380)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}], 0x18}}, {{&(0x7f000000a3c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000a540)=[{&(0x7f000000a440)="d1a66823bd10d72979b303082f86713a353d8f641ace6cfe82c948558167f7bcc1fe6b494264db030c4c461fc2e9103ecc59210c744e602768b25270abbb1a4c079a9b469b3dd1fa84e91a063f3202ff0e8025baafe4fa71b228f172d6e4d734b4e2a81f4cbfff636db543cbe8f1bef988bfe80bb9097644cce052cf0d6c7337f9b4de6dcf44e550d146c4fb3a6ae150428b792bbfb5b9d4e4af8ec01b21fe9c40366d3597239d4ed26280ef8ba05d6b4de796b45ca16e39a7aefaaca76f10946ee3a3a72d3aab49d1224fae191dab4eeb60c408efb528ab65d1285e38894ed3ea1526d82bad55e6da4f83021b528a06a90b208f0d4e", 0xf6}], 0x1, &(0x7f000000a800)=[@cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r1, r0, r2, r0, r0, 0xffffffffffffffff]}}], 0x60, 0x4000840}}, {{&(0x7f000000a880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000a900), 0x0, 0x0, 0x0, 0xc4}}, {{0x0, 0x0, &(0x7f000000aa00)=[{&(0x7f000000a940)="39e1bf8b9e89bdf9dc2b35c76fb636bc2d19091e8597f40eaeafef4918d4f4f2ff9a40e1adb814bb167724adec777b686f1fbc28b9fbe249cf6ae9b256148983c3586444f81ba74b2fa78a568cd835c397fcbbaae8a5344ee7c453c6e5899afefba2047d4c1154a3099780878f33fff3f435e472933ebe744e5320fc7029d3c3c739e02096b0dfb39bab8a25c3f419303a73ac9e9ed98e7ec59e05fad87828ef5ad6969f2663df5c0c577bd55268", 0xae}], 0x1, 0x0, 0x0, 0x40}}, {{&(0x7f000000aa40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f000000ab00)=[{&(0x7f000000aac0)}], 0x1, &(0x7f000000ab40)=[@rights={{0x1c, 0x1, 0x1, [r0, r1, r1, r2]}}, @rights={{0x10, 0x1, 0x1, [r4]}}, @rights={{0x14, 0x1, 0x1, [r0, r1]}}], 0x40, 0x800}}], 0x9, 0x4008040) 2.603814068s ago: executing program 0 (id=238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffee0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000600000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) (fail_nth: 3) 2.594767717s ago: executing program 0 (id=239): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000180), 0x40000) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc01c586b, &(0x7f0000000300)={r1, &(0x7f00000001c0)='\xe0)\x00', 0x80002, &(0x7f0000000240)={@_ha_fsid={[0x5, 0x10000]}, {0x6, 0x400, 0x5f06, 0x4}}, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x5}) syz_open_dev$usbfs(0x0, 0x205, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1800100018002101000000000400000023000000944c0917ef0f6df5420440325252d01574f0afd4ca1b5d99673829b72d823e8d3a8e03c3d80797c8cf39d7269d5c6dc2e990fa7a77f60fc02bbfc3e49bd421bcbe6b4d6b59335bbfb4d5880b7592a7804dda9d698e2469e5781f4b5970e806f0d0a83f2a714883983b40cdb5878612a8ece6be1bce50", @ANYRES32=0x0], 0x18}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc001}, 0x4008890) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(r5) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003fc0)={{0x14}, [@NFT_MSG_DELSET={0x19d4, 0xb, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_EXPRESSIONS={0x199c, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x1908, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x18f8, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFTA_INNER_EXPR={0x18cc, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x18b8, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DATA={0x1214, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x13, 0x1, "812971d1cf4feb2720d7e694e9090d"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x9f, 0x1, "91d32d9ee32477a52df449a821b8bc8f91d1936750fe9e428b0991de8279bbd1c8944a25149fd4d36c5ffe51cc494b7dccdc90770f4a20f812e8ae6e95358ea4269b0c470086f58c3747b4f18e54413f31be897c408e322b7013fead357ce067629100991b07e0b4ecfb9e6e848a1cf205e94fdf0e64ed56f7e0ab7cc274ba18d0e3a252ab052fbe14f450e3b6bcf99c2a23450aeee75eb032f62b"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x41, 0x1, "19e18fe831393108c4cf43efa0f695d39a7db1db4c117ac2065bea671d56119765ad644ba80a9ee10f5ddf0d9c314311b99e0409e99b11cc52f31eff4b"}, @NFTA_DATA_VALUE={0xd3, 0x1, "ababb03adf6fdd96054dd2e61ac8a1456f99aa12b0d7962d1186b842fbbec2bdfada22e9053a4166032aa039839ff5ee3220629633d75202d7632413e9d208c8320768e65895ca80413d65816e8dc87327de5a7f70df81b69a53f6b78bec6f21ced1e7c80f0abd163a205b28b6bfcef3b564620a6206f7a060de4a7708aa17dd643334510467ca5e3ed93b3c62e819fa98efeebe498eaca02df4dd50553bb9c912d87bd8cad9dad4b57dc9b3e45e05d80b9a1c7d3aecb996a365ddd902fe37a836dcc105d5914e707dd305f4100870"}]}, @NFTA_IMMEDIATE_DATA={0x24, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_IMMEDIATE_DATA={0x138, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc6, 0x1, "c36d056b12a220b3ecd376b4bd32d9258a7bd0ce2dcd4817a7efb0f367c73fa30175a6b01c7ab08b41edd9307aa3badf1f1511d2e06dde95bd725b275c00569101bb4c089f395a04565c760e631b52be9c2fad93706bb05c47f6a494c8eb83372e9309ba8a07584c5a449b96e30501e6651e8d273701569d85b5e2f4a8986ebb051a4ad43101b77b3dcdf04cbc6c2c86d9e53cdda83542bc95053646a07ff7a77e011610d02dda62df776b7389032e50169e4ed053154906842d3a564adc930544fd"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x14, 0x1, "e1b4b34f3f73ccdf197e9cd0bf076c5c"}]}, @NFTA_IMMEDIATE_DATA={0x168, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe5, 0x1, "88ccd1510042017c465be53eef02edd4481e4a5c37f228b89f5839c02cf2fc2c9a82b24e2e67840bfff22e6817b9fd48c761f654df79457b48a58255e83d6931326659e37caa8cd86b1aee5a9b53a6f38d93d08a54c22bf42bad864224cb9ffbb400757d7cdf3552d32a4f090efcd2d5c0a022854d24950056798267a7340df29d7628f721f70f984d98205786c8791ebae80b3e9613c970db54616d2952dab0b86c10e2f673ec83e5f77dc0fa214ea40a26866136dd18346c7d9075246d22aa67091803237ef4b7f038cb76acad026fb4c0e54502efc5dd1b5bc7210689098092"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdb, 0x1, "0691532abb50c45a04710e1aa579e2c333f81ca8381f9755c87d5d4dd270eec68bd884d0d04fea908303251335658332aaac75dc3bc68bb77912b10e0a9598d868941c53b283db45f67fa6c2a1c32e2729d4a199046a5a604bcadfaac6ae085ac59436e8e04978c2bdd39d8e23c5bd6d624fe04aacdec054595c96dcc50e80c44e3dd39f12281de398bd4e4ba31425535c4a76d986e8e9b3807efebe39810a800af49c5b0450311027816dd405d6b5d03cfd0dfc50d07725c7866ba80af084b7f8abdbb4532fc4f4fff2b52b2256643cd301a70730940b"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_IMMEDIATE_DATA={0x25c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe7, 0x1, "05838192d20ac1a3ccd3056f84f3283f7c9e9efe215d0186fae3b7314f1a7a9ef6f2722b6ba290831097f59e8a28ae26d55afb1e5f912bb32d12278c8675cd2b3cbe6c5cc07fad1bb61fc847eee8c4287f4e2300ac9e6753e84008a1e8a518f2132d573f6612f2e078bba8cdbad987de3ea342b7d6309a0511c8a6bebb826c48333451600d496b88a2e3d4acdaf13e88c9c8074eaa560c5ee88717c15c00ff37fb2d67d2b0fd3480dc41531908c57bae5759d41e575980a65945f4fa94e877ae04b8bfd4e7f81584fb3667100b200cf6ece0ec821e0c861280a6ef8657774f0235af9e"}, @NFTA_DATA_VALUE={0x63, 0x1, "730dc59530348a00019be79ee929f90d01d0830c6870ba7b94f1d435e53d6db528499d69e54bdd7769397368ef2fd18eb4e8e897d9212bed9e69aacfda6999847560b8057cb76e3da0b062fbaea654f24eb50716b71a53bdbce6a176952fac"}, @NFTA_DATA_VALUE={0x106, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x27}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xac}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xc1}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xfff6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x19fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.988535802s ago: executing program 0 (id=240): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x44, 0x18}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r2, r2, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() timer_create(0x5, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f00000002c0)={0x2}, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r5}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) 1.86155534s ago: executing program 2 (id=241): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0x3ff, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0xffffffffffffffda, 0x989d, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffb, 0x0, 0x8, 0xfffffffc, 0xfffffffe, 0x0, 0x82000, 0x8000, 0xffffffff, 0x0, r2, 0x1001, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb09000000276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d195e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea3652fb0ea822c16fa7017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e9116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f00", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x18, 0xfffffffffffffffe, 0x0, {0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000e0000000000715bb18", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800038008000200080000003e"], 0x44}}, 0x10040000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000001c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x5, 0x12) listen(r4, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) r10 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r10, 0x29, 0x37, 0x0, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r11 = accept4(r4, 0x0, 0x0, 0x0) sendto(r11, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r9, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 1.458006763s ago: executing program 1 (id=242): io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x1800, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.369423763s ago: executing program 1 (id=243): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) 1.050435201s ago: executing program 0 (id=244): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) openat$proc_mixer(0xffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x440102, 0x0) r6 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x48, 0x9, 0x0, 0x7, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x1f}) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440081001000010404000000fd1e000001000000", @ANYRES32=0x0, @ANYBLOB="38410000441f2d41c71b22ef6b5e0b00002407000000000100626f6e640000000014000227fcd47f", @ANYRESHEX=r7], 0x44}, 0x1, 0x0, 0x0, 0x20041}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) socket$inet_sctp(0x2, 0x1, 0x84) 991.025589ms ago: executing program 1 (id=245): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x37, 0x800}) 981.21916ms ago: executing program 2 (id=246): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x80) syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000002a000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x40) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d3, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = creat(0x0, 0x59) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000901, 0x0, &(0x7f0000000500)) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0xa, 0xffffffff, 0x0, 0xffffff89, 0xd, 0x6, 0x48d4}, {0x40000000, 0x4, 0x1, 0x7, 0x7, 0x7, 0x5}, {0x0, 0x5, 0x1, 0x3ff, 0x7ffffdff, 0x8004, 0xffff}, {0x80000019, 0x2, 0x5, 0x7, 0x1, 0x7, 0x80000001}, {0x80000000, 0x5, 0x1, 0xd, 0x3, 0x7ff, 0x9}, {0x40000000, 0x2, 0xb, 0xfffffff7, 0xfffffff9, 0xd5c, 0x6}]}) 405.049183ms ago: executing program 1 (id=247): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x602, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000000)=@other={0x2008000300000000, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r11, @ANYBLOB="10002d800a000000020202020202000004002a0040002d800a"], 0x80}}, 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r9) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r13, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x54, r2, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000500)={&(0x7f00000000c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x138, r12, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "893a548250923163e80819a8c9cce802726f4644d3"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x78, 0x3, "95884ae19f644eaddae4d2cd888ad27d1ab1f2c15bda12314c27327787f4d390c10ff8e537ea4478339b15329b5e2a480358faeaf32ab0c4ce354183a3c4f56e763ff01e8d3a2f204f35b8761dbf0f21696bfe49150b8561c1b397c4a0cce062e774d633036d3708781d4e27c6baa1d1a78f77ea"}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x4040020) r16 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r17 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r17, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) sendmsg$NL80211_CMD_REGISTER_FRAME(r16, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 244.790909ms ago: executing program 3 (id=248): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0xfffffff9, 0x802) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000140)={{0x7fffffffffffffff, 0x4, 0x4, 0x400, 0x9}, [{0x8, 0x92a, 0x7, 0x5}]}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0605250c"], 0x9) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8921, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_addrs=@ax25={0x3, @null, 0x1}}) 228.188418ms ago: executing program 3 (id=249): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x0, 0x0}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x3, 0x141102) epoll_create(0x5) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x2, 0x0, 0x2, 0xc, 0x8, 0x1}, 0x17) close(r4) 0s ago: executing program 0 (id=250): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESC(r0, 0x4004480d, &(0x7f00000046c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:35623' (ED25519) to the list of known hosts. [ 48.021629][ T5710] cgroup: Unknown subsys name 'net' [ 48.144614][ T5710] cgroup: Unknown subsys name 'cpuset' [ 48.150850][ T5710] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.116780][ T5710] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x1d4000) [ 53.268277][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.277470][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.282411][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.284285][ T5752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.290153][ T5752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.290300][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.294184][ T5755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.294202][ T5752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.294516][ T5752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.298879][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.301431][ T5755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.308732][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.311846][ T5755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.316067][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.316118][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.316671][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.318814][ T5752] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.320254][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.329723][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.330211][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.925517][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.928947][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.931217][ T5743] bridge_slave_0: entered allmulticast mode [ 53.936135][ T5743] bridge_slave_0: entered promiscuous mode [ 53.977340][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.979835][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.982040][ T5743] bridge_slave_1: entered allmulticast mode [ 53.984707][ T5743] bridge_slave_1: entered promiscuous mode [ 54.029542][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.032757][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.035884][ T5756] bridge_slave_0: entered allmulticast mode [ 54.039806][ T5756] bridge_slave_0: entered promiscuous mode [ 54.044674][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.047716][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.050914][ T5756] bridge_slave_1: entered allmulticast mode [ 54.054766][ T5756] bridge_slave_1: entered promiscuous mode [ 54.104298][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.108268][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.111263][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.114229][ T5748] bridge_slave_0: entered allmulticast mode [ 54.118013][ T5748] bridge_slave_0: entered promiscuous mode [ 54.126712][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.128886][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.131195][ T5747] bridge_slave_0: entered allmulticast mode [ 54.133865][ T5747] bridge_slave_0: entered promiscuous mode [ 54.136945][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.139144][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.141538][ T5747] bridge_slave_1: entered allmulticast mode [ 54.144798][ T5747] bridge_slave_1: entered promiscuous mode [ 54.158686][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.162382][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.164608][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.167560][ T5748] bridge_slave_1: entered allmulticast mode [ 54.170955][ T5748] bridge_slave_1: entered promiscuous mode [ 54.195048][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.204718][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.216003][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.236621][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.243295][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.249085][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.254481][ T5743] team0: Port device team_slave_0 added [ 54.263326][ T5743] team0: Port device team_slave_1 added [ 54.293811][ T5756] team0: Port device team_slave_0 added [ 54.315160][ T5747] team0: Port device team_slave_0 added [ 54.326508][ T5747] team0: Port device team_slave_1 added [ 54.330464][ T5756] team0: Port device team_slave_1 added [ 54.333473][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.336310][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.346398][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.354892][ T5748] team0: Port device team_slave_0 added [ 54.367083][ T5748] team0: Port device team_slave_1 added [ 54.384908][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.387374][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.396631][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.431116][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.433701][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.443789][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.449194][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.451816][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.461538][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.466252][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.468275][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.475885][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.480017][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.482877][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.494460][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.506636][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.508793][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.516828][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.521116][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.524076][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.532735][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.560328][ T5743] hsr_slave_0: entered promiscuous mode [ 54.563175][ T5743] hsr_slave_1: entered promiscuous mode [ 54.587132][ T5747] hsr_slave_0: entered promiscuous mode [ 54.589459][ T5747] hsr_slave_1: entered promiscuous mode [ 54.591676][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 54.593595][ T5747] Cannot create hsr debugfs directory [ 54.638276][ T5756] hsr_slave_0: entered promiscuous mode [ 54.640608][ T5756] hsr_slave_1: entered promiscuous mode [ 54.642601][ T5756] debugfs: 'hsr0' already exists in 'hsr' [ 54.644394][ T5756] Cannot create hsr debugfs directory [ 54.685144][ T5748] hsr_slave_0: entered promiscuous mode [ 54.688318][ T5748] hsr_slave_1: entered promiscuous mode [ 54.691543][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 54.693853][ T5748] Cannot create hsr debugfs directory [ 54.962735][ T5747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.973170][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.978337][ T5747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.980637][ T1133] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 54.983950][ T1133] ata1: failed to read log page 10h (errno=-5) [ 54.985957][ T1133] ata1.00: NCQ disabled due to excessive errors [ 54.987485][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.987883][ T1133] ata1.00: exception Emask 0x1 SAct 0x800 SErr 0x0 action 0x0 [ 54.990707][ T5747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.992594][ T1133] ata1.00: irq_stat 0x41000000 [ 54.996387][ T1133] ata1.00: failed command: WRITE FPDMA QUEUED [ 54.998290][ T1133] ata1.00: cmd 61/a0:58:c6:14:08/0e:00:00:00:00/40 tag 11 ncq dma 1916928 ou [ 54.998290][ T1133] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 54.998936][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.003841][ T1133] ata1.00: status: { DRDY } [ 55.007006][ T5747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.007674][ T1133] ata1.00: error: { ABRT } [ 55.013047][ T1133] ata1.00: configured for UDMA/100 [ 55.014277][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.015381][ T1133] ata1: EH complete [ 55.069706][ T5756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.077524][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.080704][ T5756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.087902][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.091118][ T5756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.097484][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.100901][ T5756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.108072][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.155691][ T5748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.163927][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.167656][ T5748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.173296][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.184381][ T5748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.189374][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.193580][ T5748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.201147][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.263855][ T5743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.268765][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.271914][ T5743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.277266][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.284014][ T5743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.290227][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.294504][ T5743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.299514][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.310880][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.338626][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.340601][ T5752] Bluetooth: hci2: command tx timeout [ 55.341409][ T5101] Bluetooth: hci0: command tx timeout [ 55.344504][ T64] Bluetooth: hci3: command tx timeout [ 55.356626][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.374374][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.377299][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.388904][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.391229][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.401523][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.413157][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.415483][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.420779][ T64] Bluetooth: hci1: command tx timeout [ 55.442345][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.444651][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.467506][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.502242][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.516306][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.520777][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.523018][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.538390][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.540785][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.547100][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.557370][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.560475][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.574818][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.577691][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.746994][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.760837][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.798762][ T5747] veth0_vlan: entered promiscuous mode [ 55.812350][ T5756] veth0_vlan: entered promiscuous mode [ 55.818594][ T5747] veth1_vlan: entered promiscuous mode [ 55.830164][ T5756] veth1_vlan: entered promiscuous mode [ 55.851584][ T5747] veth0_macvtap: entered promiscuous mode [ 55.857591][ T5747] veth1_macvtap: entered promiscuous mode [ 55.863849][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.875663][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.884269][ T5756] veth0_macvtap: entered promiscuous mode [ 55.893803][ T5756] veth1_macvtap: entered promiscuous mode [ 55.898575][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.920789][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.947585][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.953444][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.960997][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.965283][ T5748] veth0_vlan: entered promiscuous mode [ 55.985219][ T5748] veth1_vlan: entered promiscuous mode [ 55.996895][ T5743] veth0_vlan: entered promiscuous mode [ 56.016988][ T5743] veth1_vlan: entered promiscuous mode [ 56.030131][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.061987][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.070709][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.072676][ T5748] veth0_macvtap: entered promiscuous mode [ 56.084912][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.088154][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.098949][ T5743] veth0_macvtap: entered promiscuous mode [ 56.102634][ T5748] veth1_macvtap: entered promiscuous mode [ 56.113003][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.115612][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.119941][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.127795][ T5743] veth1_macvtap: entered promiscuous mode [ 56.150375][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.157598][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.161800][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.162943][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.176583][ T5747] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.176908][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.187199][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.193256][ T5747] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 56.198948][ T5747] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 56.206462][ T5747] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 56.228838][ T5747] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 56.230291][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.239006][ T5821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.279429][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.282989][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.283212][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.292336][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.297817][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.298406][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.335342][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.339300][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.339833][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.346083][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.361211][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.380010][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.383685][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.389868][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.408911][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.411820][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.419930][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.427168][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.431723][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.715565][ T5890] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.994831][ T5890] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 57.001669][ T5890] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 57.007984][ T5890] usb 7-1: config 0 interface 0 has no altsetting 0 [ 57.019479][ T5890] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 57.027958][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 57.039725][ T5890] usb 7-1: Product: syz [ 57.050766][ T5890] usb 7-1: Manufacturer: syz [ 57.056539][ T5890] usb 7-1: SerialNumber: syz [ 57.073492][ T5890] usb 7-1: config 0 descriptor?? [ 57.095703][ T5890] hub 7-1:0.0: bad descriptor, ignoring hub [ 57.108656][ T5890] hub 7-1:0.0: probe with driver hub failed with error -5 [ 57.124651][ T5890] usb 7-1: selecting invalid altsetting 0 [ 57.420820][ T5752] Bluetooth: hci2: command tx timeout [ 57.423793][ T64] Bluetooth: hci3: command tx timeout [ 57.430481][ T64] Bluetooth: hci0: command tx timeout [ 57.500758][ T64] Bluetooth: hci1: command tx timeout [ 57.983486][ T5894] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 58.143017][ T5894] usb 7-1: device reset changed ep0 maxpacket size! [ 58.156594][ T845] usb 7-1: USB disconnect, device number 2 [ 58.372405][ T845] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.539720][ T845] usb 7-1: Using ep0 maxpacket: 8 [ 58.611579][ T845] usb 7-1: unable to get BOS descriptor or descriptor too short [ 58.620286][ T845] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 58.625482][ T845] usb 7-1: can't read configurations, error -71 [ 58.983954][ T5928] Zero length message leads to an empty skb [ 58.995938][ T41] IPVS: starting estimator thread 0... [ 59.001499][ T5928] IPVS: lc: FWM 3 0x00000003 - no destination available [ 59.013555][ T5928] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8'. [ 59.091534][ T5929] IPVS: using max 42 ests per chain, 100800 per kthread [ 59.119801][ T5821] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.412304][ T5938] ======================================================= [ 59.412304][ T5938] WARNING: The mand mount option has been deprecated and [ 59.412304][ T5938] and is ignored by this kernel. Remove the mand [ 59.412304][ T5938] option from the mount to silence this warning. [ 59.412304][ T5938] ======================================================= [ 59.423828][ T5941] FAULT_INJECTION: forcing a failure. [ 59.423828][ T5941] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.428436][ T5941] CPU: 0 UID: 0 PID: 5941 Comm: syz.2.13 Not tainted syzkaller #0 PREEMPT(full) [ 59.428452][ T5941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.428459][ T5941] Call Trace: [ 59.428469][ T5941] [ 59.428474][ T5941] dump_stack_lvl+0x100/0x190 [ 59.428493][ T5941] should_fail_ex.cold+0x5/0xa [ 59.428506][ T5941] _copy_from_user+0x2e/0xd0 [ 59.428525][ T5941] bpf_test_init.isra.0+0xaf/0x100 [ 59.428547][ T5941] bpf_prog_test_run_skb+0x497/0x3540 [ 59.428563][ T5941] ? find_held_lock+0x2b/0x80 [ 59.428578][ T5941] ? __fget_files+0x1c1/0x3d0 [ 59.428592][ T5941] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 59.428606][ T5941] ? fput+0x79/0x100 [ 59.428620][ T5941] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 59.428632][ T5941] __sys_bpf+0x2a12/0x4e80 [ 59.428649][ T5941] ? __pfx___sys_bpf+0x10/0x10 [ 59.428661][ T5941] ? find_held_lock+0x2b/0x80 [ 59.428675][ T5941] ? get_pid_task+0xfc/0x250 [ 59.428688][ T5941] ? get_pid_task+0xfc/0x250 [ 59.428706][ T5941] ? proc_fail_nth_write+0x9f/0x220 [ 59.428721][ T5941] ? find_held_lock+0x2b/0x80 [ 59.428738][ T5941] ? rcu_read_lock_any_held+0x6a/0xa0 [ 59.428753][ T5941] ? find_held_lock+0x2b/0x80 [ 59.428766][ T5941] ? ksys_write+0x190/0x250 [ 59.428775][ T5941] ? ksys_write+0x190/0x250 [ 59.428795][ T5941] ? fput+0x79/0x100 [ 59.428809][ T5941] ? __ia32_sys_bpf+0xcc/0x170 [ 59.428820][ T5941] __ia32_sys_bpf+0xcc/0x170 [ 59.428832][ T5941] ? __do_fast_syscall_32+0x98/0x970 [ 59.428850][ T5941] __do_fast_syscall_32+0xe7/0x970 [ 59.428865][ T5941] ? lockdep_hardirqs_on+0x78/0x100 [ 59.428881][ T5941] do_fast_syscall_32+0x32/0x70 [ 59.428897][ T5941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.428912][ T5941] RIP: 0023:0xf7f92fec [ 59.428925][ T5941] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 59.428937][ T5941] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 59.428953][ T5941] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800003c0 [ 59.428959][ T5941] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.428966][ T5941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 59.428972][ T5941] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 59.428978][ T5941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.428991][ T5941] [ 59.514204][ T64] Bluetooth: hci0: command tx timeout [ 59.516101][ T64] Bluetooth: hci3: command tx timeout [ 59.520145][ T64] Bluetooth: hci2: command tx timeout [ 59.579845][ T64] Bluetooth: hci1: command tx timeout [ 59.661791][ T5944] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14'. [ 59.748834][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 60.120388][ T5973] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 60.131085][ T5973] erspan1: entered allmulticast mode [ 60.143714][ T5974] syzkaller0: entered promiscuous mode [ 60.145588][ T5974] syzkaller0: entered allmulticast mode [ 60.318225][ T5982] syzkaller0: entered promiscuous mode [ 60.321066][ T5982] syzkaller0: entered allmulticast mode [ 60.665010][ T6004] syzkaller0: entered promiscuous mode [ 60.666777][ T6004] syzkaller0: entered allmulticast mode [ 60.670980][ T6004] FAULT_INJECTION: forcing a failure. [ 60.670980][ T6004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.675045][ T6004] CPU: 2 UID: 0 PID: 6004 Comm: syz.2.21 Not tainted syzkaller #0 PREEMPT(full) [ 60.675059][ T6004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.675066][ T6004] Call Trace: [ 60.675071][ T6004] [ 60.675076][ T6004] dump_stack_lvl+0x100/0x190 [ 60.675093][ T6004] should_fail_ex.cold+0x5/0xa [ 60.675105][ T6004] _copy_from_iter+0x1f4/0x1690 [ 60.675126][ T6004] ? __pfx__copy_from_iter+0x10/0x10 [ 60.675144][ T6004] ? find_held_lock+0x2b/0x80 [ 60.675158][ T6004] ? dev_get_by_index+0x180/0x380 [ 60.675174][ T6004] ? dev_get_by_index+0x180/0x380 [ 60.675192][ T6004] packet_sendmsg+0x1bb3/0x5100 [ 60.675213][ T6004] ? __pfx___might_resched+0x10/0x10 [ 60.675233][ T6004] ? aa_sk_perm+0x309/0xaa0 [ 60.675251][ T6004] ? __pfx_aa_sk_perm+0x10/0x10 [ 60.675265][ T6004] ? __pfx_packet_sendmsg+0x10/0x10 [ 60.675284][ T6004] ? apparmor_socket_sendmsg+0x15b/0x270 [ 60.675298][ T6004] ____sys_sendmsg+0xa4d/0xbe0 [ 60.675309][ T6004] ? __pfx_packet_sendmsg+0x10/0x10 [ 60.675325][ T6004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.675342][ T6004] ___sys_sendmsg+0x190/0x1e0 [ 60.675355][ T6004] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.675374][ T6004] ? find_held_lock+0x2b/0x80 [ 60.675395][ T6004] __sys_sendmsg+0x160/0x210 [ 60.675411][ T6004] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.675430][ T6004] ? __pfx_ksys_write+0x10/0x10 [ 60.675444][ T6004] __do_fast_syscall_32+0xe7/0x970 [ 60.675460][ T6004] ? lockdep_hardirqs_on+0x78/0x100 [ 60.675476][ T6004] do_fast_syscall_32+0x32/0x70 [ 60.675492][ T6004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.675507][ T6004] RIP: 0023:0xf7f92fec [ 60.675521][ T6004] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 60.675526][ T6004] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 60.675537][ T6004] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 60.675543][ T6004] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.675550][ T6004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.675555][ T6004] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 60.675562][ T6004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.675574][ T6004] [ 60.918101][ T6006] syz.2.22 uses obsolete (PF_INET,SOCK_PACKET) [ 60.985453][ T6006] bridge0: port 3(syz_tun) entered blocking state [ 60.988112][ T6006] bridge0: port 3(syz_tun) entered disabled state [ 60.990745][ T6006] syz_tun: entered allmulticast mode [ 60.998936][ T6006] syz_tun: entered promiscuous mode [ 61.003478][ T6006] bridge0: port 3(syz_tun) entered blocking state [ 61.006018][ T6006] bridge0: port 3(syz_tun) entered forwarding state [ 61.030817][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 61.034975][ T6006] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 61.064283][ T6009] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 61.069166][ T6009] netlink: 'syz.0.23': attribute type 12 has an invalid length. [ 61.076019][ T6009] netlink: 'syz.0.23': attribute type 83 has an invalid length. [ 61.170243][ T6020] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 61.171915][ T6019] IPVS: stopping backup sync thread 6020 ... [ 61.183306][ T6019] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.186149][ T6019] overlayfs: failed to set xattr on upper [ 61.187944][ T6019] overlayfs: ...falling back to redirect_dir=nofollow. [ 61.191443][ T6019] overlayfs: ...falling back to index=off. [ 61.194838][ T6019] overlayfs: ...falling back to uuid=null. [ 61.202788][ T6019] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 61.264366][ T6024] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 61.579838][ T64] Bluetooth: hci2: command tx timeout [ 61.579902][ T5101] Bluetooth: hci3: command tx timeout [ 61.580968][ T5752] Bluetooth: hci0: command tx timeout [ 61.670306][ T5101] Bluetooth: hci1: command tx timeout [ 63.019582][ T6049] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 63.265191][ T6055] syzkaller0: entered promiscuous mode [ 63.266909][ T6055] syzkaller0: entered allmulticast mode [ 63.270123][ T6055] FAULT_INJECTION: forcing a failure. [ 63.270123][ T6055] name failslab, interval 1, probability 0, space 0, times 0 [ 63.273671][ T6055] CPU: 0 UID: 0 PID: 6055 Comm: syz.3.34 Not tainted syzkaller #0 PREEMPT(full) [ 63.273686][ T6055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.273692][ T6055] Call Trace: [ 63.273697][ T6055] [ 63.273701][ T6055] dump_stack_lvl+0x100/0x190 [ 63.273718][ T6055] should_fail_ex.cold+0x5/0xa [ 63.273731][ T6055] should_failslab+0xc2/0x120 [ 63.273748][ T6055] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 63.273764][ T6055] ? __alloc_skb+0x5b7/0x710 [ 63.273780][ T6055] ? __alloc_skb+0x140/0x710 [ 63.273797][ T6055] __alloc_skb+0x140/0x710 [ 63.273811][ T6055] ? __alloc_skb+0x5b7/0x710 [ 63.273825][ T6055] ? __pfx___alloc_skb+0x10/0x10 [ 63.273839][ T6055] ? up_write+0x2e5/0x5c0 [ 63.273854][ T6055] alloc_skb_with_frags+0xdd/0x760 [ 63.273876][ T6055] sock_alloc_send_pskb+0x801/0x980 [ 63.273891][ T6055] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 63.273907][ T6055] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 63.273923][ T6055] ? find_held_lock+0x2b/0x80 [ 63.273936][ T6055] ? dev_get_by_index+0x180/0x380 [ 63.273951][ T6055] ? dev_get_by_index+0x180/0x380 [ 63.273970][ T6055] packet_sendmsg+0x1eda/0x5100 [ 63.273991][ T6055] ? __pfx___might_resched+0x10/0x10 [ 63.274011][ T6055] ? aa_sk_perm+0x309/0xaa0 [ 63.274032][ T6055] ? __pfx_aa_sk_perm+0x10/0x10 [ 63.274047][ T6055] ? __pfx_packet_sendmsg+0x10/0x10 [ 63.274074][ T6055] ? apparmor_socket_sendmsg+0x15b/0x270 [ 63.274097][ T6055] ____sys_sendmsg+0xa4d/0xbe0 [ 63.274116][ T6055] ? __pfx_packet_sendmsg+0x10/0x10 [ 63.274139][ T6055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.274169][ T6055] ___sys_sendmsg+0x190/0x1e0 [ 63.274188][ T6055] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.274206][ T6055] ? find_held_lock+0x2b/0x80 [ 63.274227][ T6055] __sys_sendmsg+0x160/0x210 [ 63.274244][ T6055] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.274263][ T6055] ? __pfx_ksys_write+0x10/0x10 [ 63.274277][ T6055] __do_fast_syscall_32+0xe7/0x970 [ 63.274294][ T6055] ? lockdep_hardirqs_on+0x78/0x100 [ 63.274310][ T6055] do_fast_syscall_32+0x32/0x70 [ 63.274325][ T6055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.274340][ T6055] RIP: 0023:0xf70befec [ 63.274354][ T6055] Code: Unable to access opcode bytes at 0xf70befc2. [ 63.274359][ T6055] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 63.274370][ T6055] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 63.274376][ T6055] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.274382][ T6055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.274389][ T6055] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 63.274395][ T6055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.274407][ T6055] [ 63.659805][ T5101] Bluetooth: hci2: command tx timeout [ 63.748603][ T6061] tipc: Started in network mode [ 63.750889][ T6061] tipc: Node identity e25e629eb1b, cluster identity 4711 [ 63.753756][ T6061] tipc: Enabled bearer , priority 0 [ 63.757817][ T6061] syzkaller0: entered promiscuous mode [ 63.760013][ T6061] syzkaller0: entered allmulticast mode [ 63.767475][ T6061] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 63.784227][ T6061] tipc: Resetting bearer [ 63.791560][ T6060] tipc: Resetting bearer [ 63.802823][ T6060] tipc: Disabling bearer [ 63.921611][ T6063] netlink: 32 bytes leftover after parsing attributes in process `syz.3.37'. [ 64.082597][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'. [ 64.186350][ T6078] syzkaller0: entered promiscuous mode [ 64.188489][ T6078] syzkaller0: entered allmulticast mode [ 64.199483][ T6078] FAULT_INJECTION: forcing a failure. [ 64.199483][ T6078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.205510][ T6078] CPU: 0 UID: 0 PID: 6078 Comm: syz.3.40 Not tainted syzkaller #0 PREEMPT(full) [ 64.205530][ T6078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.205537][ T6078] Call Trace: [ 64.205541][ T6078] [ 64.205545][ T6078] dump_stack_lvl+0x100/0x190 [ 64.205563][ T6078] should_fail_ex.cold+0x5/0xa [ 64.205576][ T6078] _copy_from_iter+0x1f4/0x1690 [ 64.205598][ T6078] ? __pfx__copy_from_iter+0x10/0x10 [ 64.205615][ T6078] ? find_held_lock+0x2b/0x80 [ 64.205629][ T6078] ? dev_get_by_index+0x180/0x380 [ 64.205645][ T6078] ? dev_get_by_index+0x180/0x380 [ 64.205664][ T6078] packet_sendmsg+0x1bb3/0x5100 [ 64.205684][ T6078] ? __pfx___might_resched+0x10/0x10 [ 64.205717][ T6078] ? aa_sk_perm+0x309/0xaa0 [ 64.205734][ T6078] ? __pfx_aa_sk_perm+0x10/0x10 [ 64.205749][ T6078] ? __pfx_packet_sendmsg+0x10/0x10 [ 64.205767][ T6078] ? apparmor_socket_sendmsg+0x15b/0x270 [ 64.205781][ T6078] ____sys_sendmsg+0xa4d/0xbe0 [ 64.205793][ T6078] ? __pfx_packet_sendmsg+0x10/0x10 [ 64.205808][ T6078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.205826][ T6078] ___sys_sendmsg+0x190/0x1e0 [ 64.205839][ T6078] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.205857][ T6078] ? find_held_lock+0x2b/0x80 [ 64.205878][ T6078] __sys_sendmsg+0x160/0x210 [ 64.205894][ T6078] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.205913][ T6078] ? __pfx_ksys_write+0x10/0x10 [ 64.205926][ T6078] __do_fast_syscall_32+0xe7/0x970 [ 64.205943][ T6078] ? lockdep_hardirqs_on+0x78/0x100 [ 64.205959][ T6078] do_fast_syscall_32+0x32/0x70 [ 64.205974][ T6078] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.205989][ T6078] RIP: 0023:0xf70befec [ 64.206002][ T6078] Code: Unable to access opcode bytes at 0xf70befc2. [ 64.206007][ T6078] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 64.206018][ T6078] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 64.206025][ T6078] RDX: 0000000000004005 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.206033][ T6078] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.206039][ T6078] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.206045][ T6078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.206058][ T6078] [ 64.439188][ T6081] FAULT_INJECTION: forcing a failure. [ 64.439188][ T6081] name failslab, interval 1, probability 0, space 0, times 0 [ 64.446116][ T6081] CPU: 1 UID: 0 PID: 6081 Comm: syz.3.42 Not tainted syzkaller #0 PREEMPT(full) [ 64.446141][ T6081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.446151][ T6081] Call Trace: [ 64.446157][ T6081] [ 64.446164][ T6081] dump_stack_lvl+0x100/0x190 [ 64.446191][ T6081] should_fail_ex.cold+0x5/0xa [ 64.446213][ T6081] should_failslab+0xc2/0x120 [ 64.446238][ T6081] __kmalloc_cache_noprof+0x91/0x6c0 [ 64.446257][ T6081] ? rcu_is_watching+0x12/0xc0 [ 64.446279][ T6081] ? vhost_task_create+0xee/0x370 [ 64.446306][ T6081] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 64.446334][ T6081] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 64.446365][ T6081] vhost_task_create+0xee/0x370 [ 64.446391][ T6081] ? __pfx_vhost_task_create+0x10/0x10 [ 64.446424][ T6081] ? __pfx_vhost_task_fn+0x10/0x10 [ 64.446461][ T6081] kvm_mmu_post_init_vm+0x1b3/0x360 [ 64.446486][ T6081] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 64.446509][ T6081] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 64.446530][ T6081] kvm_vcpu_ioctl+0x730/0x1700 [ 64.446549][ T6081] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 64.446568][ T6081] ? tomoyo_path_number_perm+0x188/0x580 [ 64.446593][ T6081] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 64.446640][ T6081] ? get_pid_task+0x106/0x250 [ 64.446668][ T6081] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.446695][ T6081] ? do_vfs_ioctl+0x226/0x13e0 [ 64.446721][ T6081] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 64.446756][ T6081] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 64.446776][ T6081] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 64.446794][ T6081] ? __fget_files+0x21f/0x3d0 [ 64.446813][ T6081] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 64.446832][ T6081] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 64.446860][ T6081] __do_fast_syscall_32+0xe7/0x970 [ 64.446887][ T6081] ? lockdep_hardirqs_on+0x78/0x100 [ 64.446912][ T6081] do_fast_syscall_32+0x32/0x70 [ 64.446937][ T6081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.446959][ T6081] RIP: 0023:0xf70befec [ 64.446980][ T6081] Code: Unable to access opcode bytes at 0xf70befc2. [ 64.446987][ T6081] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 64.447005][ T6081] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 64.447015][ T6081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.447030][ T6081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.447040][ T6081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.447049][ T6081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.447072][ T6081] [ 64.689296][ T42] audit: type=1326 audit(1785731844.274:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.3.46" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70befec code=0x0 [ 64.842220][ T6096] syzkaller0: entered promiscuous mode [ 64.844014][ T6096] syzkaller0: entered allmulticast mode [ 65.056835][ T6101] syzkaller0: entered promiscuous mode [ 65.059798][ T6101] syzkaller0: entered allmulticast mode [ 65.216753][ T6106] syzkaller0: entered promiscuous mode [ 65.218840][ T6106] syzkaller0: entered allmulticast mode [ 65.222800][ T6106] FAULT_INJECTION: forcing a failure. [ 65.222800][ T6106] name failslab, interval 1, probability 0, space 0, times 0 [ 65.226858][ T6106] CPU: 1 UID: 0 PID: 6106 Comm: syz.1.52 Not tainted syzkaller #0 PREEMPT(full) [ 65.226873][ T6106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.226880][ T6106] Call Trace: [ 65.226884][ T6106] [ 65.226889][ T6106] dump_stack_lvl+0x100/0x190 [ 65.226906][ T6106] should_fail_ex.cold+0x5/0xa [ 65.226919][ T6106] should_failslab+0xc2/0x120 [ 65.226936][ T6106] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 65.226950][ T6106] ? __alloc_skb+0x5b7/0x710 [ 65.226966][ T6106] ? __alloc_skb+0x140/0x710 [ 65.226982][ T6106] __alloc_skb+0x140/0x710 [ 65.226996][ T6106] ? __alloc_skb+0x5b7/0x710 [ 65.227010][ T6106] ? __pfx___alloc_skb+0x10/0x10 [ 65.227030][ T6106] ? up_write+0x2e5/0x5c0 [ 65.227044][ T6106] alloc_skb_with_frags+0xdd/0x760 [ 65.227065][ T6106] sock_alloc_send_pskb+0x801/0x980 [ 65.227081][ T6106] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 65.227096][ T6106] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 65.227111][ T6106] ? find_held_lock+0x2b/0x80 [ 65.227125][ T6106] ? dev_get_by_index+0x180/0x380 [ 65.227140][ T6106] ? dev_get_by_index+0x180/0x380 [ 65.227158][ T6106] packet_sendmsg+0x1eda/0x5100 [ 65.227179][ T6106] ? __pfx___might_resched+0x10/0x10 [ 65.227199][ T6106] ? aa_sk_perm+0x309/0xaa0 [ 65.227216][ T6106] ? __pfx_aa_sk_perm+0x10/0x10 [ 65.227230][ T6106] ? __pfx_packet_sendmsg+0x10/0x10 [ 65.227249][ T6106] ? apparmor_socket_sendmsg+0x15b/0x270 [ 65.227263][ T6106] ____sys_sendmsg+0xa4d/0xbe0 [ 65.227274][ T6106] ? __pfx_packet_sendmsg+0x10/0x10 [ 65.227289][ T6106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.227307][ T6106] ___sys_sendmsg+0x190/0x1e0 [ 65.227320][ T6106] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.227338][ T6106] ? find_held_lock+0x2b/0x80 [ 65.227359][ T6106] __sys_sendmsg+0x160/0x210 [ 65.227375][ T6106] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.227395][ T6106] ? __pfx_ksys_write+0x10/0x10 [ 65.227409][ T6106] __do_fast_syscall_32+0xe7/0x970 [ 65.227426][ T6106] ? lockdep_hardirqs_on+0x78/0x100 [ 65.227441][ T6106] do_fast_syscall_32+0x32/0x70 [ 65.227457][ T6106] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.227471][ T6106] RIP: 0023:0xf7fd5fec [ 65.227485][ T6106] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 65.227490][ T6106] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 65.227501][ T6106] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080002900 [ 65.227507][ T6106] RDX: 0000000020000885 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.227514][ T6106] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.227519][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.227526][ T6106] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.227538][ T6106] [ 65.433328][ T6111] syzkaller0: entered promiscuous mode [ 65.435188][ T6111] syzkaller0: entered allmulticast mode [ 65.441279][ T6111] FAULT_INJECTION: forcing a failure. [ 65.441279][ T6111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.445414][ T6111] CPU: 2 UID: 0 PID: 6111 Comm: syz.2.54 Not tainted syzkaller #0 PREEMPT(full) [ 65.445429][ T6111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.445435][ T6111] Call Trace: [ 65.445440][ T6111] [ 65.445445][ T6111] dump_stack_lvl+0x100/0x190 [ 65.445463][ T6111] should_fail_ex.cold+0x5/0xa [ 65.445476][ T6111] _copy_from_iter+0x1f4/0x1690 [ 65.445502][ T6111] ? __pfx__copy_from_iter+0x10/0x10 [ 65.445520][ T6111] ? find_held_lock+0x2b/0x80 [ 65.445534][ T6111] ? dev_get_by_index+0x180/0x380 [ 65.445551][ T6111] ? dev_get_by_index+0x180/0x380 [ 65.445569][ T6111] packet_sendmsg+0x1bb3/0x5100 [ 65.445590][ T6111] ? __pfx___might_resched+0x10/0x10 [ 65.445610][ T6111] ? aa_sk_perm+0x309/0xaa0 [ 65.445628][ T6111] ? __pfx_aa_sk_perm+0x10/0x10 [ 65.445643][ T6111] ? __pfx_packet_sendmsg+0x10/0x10 [ 65.445661][ T6111] ? apparmor_socket_sendmsg+0x15b/0x270 [ 65.445675][ T6111] ____sys_sendmsg+0xa4d/0xbe0 [ 65.445686][ T6111] ? __pfx_packet_sendmsg+0x10/0x10 [ 65.445703][ T6111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.445720][ T6111] ___sys_sendmsg+0x190/0x1e0 [ 65.445733][ T6111] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.445751][ T6111] ? find_held_lock+0x2b/0x80 [ 65.445772][ T6111] __sys_sendmsg+0x160/0x210 [ 65.445789][ T6111] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.445808][ T6111] ? __pfx_ksys_write+0x10/0x10 [ 65.445821][ T6111] __do_fast_syscall_32+0xe7/0x970 [ 65.445838][ T6111] ? lockdep_hardirqs_on+0x78/0x100 [ 65.445854][ T6111] do_fast_syscall_32+0x32/0x70 [ 65.445871][ T6111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.445885][ T6111] RIP: 0023:0xf7f92fec [ 65.445899][ T6111] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 65.445904][ T6111] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 65.445916][ T6111] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 65.445922][ T6111] RDX: 0000000000004005 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.445929][ T6111] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.445934][ T6111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.445941][ T6111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.445953][ T6111] [ 65.754065][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 65.854544][ T6127] tipc: Started in network mode [ 65.856723][ T6127] tipc: Node identity 6e62a3acf2f3, cluster identity 4711 [ 65.859141][ T6127] tipc: Enabled bearer , priority 0 [ 65.866554][ T6127] syzkaller0: entered promiscuous mode [ 65.868412][ T6127] syzkaller0: entered allmulticast mode [ 65.874847][ T6127] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 65.915084][ T6127] tipc: Resetting bearer [ 65.920210][ T6126] tipc: Resetting bearer [ 65.937324][ T6126] tipc: Disabling bearer [ 66.097688][ T6138] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.404712][ T6151] e1000e 0000:00:02.0 eth1: removed PHC [ 66.425650][ T6149] vivid-000: unregistering video7 [ 66.429816][ T6149] vivid-000: unregistering video8 [ 66.436386][ T6149] vivid-000: unregistering vbi0 [ 66.454970][ T6149] vivid-000: unregistering vbi1 [ 66.465409][ T6149] vivid-000: unregistering swradio0 [ 66.473837][ T5113] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 66.481503][ T6149] vivid-000: unregistering radio0 [ 66.496349][ T6149] vivid-000: unregistering radio1 [ 66.505904][ T6149] vivid-000: unregistering video9 [ 66.515062][ T6149] vivid-000: unregistering video10 [ 66.517824][ T6149] vivid-000: unregistering v4l-touch0 [ 66.566438][ T6151] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 66.576898][ T6149] vivid-001: unregistering video11 [ 66.583690][ T6149] vivid-001: unregistering video12 [ 66.595513][ T6149] vivid-001: unregistering vbi2 [ 66.610171][ T6149] vivid-001: unregistering vbi3 [ 66.642578][ T6149] vivid-001: unregistering swradio1 [ 66.654896][ T5113] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 66.658370][ T5113] usb 7-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 66.663328][ T5113] usb 7-1: config 0 has no interface number 0 [ 66.663979][ T6149] vivid-001: unregistering radio2 [ 66.666030][ T5113] usb 7-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 66.670663][ T6149] vivid-001: unregistering radio3 [ 66.673262][ T5113] usb 7-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 66.681295][ T5113] usb 7-1: config 0 interface 143 has no altsetting 0 [ 66.687372][ T5113] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 66.691929][ T6149] vivid-001: unregistering video13 [ 66.692385][ T5113] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.697494][ T5113] usb 7-1: Product: syz [ 66.699203][ T5113] usb 7-1: Manufacturer: syz [ 66.701376][ T5113] usb 7-1: SerialNumber: syz [ 66.712243][ T6149] vivid-001: unregistering video14 [ 66.741477][ T5113] usb 7-1: config 0 descriptor?? [ 66.750126][ T1350] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.752094][ T6149] vivid-001: unregistering v4l-touch1 [ 66.827801][ T6149] vivid-002: unregistering video15 [ 66.834459][ T6149] vivid-002: unregistering video16 [ 66.841646][ T6149] vivid-002: unregistering vbi4 [ 66.854220][ T6149] vivid-002: unregistering vbi5 [ 66.861458][ T6149] vivid-002: unregistering swradio2 [ 66.873486][ T6149] vivid-002: unregistering radio4 [ 66.880459][ T6149] vivid-002: unregistering radio5 [ 66.895768][ T6149] vivid-002: unregistering video17 [ 66.901539][ T6149] vivid-002: unregistering video18 [ 66.906736][ T6149] vivid-002: unregistering v4l-touch2 [ 66.912068][ T1350] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.915312][ T1350] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 66.918125][ T1350] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 66.922678][ T1350] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.949534][ T1350] usb 8-1: config 0 descriptor?? [ 66.968430][ T5113] usb 7-1: USB disconnect, device number 5 [ 66.975438][ T6149] vivid-003: unregistering video19 [ 66.980400][ T6149] vivid-003: unregistering video20 [ 66.989434][ T6149] vivid-003: unregistering vbi6 [ 67.007565][ T6149] vivid-003: unregistering vbi7 [ 67.027353][ T6149] vivid-003: unregistering swradio3 [ 67.045221][ T6149] vivid-003: unregistering radio6 [ 67.051973][ T6149] vivid-003: unregistering radio7 [ 67.060105][ T6149] vivid-003: unregistering video21 [ 67.065712][ T6149] vivid-003: unregistering video22 [ 67.074292][ T6149] vivid-003: unregistering v4l-touch3 [ 67.146248][ T6149] vivid-004: unregistering video23 [ 67.152617][ T6149] vivid-004: unregistering video24 [ 67.157229][ T6149] vivid-004: unregistering vbi8 [ 67.164787][ T6149] vivid-004: unregistering vbi9 [ 67.172373][ T6151] netlink: 40 bytes leftover after parsing attributes in process `syz.3.64'. [ 67.206051][ T1350] usb 8-1: string descriptor 0 read error: -71 [ 67.207213][ T6149] vivid-004: unregistering swradio4 [ 67.226074][ T6149] vivid-004: unregistering radio8 [ 67.228697][ T6149] vivid-004: unregistering radio9 [ 67.235466][ T6149] vivid-004: unregistering video25 [ 67.247845][ T1350] usb 8-1: USB disconnect, device number 2 [ 67.297816][ T6149] vivid-004: unregistering video26 [ 67.303475][ T6149] vivid-004: unregistering v4l-touch4 [ 67.407328][ T6149] vivid-005: unregistering video27 [ 67.412726][ T6149] vivid-005: unregistering video28 [ 67.423136][ T6149] vivid-005: unregistering vbi10 [ 67.443570][ T6149] vivid-005: unregistering vbi11 [ 67.476774][ T6149] vivid-005: unregistering swradio5 [ 67.479808][ T5113] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 67.489515][ T6149] vivid-005: unregistering radio10 [ 67.495333][ T6149] vivid-005: unregistering radio11 [ 67.498642][ T6149] vivid-005: unregistering video29 [ 67.504673][ T6149] vivid-005: unregistering video30 [ 67.510187][ T6149] vivid-005: unregistering v4l-touch5 [ 67.555773][ T6149] vivid-006: unregistering video31 [ 67.558202][ T6149] vivid-006: unregistering video32 [ 67.560964][ T6149] vivid-006: unregistering vbi12 [ 67.564788][ T6149] vivid-006: unregistering vbi13 [ 67.582700][ T6149] vivid-006: unregistering swradio6 [ 67.591905][ T6149] vivid-006: unregistering radio12 [ 67.594548][ T6149] vivid-006: unregistering radio13 [ 67.597966][ T6149] vivid-006: unregistering video33 [ 67.604677][ T6149] vivid-006: unregistering video34 [ 67.611949][ T6149] vivid-006: unregistering v4l-touch6 [ 67.630220][ T5113] usb 7-1: Using ep0 maxpacket: 16 [ 67.638955][ T5113] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 67.642186][ T5113] usb 7-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 67.645433][ T5113] usb 7-1: config 0 has no interface number 0 [ 67.647008][ T6149] vivid-007: unregistering video35 [ 67.647731][ T5113] usb 7-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 67.653202][ T6149] vivid-007: unregistering video36 [ 67.654212][ T5113] usb 7-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 67.656943][ T6149] vivid-007: unregistering vbi14 [ 67.660771][ T5113] usb 7-1: config 0 interface 143 has no altsetting 0 [ 67.669259][ T5113] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 67.672563][ T5113] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.675510][ T5113] usb 7-1: Product: syz [ 67.677092][ T5113] usb 7-1: Manufacturer: syz [ 67.677730][ T6149] vivid-007: unregistering vbi15 [ 67.678740][ T5113] usb 7-1: SerialNumber: syz [ 67.691877][ T6149] vivid-007: unregistering swradio7 [ 67.697954][ T6149] vivid-007: unregistering radio14 [ 67.712910][ T6149] vivid-007: unregistering radio15 [ 67.717246][ T5113] usb 7-1: config 0 descriptor?? [ 67.728813][ T6149] vivid-007: unregistering video37 [ 67.736043][ T6149] vivid-007: unregistering video38 [ 67.741308][ T6149] vivid-007: unregistering v4l-touch7 [ 67.783594][ T6149] vivid-008: unregistering video39 [ 67.787006][ T6149] vivid-008: unregistering video40 [ 67.790886][ T6149] vivid-008: unregistering vbi16 [ 67.798267][ T6149] vivid-008: unregistering vbi17 [ 67.808923][ T6149] vivid-008: unregistering swradio8 [ 67.827894][ T6149] vivid-008: unregistering radio16 [ 67.834913][ T6149] vivid-008: unregistering radio17 [ 67.843225][ T6149] vivid-008: unregistering video41 [ 67.854824][ T6149] vivid-008: unregistering video42 [ 67.858445][ T6149] vivid-008: unregistering v4l-touch8 [ 67.924199][ T6149] vivid-009: unregistering video43 [ 67.930548][ T6149] vivid-009: unregistering video44 [ 67.937869][ T5824] IPVS: starting estimator thread 0... [ 67.942653][ T6149] vivid-009: unregistering vbi18 [ 67.943606][ T6144] capability: warning: `syz.2.62' uses deprecated v2 capabilities in a way that may be insecure [ 67.961899][ T6149] vivid-009: unregistering vbi19 [ 67.963008][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.967709][ T6149] vivid-009: unregistering swradio9 [ 67.968385][ T6149] vivid-009: unregistering radio18 [ 67.973614][ T6149] vivid-009: unregistering radio19 [ 67.978789][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.983582][ T6149] vivid-009: unregistering video45 [ 67.993886][ T6149] vivid-009: unregistering video46 [ 68.030948][ T6149] vivid-009: unregistering v4l-touch9 [ 68.050034][ T6214] IPVS: using max 43 ests per chain, 103200 per kthread [ 68.052709][ T5113] usb 7-1: USB disconnect, device number 6 [ 68.087248][ T6149] vivid-010: unregistering video47 [ 68.091767][ T6149] vivid-010: unregistering video48 [ 68.097175][ T6149] vivid-010: unregistering vbi20 [ 68.108180][ T6149] vivid-010: unregistering vbi21 [ 68.117316][ T6149] vivid-010: unregistering swradio10 [ 68.130005][ T6149] vivid-010: unregistering radio20 [ 68.139466][ T6149] vivid-010: unregistering radio21 [ 68.148175][ T6149] vivid-010: unregistering video49 [ 68.148312][ T6220] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 68.152781][ T6220] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 68.158147][ T6149] vivid-010: unregistering video50 [ 68.162012][ T6149] vivid-010: unregistering v4l-touch10 [ 68.170742][ T6220] vhci_hcd vhci_hcd.0: Device attached [ 68.176237][ T6220] binder: 6218:6220 ioctl 4010e501 800004c0 returned -22 [ 68.180487][ T6223] vhci_hcd: unknown pdu 2 [ 68.183282][ T6220] xt_hashlimit: max too large, truncated to 1048576 [ 68.192051][ T5821] vhci_hcd vhci_hcd.1: stop threads [ 68.194968][ T5821] vhci_hcd vhci_hcd.1: release socket [ 68.198882][ T5821] vhci_hcd vhci_hcd.1: disconnect device [ 68.216819][ T6149] vivid-011: unregistering video51 [ 68.222146][ T6149] vivid-011: unregistering video52 [ 68.234717][ T6149] vivid-011: unregistering vbi22 [ 68.242807][ T6149] vivid-011: unregistering vbi23 [ 68.250916][ T6149] vivid-011: unregistering swradio11 [ 68.262713][ T6149] vivid-011: unregistering radio22 [ 68.272752][ T6149] vivid-011: unregistering radio23 [ 68.278992][ T6149] vivid-011: unregistering video53 [ 68.282306][ T6149] vivid-011: unregistering video54 [ 68.285433][ T6149] vivid-011: unregistering v4l-touch11 [ 68.312578][ T6149] vivid-012: unregistering video55 [ 68.315003][ T6149] vivid-012: unregistering video56 [ 68.323365][ T6149] vivid-012: unregistering vbi24 [ 68.332133][ T6149] vivid-012: unregistering vbi25 [ 68.341354][ T6149] vivid-012: unregistering swradio12 [ 68.347460][ T6149] vivid-012: unregistering radio24 [ 68.352310][ T6149] vivid-012: unregistering radio25 [ 68.355594][ T6149] vivid-012: unregistering video57 [ 68.358287][ T6149] vivid-012: unregistering video58 [ 68.362587][ T6149] vivid-012: unregistering v4l-touch12 [ 68.416807][ T6149] vivid-013: unregistering video59 [ 68.422421][ T6149] vivid-013: unregistering video60 [ 68.429889][ T6149] vivid-013: unregistering vbi26 [ 68.434099][ T6149] vivid-013: unregistering vbi27 [ 68.437674][ T6149] vivid-013: unregistering swradio13 [ 68.450172][ T6149] vivid-013: unregistering radio26 [ 68.457843][ T6149] vivid-013: unregistering radio27 [ 68.460460][ T6149] vivid-013: unregistering video61 [ 68.463688][ T6149] vivid-013: unregistering video62 [ 68.467169][ T6149] vivid-013: unregistering v4l-touch13 [ 68.494755][ T6149] vivid-014: unregistering video63 [ 68.497711][ T6149] vivid-014: unregistering video64 [ 68.500623][ T6149] vivid-014: unregistering vbi28 [ 68.504732][ T6149] vivid-014: unregistering vbi29 [ 68.507574][ T6149] vivid-014: unregistering swradio14 [ 68.511148][ T6149] vivid-014: unregistering radio28 [ 68.514938][ T6149] vivid-014: unregistering radio29 [ 68.517578][ T6149] vivid-014: unregistering video65 [ 68.520762][ T6149] vivid-014: unregistering video66 [ 68.525044][ T6149] vivid-014: unregistering v4l-touch14 [ 68.547442][ T6149] vivid-015: unregistering video67 [ 68.550763][ T6149] vivid-015: unregistering video68 [ 68.555275][ T6149] vivid-015: unregistering vbi30 [ 68.564102][ T6149] vivid-015: unregistering vbi31 [ 68.567540][ T6149] vivid-015: unregistering swradio15 [ 68.570855][ T6149] vivid-015: unregistering radio30 [ 68.575299][ T6149] vivid-015: unregistering radio31 [ 68.578602][ T6149] vivid-015: unregistering video69 [ 68.583227][ T6149] vivid-015: unregistering video70 [ 68.590435][ T6149] vivid-015: unregistering v4l-touch15 [ 68.638176][ T6149] vivid-016: unregistering video71 [ 68.652445][ T6149] vivid-016: unregistering video72 [ 68.656646][ T6149] vivid-016: unregistering vbi32 [ 68.661327][ T6149] vivid-016: unregistering vbi33 [ 68.668351][ T6149] vivid-016: unregistering swradio16 [ 68.676305][ T6149] vivid-016: unregistering radio32 [ 68.680136][ T6149] vivid-016: unregistering radio33 [ 68.683383][ T6149] vivid-016: unregistering video73 [ 68.685645][ T6149] vivid-016: unregistering video74 [ 68.690060][ T6149] vivid-016: unregistering v4l-touch16 [ 68.721334][ T6149] vivid-017: unregistering video75 [ 68.729202][ T6149] vivid-017: unregistering video76 [ 68.740842][ T6149] vivid-017: unregistering vbi34 [ 68.744488][ T6149] vivid-017: unregistering vbi35 [ 68.747111][ T6149] vivid-017: unregistering swradio17 [ 68.750033][ T6149] vivid-017: unregistering radio34 [ 68.752343][ T6149] vivid-017: unregistering radio35 [ 68.754594][ T6149] vivid-017: unregistering video77 [ 68.756999][ T6149] vivid-017: unregistering video78 [ 68.759213][ T6149] vivid-017: unregistering v4l-touch17 [ 68.759819][ T6241] syzkaller0: entered promiscuous mode [ 68.763421][ T6241] syzkaller0: entered allmulticast mode [ 68.843531][ T6149] vivid-018: unregistering video79 [ 68.847087][ T6149] vivid-018: unregistering video80 [ 68.851762][ T6149] vivid-018: unregistering vbi36 [ 68.862846][ T6149] vivid-018: unregistering vbi37 [ 68.872310][ T6149] vivid-018: unregistering swradio18 [ 68.880059][ T6149] vivid-018: unregistering radio36 [ 68.882542][ T6149] vivid-018: unregistering radio37 [ 68.885065][ T6149] vivid-018: unregistering video81 [ 68.887356][ T6149] vivid-018: unregistering video82 [ 68.890446][ T6149] vivid-018: unregistering v4l-touch18 [ 68.928422][ T6149] vivid-019: unregistering video83 [ 68.932371][ T6149] vivid-019: unregistering video84 [ 68.936814][ T6149] vivid-019: unregistering vbi38 [ 68.941939][ T6149] vivid-019: unregistering vbi39 [ 68.944937][ T6149] vivid-019: unregistering swradio19 [ 68.947574][ T6149] vivid-019: unregistering radio38 [ 68.950916][ T6149] vivid-019: unregistering radio39 [ 68.959142][ T6149] vivid-019: unregistering video85 [ 68.962560][ T6149] vivid-019: unregistering video86 [ 68.965477][ T6149] vivid-019: unregistering v4l-touch19 [ 69.002181][ T6252] FAULT_INJECTION: forcing a failure. [ 69.002181][ T6252] name failslab, interval 1, probability 0, space 0, times 0 [ 69.007720][ T6252] CPU: 2 UID: 0 PID: 6252 Comm: syz.1.78 Not tainted syzkaller #0 PREEMPT(full) [ 69.007745][ T6252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.007757][ T6252] Call Trace: [ 69.007764][ T6252] [ 69.007770][ T6252] dump_stack_lvl+0x100/0x190 [ 69.007796][ T6252] should_fail_ex.cold+0x5/0xa [ 69.007815][ T6252] should_failslab+0xc2/0x120 [ 69.007838][ T6252] __kmalloc_noprof+0xfc/0x820 [ 69.007857][ T6252] ? rcu_is_watching+0x12/0xc0 [ 69.007877][ T6252] ? tomoyo_realpath_from_path+0xb6/0x690 [ 69.007907][ T6252] tomoyo_realpath_from_path+0xb6/0x690 [ 69.007943][ T6252] tomoyo_path_number_perm+0x23c/0x580 [ 69.007964][ T6252] ? tomoyo_path_number_perm+0x22e/0x580 [ 69.007986][ T6252] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 69.008008][ T6252] ? get_pid_task+0x106/0x250 [ 69.008048][ T6252] ? find_held_lock+0x2b/0x80 [ 69.008067][ T6252] ? __fget_files+0x215/0x3d0 [ 69.008081][ T6252] ? hook_file_ioctl_common+0x140/0x440 [ 69.008093][ T6149] vivid-020: unregistering video87 [ 69.008103][ T6252] ? __fget_files+0x215/0x3d0 [ 69.008122][ T6252] ? __fget_files+0x21f/0x3d0 [ 69.008163][ T6252] security_file_ioctl_compat+0xd3/0x230 [ 69.008189][ T6252] __ia32_compat_sys_ioctl+0xc2/0x360 [ 69.008216][ T6252] __do_fast_syscall_32+0xe7/0x970 [ 69.008239][ T6252] ? lockdep_hardirqs_on+0x78/0x100 [ 69.008262][ T6252] do_fast_syscall_32+0x32/0x70 [ 69.008285][ T6252] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.008305][ T6252] RIP: 0023:0xf7fd5fec [ 69.008326][ T6252] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 69.008333][ T6252] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 69.008350][ T6252] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000403c5404 [ 69.008360][ T6252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.008369][ T6252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.008378][ T6252] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.008387][ T6252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.008407][ T6252] [ 69.008419][ T6252] ERROR: Out of memory at tomoyo_realpath_from_path. [ 69.015907][ T6149] vivid-020: unregistering video88 [ 69.107450][ T6149] vivid-020: unregistering vbi40 [ 69.115703][ T6149] vivid-020: unregistering vbi41 [ 69.137429][ T6149] vivid-020: unregistering swradio20 [ 69.142777][ T6149] vivid-020: unregistering radio40 [ 69.155313][ T6149] vivid-020: unregistering radio41 [ 69.163297][ T6149] vivid-020: unregistering video89 [ 69.176309][ T6149] vivid-020: unregistering video90 [ 69.181974][ T6149] vivid-020: unregistering v4l-touch20 [ 69.229482][ T6149] vivid-021: unregistering video91 [ 69.244605][ T6149] vivid-021: unregistering video92 [ 69.254888][ T6149] vivid-021: unregistering vbi42 [ 69.268064][ T6149] vivid-021: unregistering vbi43 [ 69.272392][ T6149] vivid-021: unregistering swradio21 [ 69.280514][ T6149] vivid-021: unregistering radio42 [ 69.283134][ T6149] vivid-021: unregistering radio43 [ 69.286040][ T6149] vivid-021: unregistering video93 [ 69.288606][ T6149] vivid-021: unregistering video94 [ 69.291767][ T6149] vivid-021: unregistering v4l-touch21 [ 69.341070][ T6149] vivid-022: unregistering video95 [ 69.347245][ T6149] vivid-022: unregistering video96 [ 69.352080][ T6149] vivid-022: unregistering vbi44 [ 69.359198][ T6149] vivid-022: unregistering vbi45 [ 69.363486][ T6149] vivid-022: unregistering swradio22 [ 69.367928][ T6149] vivid-022: unregistering radio44 [ 69.372774][ T6149] vivid-022: unregistering radio45 [ 69.380753][ T6149] vivid-022: unregistering video97 [ 69.385310][ T6149] vivid-022: unregistering video98 [ 69.388869][ T6149] vivid-022: unregistering v4l-touch22 [ 69.448276][ T6149] vivid-023: unregistering video99 [ 69.454810][ T6149] vivid-023: unregistering video100 [ 69.459372][ T6149] vivid-023: unregistering vbi46 [ 69.465068][ T6149] vivid-023: unregistering vbi47 [ 69.470597][ T6149] vivid-023: unregistering swradio23 [ 69.475491][ T6149] vivid-023: unregistering radio46 [ 69.481075][ T6149] vivid-023: unregistering radio47 [ 69.486272][ T6149] vivid-023: unregistering video101 [ 69.491928][ T6149] vivid-023: unregistering video102 [ 69.498373][ T6149] vivid-023: unregistering v4l-touch23 [ 69.994929][ T6264] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 70.139217][ T6274] overlayfs: upper fs does not support tmpfile. [ 70.253465][ T6281] FAULT_INJECTION: forcing a failure. [ 70.253465][ T6281] name failslab, interval 1, probability 0, space 0, times 0 [ 70.257362][ T6281] CPU: 1 UID: 0 PID: 6281 Comm: syz.1.86 Not tainted syzkaller #0 PREEMPT(full) [ 70.257377][ T6281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.257384][ T6281] Call Trace: [ 70.257389][ T6281] [ 70.257394][ T6281] dump_stack_lvl+0x100/0x190 [ 70.257425][ T6281] should_fail_ex.cold+0x5/0xa [ 70.257440][ T6281] should_failslab+0xc2/0x120 [ 70.257457][ T6281] __kmalloc_noprof+0xfc/0x820 [ 70.257470][ T6281] ? rcu_is_watching+0x12/0xc0 [ 70.257497][ T6281] ? tomoyo_realpath_from_path+0xb6/0x690 [ 70.257518][ T6281] tomoyo_realpath_from_path+0xb6/0x690 [ 70.257539][ T6281] tomoyo_path_number_perm+0x23c/0x580 [ 70.257553][ T6281] ? tomoyo_path_number_perm+0x22e/0x580 [ 70.257568][ T6281] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 70.257583][ T6281] ? get_pid_task+0x106/0x250 [ 70.257610][ T6281] ? find_held_lock+0x2b/0x80 [ 70.257623][ T6281] ? __fget_files+0x215/0x3d0 [ 70.257633][ T6281] ? hook_file_ioctl_common+0x140/0x440 [ 70.257648][ T6281] ? __fget_files+0x215/0x3d0 [ 70.257660][ T6281] ? __fget_files+0x21f/0x3d0 [ 70.257672][ T6281] security_file_ioctl_compat+0xd3/0x230 [ 70.257688][ T6281] __ia32_compat_sys_ioctl+0xc2/0x360 [ 70.257706][ T6281] __do_fast_syscall_32+0xe7/0x970 [ 70.257723][ T6281] ? lockdep_hardirqs_on+0x78/0x100 [ 70.257738][ T6281] do_fast_syscall_32+0x32/0x70 [ 70.257754][ T6281] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.257768][ T6281] RIP: 0023:0xf7fd5fec [ 70.257782][ T6281] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 70.257787][ T6281] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 70.257798][ T6281] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004048aec9 [ 70.257805][ T6281] RDX: 0000000080000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.257811][ T6281] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.257818][ T6281] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 70.257824][ T6281] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.257837][ T6281] [ 70.258002][ T6281] ERROR: Out of memory at tomoyo_realpath_from_path. [ 70.462900][ T42] audit: type=1326 audit(1785731850.054:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.1.87" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5fec code=0x0 [ 70.596803][ T6293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.89'. [ 70.955515][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.966130][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.982550][ T6312] netlink: 'syz.2.95': attribute type 16 has an invalid length. [ 71.985107][ T6312] netlink: 'syz.2.95': attribute type 3 has an invalid length. [ 71.987898][ T6312] netlink: 132 bytes leftover after parsing attributes in process `syz.2.95'. [ 71.994058][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.95'. [ 72.001944][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 72.042733][ T6312] veth3: entered allmulticast mode [ 72.132640][ T6319] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 72.238187][ T6312] 0x000000008a42-0x000000018a42 : "" [ 72.280483][ T6312] ftl_cs: FTL header not found. [ 72.574187][ T6333] Bluetooth: MGMT ver 1.23 [ 73.192169][ T5824] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 73.284490][ T6359] FAULT_INJECTION: forcing a failure. [ 73.284490][ T6359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.288971][ T6359] CPU: 3 UID: 0 PID: 6359 Comm: syz.3.104 Not tainted syzkaller #0 PREEMPT(full) [ 73.288986][ T6359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.288993][ T6359] Call Trace: [ 73.288998][ T6359] [ 73.289003][ T6359] dump_stack_lvl+0x100/0x190 [ 73.289020][ T6359] should_fail_ex.cold+0x5/0xa [ 73.289033][ T6359] _copy_from_iter+0x1f4/0x1690 [ 73.289054][ T6359] ? __pfx__copy_from_iter+0x10/0x10 [ 73.289073][ T6359] ? aa_sk_perm+0x309/0xaa0 [ 73.289091][ T6359] hci_sock_sendmsg+0x4a1/0x2620 [ 73.289110][ T6359] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 73.289126][ T6359] ? apparmor_socket_sendmsg+0x15b/0x270 [ 73.289141][ T6359] sock_write_iter+0x53a/0x5b0 [ 73.289153][ T6359] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 73.289168][ T6359] ? __pfx_sock_write_iter+0x10/0x10 [ 73.289183][ T6359] ? bpf_lsm_file_permission+0x9/0x10 [ 73.289194][ T6359] ? security_file_permission+0x76/0x210 [ 73.289211][ T6359] ? rw_verify_area+0xce/0x6d0 [ 73.289228][ T6359] vfs_write+0x6ac/0x1050 [ 73.289239][ T6359] ? __pfx_sock_write_iter+0x10/0x10 [ 73.289254][ T6359] ? __pfx_vfs_write+0x10/0x10 [ 73.289267][ T6359] ? find_held_lock+0x2b/0x80 [ 73.289298][ T6359] ksys_write+0x1f8/0x250 [ 73.289317][ T6359] ? __pfx_ksys_write+0x10/0x10 [ 73.289332][ T6359] ? ksys_write+0x1ac/0x250 [ 73.289345][ T6359] ? __pfx_ksys_write+0x10/0x10 [ 73.289358][ T6359] __do_fast_syscall_32+0xe7/0x970 [ 73.289374][ T6359] ? lockdep_hardirqs_on+0x78/0x100 [ 73.289390][ T6359] do_fast_syscall_32+0x32/0x70 [ 73.289412][ T6359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.289426][ T6359] RIP: 0023:0xf70befec [ 73.289440][ T6359] Code: Unable to access opcode bytes at 0xf70befc2. [ 73.289445][ T6359] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 73.289456][ T6359] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 73.289463][ T6359] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 73.289469][ T6359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.289475][ T6359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.289481][ T6359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.289493][ T6359] [ 73.381463][ T5824] usb 6-1: Using ep0 maxpacket: 32 [ 73.397398][ T5824] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 73.400335][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.404061][ T5824] usb 6-1: config 0 descriptor?? [ 73.411777][ T5824] as10x_usb: device has been detected [ 73.414659][ T5824] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 73.452918][ T5824] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 73.487095][ T6365] tipc: Started in network mode [ 73.488724][ T6365] tipc: Node identity aac7a875d5ff, cluster identity 4711 [ 73.493468][ T6365] tipc: Enabled bearer , priority 0 [ 73.497708][ T6365] syzkaller0: entered promiscuous mode [ 73.501163][ T6365] syzkaller0: entered allmulticast mode [ 73.508047][ T6365] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 73.511692][ T5824] as10x_usb: error during firmware upload part1 [ 73.522414][ T5824] Registered device nBox DVB-T Dongle [ 73.539473][ T6365] tipc: Resetting bearer [ 73.549060][ T6363] input: syz0 as /devices/virtual/input/input5 [ 73.550189][ T6364] tipc: Resetting bearer [ 73.601310][ T6364] tipc: Disabling bearer [ 73.617343][ T5824] usb 6-1: USB disconnect, device number 2 [ 73.794478][ T6373] input: syz0 as /devices/virtual/input/input7 [ 73.856345][ T6374] FAULT_INJECTION: forcing a failure. [ 73.856345][ T6374] name failslab, interval 1, probability 0, space 0, times 0 [ 73.865446][ T5824] Unregistered device nBox DVB-T Dongle [ 73.866914][ T6374] CPU: 3 UID: 0 PID: 6374 Comm: syz.3.109 Not tainted syzkaller #0 PREEMPT(full) [ 73.866939][ T6374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.866950][ T6374] Call Trace: [ 73.866957][ T6374] [ 73.866964][ T6374] dump_stack_lvl+0x100/0x190 [ 73.866989][ T6374] should_fail_ex.cold+0x5/0xa [ 73.867011][ T6374] should_failslab+0xc2/0x120 [ 73.867034][ T6374] __kmalloc_noprof+0xfc/0x820 [ 73.867056][ T6374] ? kobject_get_path+0xcf/0x2c0 [ 73.867090][ T6374] kobject_get_path+0xcf/0x2c0 [ 73.867120][ T6374] input_devices_seq_show+0x8d/0x1130 [ 73.867151][ T6374] ? __pfx_input_devices_seq_show+0x10/0x10 [ 73.867183][ T6374] ? seq_list_start+0x7a/0xc0 [ 73.867209][ T6374] seq_read_iter+0xbce/0x1270 [ 73.867246][ T6374] seq_read+0x344/0x4d0 [ 73.867271][ T6374] ? __pfx_seq_read+0x10/0x10 [ 73.867300][ T6374] ? lock_acquire+0x1b9/0x370 [ 73.867336][ T6374] ? __pfx_seq_read+0x10/0x10 [ 73.867361][ T6374] proc_reg_read+0x240/0x330 [ 73.867378][ T6374] ? __pfx_proc_reg_read+0x10/0x10 [ 73.867396][ T6374] vfs_read+0x1e4/0xb40 [ 73.867417][ T6374] ? __pfx_vfs_read+0x10/0x10 [ 73.867432][ T6374] ? find_held_lock+0x2b/0x80 [ 73.867453][ T6374] ? __fget_files+0x215/0x3d0 [ 73.867474][ T6374] ? __fget_files+0x21f/0x3d0 [ 73.867499][ T6374] ksys_read+0x12a/0x250 [ 73.867514][ T6374] ? __pfx_ksys_read+0x10/0x10 [ 73.867529][ T6374] ? ksys_write+0x1ac/0x250 [ 73.867545][ T6374] ? __pfx_ksys_write+0x10/0x10 [ 73.867565][ T6374] __do_fast_syscall_32+0xe7/0x970 [ 73.867588][ T6374] ? lockdep_hardirqs_on+0x78/0x100 [ 73.867613][ T6374] do_fast_syscall_32+0x32/0x70 [ 73.867638][ T6374] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.867661][ T6374] RIP: 0023:0xf70befec [ 73.867681][ T6374] Code: Unable to access opcode bytes at 0xf70befc2. [ 73.867688][ T6374] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 73.867705][ T6374] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 73.867716][ T6374] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.867726][ T6374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.867735][ T6374] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 73.867745][ T6374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.867768][ T6374] [ 73.869326][ T5824] as10x_usb: device has been disconnected [ 74.100540][ T5113] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.251205][ T5113] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.253962][ T5113] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 74.257094][ T5113] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.264456][ T5113] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 74.267922][ T5113] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 74.274571][ T5113] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.277454][ T5113] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.282464][ T5113] usb 5-1: Product: syz [ 74.284027][ T5113] usb 5-1: Manufacturer: syz [ 74.288729][ T5113] cdc_wdm 5-1:1.0: skipping garbage [ 74.290909][ T5113] cdc_wdm 5-1:1.0: skipping garbage [ 74.297336][ T5113] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 74.299268][ T5113] cdc_wdm 5-1:1.0: Unknown control protocol [ 74.409721][ T5824] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 74.580536][ T5824] usb 8-1: Using ep0 maxpacket: 32 [ 74.591493][ T5824] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 74.599203][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.610461][ T5824] usb 8-1: config 0 descriptor?? [ 74.770670][ T6371] input: syz0 as /devices/virtual/input/input6 [ 74.794871][ T5824] as10x_usb: device has been detected [ 74.805784][ T5824] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 74.857353][ T5824] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 74.909467][ T5824] as10x_usb: error during firmware upload part1 [ 74.920369][ T5824] Registered device nBox DVB-T Dongle [ 74.937056][ T5824] usb 8-1: USB disconnect, device number 3 [ 74.982592][ T1350] usb 5-1: USB disconnect, device number 2 [ 75.081526][ T5824] Unregistered device nBox DVB-T Dongle [ 75.082647][ T5824] as10x_usb: device has been disconnected [ 75.305863][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.112'. [ 75.369772][ T6386] comedi comedi3: unsupported base address 0x4f23 [ 75.377420][ T6386] 9p: Bad value for 'wfdno' [ 75.488403][ T6389] veth0_to_batadv: entered allmulticast mode [ 75.684238][ T6394] syzkaller0: entered promiscuous mode [ 75.686246][ T6394] syzkaller0: entered allmulticast mode [ 75.691385][ T6394] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 75.780488][ T6401] mmap: syz.2.118 (6401) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.909564][ T6404] FAULT_INJECTION: forcing a failure. [ 75.909564][ T6404] name failslab, interval 1, probability 0, space 0, times 0 [ 75.915176][ T6404] CPU: 1 UID: 0 PID: 6404 Comm: syz.0.115 Not tainted syzkaller #0 PREEMPT(full) [ 75.915200][ T6404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.915211][ T6404] Call Trace: [ 75.915226][ T6404] [ 75.915234][ T6404] dump_stack_lvl+0x100/0x190 [ 75.915322][ T6404] should_fail_ex.cold+0x5/0xa [ 75.915351][ T6404] should_failslab+0xc2/0x120 [ 75.915383][ T6404] __kmalloc_cache_noprof+0x91/0x6c0 [ 75.915403][ T6404] ? rcu_is_watching+0x12/0xc0 [ 75.915433][ T6404] ? vhost_task_create+0xee/0x370 [ 75.915461][ T6404] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 75.915489][ T6404] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 75.915518][ T6404] vhost_task_create+0xee/0x370 [ 75.915543][ T6404] ? __pfx_vhost_task_create+0x10/0x10 [ 75.915576][ T6404] ? __pfx_vhost_task_fn+0x10/0x10 [ 75.915602][ T6404] ? __pfx___mutex_lock+0x10/0x10 [ 75.915697][ T6404] kvm_mmu_post_init_vm+0x1b3/0x360 [ 75.915721][ T6404] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 75.915744][ T6404] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 75.915767][ T6404] kvm_vcpu_ioctl+0x730/0x1700 [ 75.915786][ T6404] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 75.915805][ T6404] ? tomoyo_path_number_perm+0x188/0x580 [ 75.915851][ T6404] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 75.915874][ T6404] ? get_pid_task+0x106/0x250 [ 75.915902][ T6404] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.915929][ T6404] ? do_vfs_ioctl+0x226/0x13e0 [ 75.915954][ T6404] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 75.915989][ T6404] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 75.916007][ T6404] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 75.916026][ T6404] ? __fget_files+0x21f/0x3d0 [ 75.916048][ T6404] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 75.916066][ T6404] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 75.916093][ T6404] __do_fast_syscall_32+0xe7/0x970 [ 75.916142][ T6404] ? lockdep_hardirqs_on+0x78/0x100 [ 75.916167][ T6404] do_fast_syscall_32+0x32/0x70 [ 75.916191][ T6404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.916212][ T6404] RIP: 0023:0xf7fd6fec [ 75.916233][ T6404] Code: Unable to access opcode bytes at 0xf7fd6fc2. [ 75.916251][ T6404] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 75.916267][ T6404] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 75.916278][ T6404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.916287][ T6404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.916296][ T6404] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 75.916305][ T6404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.916329][ T6404] [ 76.433429][ T6421] syzkaller0: entered promiscuous mode [ 76.435346][ T6421] syzkaller0: entered allmulticast mode [ 77.828925][ T6438] syzkaller0: entered promiscuous mode [ 77.831242][ T6438] syzkaller0: entered allmulticast mode [ 77.834293][ T6438] FAULT_INJECTION: forcing a failure. [ 77.834293][ T6438] name failslab, interval 1, probability 0, space 0, times 0 [ 77.838566][ T6438] CPU: 0 UID: 0 PID: 6438 Comm: syz.3.130 Not tainted syzkaller #0 PREEMPT(full) [ 77.838581][ T6438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.838588][ T6438] Call Trace: [ 77.838593][ T6438] [ 77.838598][ T6438] dump_stack_lvl+0x100/0x190 [ 77.838616][ T6438] should_fail_ex.cold+0x5/0xa [ 77.838628][ T6438] should_failslab+0xc2/0x120 [ 77.838644][ T6438] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 77.838660][ T6438] ? __alloc_skb+0x5b7/0x710 [ 77.838718][ T6438] ? __alloc_skb+0x140/0x710 [ 77.838735][ T6438] __alloc_skb+0x140/0x710 [ 77.838749][ T6438] ? __alloc_skb+0x5b7/0x710 [ 77.838763][ T6438] ? __pfx___alloc_skb+0x10/0x10 [ 77.838778][ T6438] ? up_write+0x2e5/0x5c0 [ 77.838793][ T6438] alloc_skb_with_frags+0xdd/0x760 [ 77.838814][ T6438] sock_alloc_send_pskb+0x801/0x980 [ 77.838829][ T6438] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 77.838856][ T6438] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 77.838870][ T6438] ? find_held_lock+0x2b/0x80 [ 77.838883][ T6438] ? dev_get_by_index+0x180/0x380 [ 77.838898][ T6438] ? dev_get_by_index+0x180/0x380 [ 77.838917][ T6438] packet_sendmsg+0x1eda/0x5100 [ 77.838949][ T6438] ? __pfx___might_resched+0x10/0x10 [ 77.838971][ T6438] ? aa_sk_perm+0x309/0xaa0 [ 77.838994][ T6438] ? __pfx_aa_sk_perm+0x10/0x10 [ 77.839008][ T6438] ? __pfx_packet_sendmsg+0x10/0x10 [ 77.839027][ T6438] ? apparmor_socket_sendmsg+0x15b/0x270 [ 77.839042][ T6438] ____sys_sendmsg+0xa4d/0xbe0 [ 77.839054][ T6438] ? __pfx_packet_sendmsg+0x10/0x10 [ 77.839069][ T6438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.839087][ T6438] ___sys_sendmsg+0x190/0x1e0 [ 77.839100][ T6438] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.839118][ T6438] ? find_held_lock+0x2b/0x80 [ 77.839140][ T6438] __sys_sendmsg+0x160/0x210 [ 77.839156][ T6438] ? __pfx___sys_sendmsg+0x10/0x10 [ 77.839175][ T6438] ? __pfx_ksys_write+0x10/0x10 [ 77.839188][ T6438] __do_fast_syscall_32+0xe7/0x970 [ 77.839205][ T6438] ? lockdep_hardirqs_on+0x78/0x100 [ 77.839220][ T6438] do_fast_syscall_32+0x32/0x70 [ 77.839237][ T6438] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.839251][ T6438] RIP: 0023:0xf70befec [ 77.839265][ T6438] Code: Unable to access opcode bytes at 0xf70befc2. [ 77.839270][ T6438] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 77.839281][ T6438] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440 [ 77.839289][ T6438] RDX: 0000000000008804 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.839298][ T6438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.839307][ T6438] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.839315][ T6438] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.839335][ T6438] [ 78.554534][ T6461] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 78.558793][ T6455] IPVS: stopping backup sync thread 6461 ... [ 80.029778][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 80.036411][ T6481] tipc: Cannot configure node identity twice [ 80.159775][ T5829] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 80.191362][ T9] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 80.194029][ T9] usb 6-1: config 0 has no interface number 0 [ 80.195959][ T9] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 80.200046][ T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 80.203488][ T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 80.210271][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 80.213146][ T9] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 80.215658][ T9] usb 6-1: Product: syz [ 80.216987][ T9] usb 6-1: SerialNumber: syz [ 80.220363][ T9] usb 6-1: config 0 descriptor?? [ 80.224787][ T9] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 80.228556][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input8 [ 80.311345][ T5829] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 80.314721][ T5829] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 80.317651][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.328230][ T6483] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 80.332297][ T5829] opticon 7-1:1.0: opticon converter detected [ 80.348172][ T5829] usb 7-1: opticon converter now attached to ttyUSB0 [ 80.430092][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 80.727785][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 80.728797][ T5113] usb 6-1: USB disconnect, device number 3 [ 80.730433][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 80.748551][ T5113] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 80.828994][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 80.862790][ T6497] fuse: Unknown parameter '0000000000000000000000000000000000000000008ÿÿÿÿ00000000000000000000' [ 81.201968][ T60] cfg80211: failed to load regulatory.db [ 81.269534][ T6506] comedi comedi3: unsupported base address 0x4f23 [ 81.408231][ T6515] FAULT_INJECTION: forcing a failure. [ 81.408231][ T6515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.412306][ T6515] CPU: 2 UID: 0 PID: 6515 Comm: syz.1.150 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.412323][ T6515] Tainted: [L]=SOFTLOCKUP [ 81.412327][ T6515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.412333][ T6515] Call Trace: [ 81.412337][ T6515] [ 81.412341][ T6515] dump_stack_lvl+0x100/0x190 [ 81.412359][ T6515] should_fail_ex.cold+0x5/0xa [ 81.412372][ T6515] _copy_from_iter+0x1f4/0x1690 [ 81.412404][ T6515] ? __asan_memset+0x23/0x50 [ 81.412417][ T6515] ? __pfx__copy_from_iter+0x10/0x10 [ 81.412434][ T6515] ? __pfx___alloc_skb+0x10/0x10 [ 81.412456][ T6515] netlink_sendmsg+0x808/0xda0 [ 81.412473][ T6515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.412488][ T6515] ? apparmor_socket_sendmsg+0x15b/0x270 [ 81.412503][ T6515] ____sys_sendmsg+0xa4d/0xbe0 [ 81.412515][ T6515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.412542][ T6515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.412560][ T6515] ___sys_sendmsg+0x190/0x1e0 [ 81.412574][ T6515] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.412592][ T6515] ? find_held_lock+0x2b/0x80 [ 81.412615][ T6515] __sys_sendmsg+0x160/0x210 [ 81.412631][ T6515] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.412651][ T6515] ? __pfx_ksys_write+0x10/0x10 [ 81.412664][ T6515] __do_fast_syscall_32+0xe7/0x970 [ 81.412681][ T6515] ? lockdep_hardirqs_on+0x78/0x100 [ 81.412697][ T6515] do_fast_syscall_32+0x32/0x70 [ 81.412713][ T6515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.412727][ T6515] RIP: 0023:0xf7fd5fec [ 81.412740][ T6515] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 81.412745][ T6515] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 81.412756][ T6515] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800003c0 [ 81.412762][ T6515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.412768][ T6515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.412778][ T6515] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 81.412784][ T6515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.412798][ T6515] [ 81.795827][ T6529] syzkaller1: entered promiscuous mode [ 81.803665][ T6529] syzkaller1: entered allmulticast mode [ 81.917866][ T6531] pim6reg: entered allmulticast mode [ 82.601161][ T6551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 83.128494][ T5113] usb 7-1: USB disconnect, device number 7 [ 83.139097][ T5113] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 83.145873][ T5113] opticon 7-1:1.0: device disconnected [ 84.024733][ T6585] FAULT_INJECTION: forcing a failure. [ 84.024733][ T6585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.028997][ T6585] CPU: 2 UID: 0 PID: 6585 Comm: syz.2.168 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.029014][ T6585] Tainted: [L]=SOFTLOCKUP [ 84.029018][ T6585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.029024][ T6585] Call Trace: [ 84.029028][ T6585] [ 84.029033][ T6585] dump_stack_lvl+0x100/0x190 [ 84.029051][ T6585] should_fail_ex.cold+0x5/0xa [ 84.029064][ T6585] _copy_from_user+0x2e/0xd0 [ 84.029083][ T6585] do_bnep_sock_ioctl.isra.0+0x2ed/0x5b0 [ 84.029118][ T6585] ? __pfx_do_bnep_sock_ioctl.isra.0+0x10/0x10 [ 84.029137][ T6585] ? get_pid_task+0x106/0x250 [ 84.029156][ T6585] ? __pfx_bnep_sock_compat_ioctl+0x10/0x10 [ 84.029169][ T6585] bnep_sock_compat_ioctl+0x87/0x1d0 [ 84.029182][ T6585] ? __pfx_bnep_sock_compat_ioctl+0x10/0x10 [ 84.029196][ T6585] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 84.029226][ T6585] ? __pfx_bnep_sock_compat_ioctl+0x10/0x10 [ 84.029241][ T6585] compat_sock_ioctl+0x179/0x760 [ 84.029258][ T6585] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 84.029271][ T6585] ? hook_file_ioctl_common+0x140/0x440 [ 84.029290][ T6585] ? __fget_files+0x21f/0x3d0 [ 84.029303][ T6585] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 84.029317][ T6585] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 84.029335][ T6585] __do_fast_syscall_32+0xe7/0x970 [ 84.029351][ T6585] ? lockdep_hardirqs_on+0x78/0x100 [ 84.029367][ T6585] do_fast_syscall_32+0x32/0x70 [ 84.029383][ T6585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.029397][ T6585] RIP: 0023:0xf7f92fec [ 84.029411][ T6585] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 84.029416][ T6585] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 84.029428][ T6585] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000400442c8 [ 84.029434][ T6585] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.029440][ T6585] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.029446][ T6585] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 84.029452][ T6585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.029466][ T6585] [ 84.308220][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'. [ 84.315539][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'. [ 84.386171][ T6598] syzkaller0: entered promiscuous mode [ 84.387962][ T6598] syzkaller0: entered allmulticast mode [ 84.418338][ T60] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 84.558888][ T6607] syzkaller0: entered promiscuous mode [ 84.561644][ T6607] syzkaller0: entered allmulticast mode [ 84.582485][ T60] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.586263][ T60] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 84.590365][ T60] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.594229][ T60] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 84.598499][ T60] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 84.601887][ T6608] FAULT_INJECTION: forcing a failure. [ 84.601887][ T6608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.604189][ T60] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.607274][ T6608] CPU: 2 UID: 0 PID: 6608 Comm: syz.3.176 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.607298][ T6608] Tainted: [L]=SOFTLOCKUP [ 84.607308][ T6608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.607317][ T6608] Call Trace: [ 84.607323][ T6608] [ 84.607330][ T6608] dump_stack_lvl+0x100/0x190 [ 84.607357][ T6608] should_fail_ex.cold+0x5/0xa [ 84.607379][ T6608] _copy_from_user+0x2e/0xd0 [ 84.607405][ T6608] ppp_write+0x1a0/0x400 [ 84.607461][ T6608] vfs_write+0x2aa/0x1050 [ 84.607483][ T6608] ? __pfx_ppp_write+0x10/0x10 [ 84.607504][ T6608] ? __pfx_vfs_write+0x10/0x10 [ 84.607530][ T6608] ? find_held_lock+0x2b/0x80 [ 84.607551][ T6608] ? __fget_files+0x215/0x3d0 [ 84.607566][ T6608] ? __fget_files+0x215/0x3d0 [ 84.607584][ T6608] ? __fget_files+0x21f/0x3d0 [ 84.607604][ T6608] ksys_write+0x12a/0x250 [ 84.607619][ T6608] ? __pfx_ksys_write+0x10/0x10 [ 84.607633][ T6608] ? ksys_write+0x1ac/0x250 [ 84.607650][ T6608] ? __pfx_ksys_write+0x10/0x10 [ 84.607672][ T6608] __do_fast_syscall_32+0xe7/0x970 [ 84.607694][ T6608] ? lockdep_hardirqs_on+0x78/0x100 [ 84.607716][ T6608] do_fast_syscall_32+0x32/0x70 [ 84.607743][ T6608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.607766][ T6608] RIP: 0023:0xf70befec [ 84.607787][ T6608] Code: Unable to access opcode bytes at 0xf70befc2. [ 84.607794][ T6608] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 84.607822][ T6608] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 84.607833][ T6608] RDX: 000000000000038e RSI: 0000000000000000 RDI: 0000000000000000 [ 84.607842][ T6608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.607850][ T6608] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 84.607859][ T6608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.607879][ T6608] [ 84.680372][ T60] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.683678][ T60] usb 7-1: Product: syz [ 84.685503][ T60] usb 7-1: Manufacturer: syz [ 84.698011][ T60] cdc_wdm 7-1:1.0: skipping garbage [ 84.701298][ T60] cdc_wdm 7-1:1.0: skipping garbage [ 84.709480][ T60] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 84.714344][ T60] cdc_wdm 7-1:1.0: Unknown control protocol [ 85.365486][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.375606][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.578901][ T6628] FAULT_INJECTION: forcing a failure. [ 85.578901][ T6628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.587536][ T6628] CPU: 3 UID: 0 PID: 6628 Comm: syz.3.182 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.587555][ T6628] Tainted: [L]=SOFTLOCKUP [ 85.587559][ T6628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.587565][ T6628] Call Trace: [ 85.587570][ T6628] [ 85.587574][ T6628] dump_stack_lvl+0x100/0x190 [ 85.587592][ T6628] should_fail_ex.cold+0x5/0xa [ 85.587605][ T6628] _copy_to_user+0x32/0xd0 [ 85.587624][ T6628] simple_read_from_buffer+0xcb/0x170 [ 85.587660][ T6628] proc_fail_nth_read+0x1af/0x230 [ 85.587682][ T6628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.587698][ T6628] ? rw_verify_area+0xce/0x6d0 [ 85.587715][ T6628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.587730][ T6628] vfs_read+0x1e4/0xb40 [ 85.587753][ T6628] ? __pfx_vfs_read+0x10/0x10 [ 85.587764][ T6628] ? find_held_lock+0x2b/0x80 [ 85.587779][ T6628] ? __fget_files+0x215/0x3d0 [ 85.587792][ T6628] ? __fget_files+0x21f/0x3d0 [ 85.587806][ T6628] ksys_read+0x12a/0x250 [ 85.587816][ T6628] ? __pfx_ksys_read+0x10/0x10 [ 85.587830][ T6628] do_int80_emulation+0x14b/0x720 [ 85.587859][ T6628] asm_int80_emulation+0x1a/0x20 [ 85.587872][ T6628] RIP: 0023:0xf71f73eb [ 85.587882][ T6628] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 85.587892][ T6628] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 85.587904][ T6628] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ad5d0 [ 85.587911][ T6628] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 85.587917][ T6628] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.587923][ T6628] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.587929][ T6628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.587942][ T6628] [ 85.986721][ T6634] process 'syz.3.183' launched './file2' with NULL argv: empty string added [ 86.136387][ T6645] syzkaller0: entered promiscuous mode [ 86.138286][ T6645] syzkaller0: entered allmulticast mode [ 86.143391][ T6645] TC_ACT_REPEAT abuse ? [ 86.457684][ T6649] FAULT_INJECTION: forcing a failure. [ 86.457684][ T6649] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 86.462807][ T6649] CPU: 0 UID: 0 PID: 6649 Comm: syz.3.186 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.462825][ T6649] Tainted: [L]=SOFTLOCKUP [ 86.462829][ T6649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.462835][ T6649] Call Trace: [ 86.462839][ T6649] [ 86.462844][ T6649] dump_stack_lvl+0x100/0x190 [ 86.462861][ T6649] should_fail_ex.cold+0x5/0xa [ 86.462872][ T6649] ? prepare_alloc_pages+0x16d/0x5f0 [ 86.462895][ T6649] should_fail_alloc_page+0xeb/0x140 [ 86.462912][ T6649] prepare_alloc_pages+0x1f0/0x5f0 [ 86.462931][ T6649] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 86.462945][ T6649] ? __pfx_stack_trace_save+0x10/0x10 [ 86.462961][ T6649] ? stack_depot_save_flags+0x27/0x9d0 [ 86.462983][ T6649] ? kasan_save_stack+0x3f/0x50 [ 86.462996][ T6649] ? kasan_save_stack+0x30/0x50 [ 86.463009][ T6649] ? kasan_save_track+0x14/0x30 [ 86.463022][ T6649] ? __kasan_slab_alloc+0x89/0x90 [ 86.463036][ T6649] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 86.463049][ T6649] ? ptlock_alloc+0x1f/0x70 [ 86.463059][ T6649] ? pte_alloc_one+0x82/0x3d0 [ 86.463090][ T6649] ? __pte_alloc+0x6d/0x3e0 [ 86.463104][ T6649] ? walk_pgd_range+0xb99/0x1dd0 [ 86.463116][ T6649] ? __walk_page_range+0x171/0x850 [ 86.463129][ T6649] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 86.463142][ T6649] ? madvise_walk_vmas+0x2fe/0xa90 [ 86.463158][ T6649] ? do_madvise+0x238/0x290 [ 86.463174][ T6649] ? __do_fast_syscall_32+0xe7/0x970 [ 86.463191][ T6649] ? do_fast_syscall_32+0x32/0x70 [ 86.463206][ T6649] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.463223][ T6649] ? look_up_lock_class+0x55/0x120 [ 86.463243][ T6649] ? __lock_acquire+0x49f/0x1a40 [ 86.463261][ T6649] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.463278][ T6649] ? policy_nodemask+0xed/0x4f0 [ 86.463295][ T6649] alloc_pages_mpol+0x1fb/0x540 [ 86.463312][ T6649] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 86.463327][ T6649] ? do_raw_spin_lock+0x128/0x260 [ 86.463340][ T6649] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.463354][ T6649] alloc_pages_noprof+0x1a/0x160 [ 86.463365][ T6649] pte_alloc_one+0x1c/0x3d0 [ 86.463383][ T6649] __pte_alloc+0x6d/0x3e0 [ 86.463397][ T6649] ? __pfx___pte_alloc+0x10/0x10 [ 86.463415][ T6649] walk_pgd_range+0xb99/0x1dd0 [ 86.463430][ T6649] ? __pfx_guard_install_set_pte+0x10/0x10 [ 86.463446][ T6649] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 86.463463][ T6649] ? __pfx_guard_install_set_pte+0x10/0x10 [ 86.463481][ T6649] ? __pfx_guard_install_set_pte+0x10/0x10 [ 86.463497][ T6649] ? __pfx_guard_install_set_pte+0x10/0x10 [ 86.463513][ T6649] ? __pfx_walk_pgd_range+0x10/0x10 [ 86.463534][ T6649] __walk_page_range+0x171/0x850 [ 86.463553][ T6649] ? find_vma+0xbf/0x140 [ 86.463571][ T6649] ? __pfx_find_vma+0x10/0x10 [ 86.463591][ T6649] ? walk_page_test+0x78/0x180 [ 86.463609][ T6649] walk_page_range_mm_unsafe+0x563/0xa10 [ 86.463631][ T6649] ? __pfx_walk_page_range_mm_unsafe+0x10/0x10 [ 86.463660][ T6649] madvise_guard_install+0x2dd/0x790 [ 86.463681][ T6649] ? __pfx_madvise_guard_install+0x10/0x10 [ 86.463699][ T6649] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 86.463714][ T6649] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 86.463730][ T6649] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 86.463748][ T6649] ? __pfx_guard_install_set_pte+0x10/0x10 [ 86.463764][ T6649] ? find_held_lock+0x2b/0x80 [ 86.463777][ T6649] ? mt_find+0x687/0x8e0 [ 86.463796][ T6649] madvise_vma_behavior+0xb9b/0x2240 [ 86.463815][ T6649] ? mt_find+0x45e/0x8e0 [ 86.463832][ T6649] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 86.463850][ T6649] ? __pfx_mt_find+0x10/0x10 [ 86.463871][ T6649] ? find_vma_prev+0xd8/0x150 [ 86.463886][ T6649] ? lock_vma_under_rcu+0x1f9/0x590 [ 86.463907][ T6649] ? find_vma+0xbf/0x140 [ 86.463921][ T6649] ? __pfx_find_vma+0x10/0x10 [ 86.463935][ T6649] ? madvise_do_behavior+0x1ea/0x510 [ 86.463953][ T6649] ? madvise_do_behavior+0x1ea/0x510 [ 86.463973][ T6649] madvise_walk_vmas+0x2fe/0xa90 [ 86.464009][ T6649] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 86.464032][ T6649] madvise_do_behavior+0x1ea/0x510 [ 86.464052][ T6649] ? __pfx_madvise_do_behavior+0x10/0x10 [ 86.464091][ T6649] ? get_pid_task+0x106/0x250 [ 86.464111][ T6649] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.464130][ T6649] do_madvise+0x238/0x290 [ 86.464148][ T6649] ? __pfx_do_madvise+0x10/0x10 [ 86.464185][ T6649] ? fput+0x79/0x100 [ 86.464206][ T6649] ? ksys_write+0x1ac/0x250 [ 86.464226][ T6649] __ia32_sys_madvise+0xa7/0x110 [ 86.464245][ T6649] ? lockdep_hardirqs_on+0x78/0x100 [ 86.464260][ T6649] __do_fast_syscall_32+0xe7/0x970 [ 86.464276][ T6649] ? lockdep_hardirqs_on+0x78/0x100 [ 86.464293][ T6649] do_fast_syscall_32+0x32/0x70 [ 86.464309][ T6649] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.464324][ T6649] RIP: 0023:0xf70befec [ 86.464339][ T6649] Code: Unable to access opcode bytes at 0xf70befc2. [ 86.464344][ T6649] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 86.464355][ T6649] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600003 [ 86.464363][ T6649] RDX: 0000000000000066 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.464370][ T6649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.464376][ T6649] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 86.464383][ T6649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.464400][ T6649] [ 86.799200][ T42] audit: type=1326 audit(1785731866.384:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.0.190" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd6fec code=0x0 [ 87.216305][ T60] usb 7-1: USB disconnect, device number 8 [ 87.485191][ T6674] netlink: 52 bytes leftover after parsing attributes in process `syz.2.194'. [ 88.618025][ T6706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.726120][ T6687] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.736651][ T6687] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.772241][ T6687] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.812291][ T6687] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.815187][ T6687] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.827923][ T6687] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.832229][ T6687] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.834201][ T6687] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.838332][ T6687] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.842009][ T6687] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.843996][ T6687] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.898934][ T6687] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.065751][ T5101] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 89.071002][ T5101] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 89.152308][ T6735] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 89.219757][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 89.333005][ T6757] netlink: 'syz.2.215': attribute type 1 has an invalid length. [ 89.365532][ T6757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.390029][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 89.397004][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 89.402089][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 89.406384][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.406788][ T6757] macvlan2: entered promiscuous mode [ 89.410722][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.410764][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.410788][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.458217][ T6757] macvlan2: entered allmulticast mode [ 89.472824][ T42] audit: type=1804 audit(1785731869.054:5): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.216" name="/newroot/53/file0/file0" dev="9p" ino=78395549 res=1 errno=0 [ 89.515793][ T6762] bond1: (slave ip6gretap1): making interface the new active one [ 89.528675][ T6762] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 89.540839][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 89.620207][ T29] usb 8-1: GET_CAPABILITIES returned 0 [ 89.628688][ T29] usbtmc 8-1:16.0: can't read capabilities [ 89.792323][ T42] audit: type=1800 audit(1785731869.374:6): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.218" name="use" dev="configfs" ino=15461 res=0 errno=0 [ 89.882454][ T6716] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.890718][ T6716] block device autoloading is deprecated and will be removed. [ 89.904551][ T6716] netlink: 'syz.3.204': attribute type 1 has an invalid length. [ 89.944936][ T6716] bond1: (slave geneve2): making interface the new active one [ 89.949620][ T6716] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 89.970584][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.975972][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.979174][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.982064][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.986305][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.011722][ T5829] usb 8-1: USB disconnect, device number 4 [ 90.394658][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'. [ 90.651407][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 90.860929][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.860959][ T5757] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.129910][ T6299] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 91.260784][ T6826] netlink: 40 bytes leftover after parsing attributes in process `syz.0.226'. [ 91.290237][ T6299] usb 7-1: Using ep0 maxpacket: 8 [ 91.299463][ T6299] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.308872][ T6299] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 91.314912][ T6299] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 91.322825][ T6299] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 91.326495][ T6299] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 91.330303][ T6299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.342910][ T6299] hub 7-1:1.0: bad descriptor, ignoring hub [ 91.345419][ T6299] hub 7-1:1.0: probe with driver hub failed with error -5 [ 91.348428][ T6299] cdc_wdm 7-1:1.0: skipping garbage [ 91.351140][ T6299] cdc_wdm 7-1:1.0: skipping garbage [ 91.357161][ T6299] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 91.359970][ T6299] cdc_wdm 7-1:1.0: Unknown control protocol [ 91.579802][ T5757] Bluetooth: hci4: command 0x1003 tx timeout [ 91.587047][ T5101] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 92.059741][ T5101] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.179863][ T5113] usb 7-1: USB disconnect, device number 9 [ 92.241175][ T6832] netlink: 'syz.0.229': attribute type 11 has an invalid length. [ 92.452003][ T6832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.815833][ T6846] netlink: 'syz.2.232': attribute type 11 has an invalid length. [ 92.939732][ T5101] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.949714][ T5101] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.813845][ T6861] syz.0.235 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.017292][ T6869] netlink: 'syz.2.236': attribute type 11 has an invalid length. [ 94.119814][ T5829] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 94.140626][ T5101] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.269872][ T5829] usb 8-1: device descriptor read/64, error -71 [ 94.340343][ T6872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.539704][ T5829] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 94.691838][ T5829] usb 8-1: device descriptor read/64, error -71 [ 94.800056][ T5829] usb usb8-port1: attempt power cycle [ 95.019887][ T5757] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.022025][ T5101] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.159881][ T5829] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 95.200549][ T5829] usb 8-1: device descriptor read/8, error -71 [ 95.449708][ T5829] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 95.992734][ T5829] usb 8-1: device descriptor read/8, error -71 [ 96.331346][ T5829] usb usb8-port1: unable to enumerate USB device [ 96.603736][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.247'. [ 96.626505][ T6911] vhci_hcd vhci_hcd.0: remove, state 4 [ 96.628806][ T6911] usb usb38: USB disconnect, device number 1 [ 96.931727][ T5101] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 97.293182][ T12] vhci_hcd vhci_hcd.0: stop threads [ 97.295702][ T12] vhci_hcd vhci_hcd.0: release socket [ 97.299595][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 97.308852][ T6911] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 97.316126][ T12] vhci_hcd vhci_hcd.0: stop threads [ 97.323733][ T12] vhci_hcd vhci_hcd.0: release socket [ 97.325570][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 97.335963][ T12] vhci_hcd vhci_hcd.0: stop threads [ 97.345178][ T12] vhci_hcd vhci_hcd.0: release socket [ 97.347576][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 97.350656][ T12] vhci_hcd vhci_hcd.0: stop threads [ 97.353047][ T12] vhci_hcd vhci_hcd.0: release socket [ 97.355494][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 97.357892][ T12] vhci_hcd vhci_hcd.0: stop threads [ 97.361221][ T12] vhci_hcd vhci_hcd.0: release socket [ 97.363483][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 97.377450][ T12] vhci_hcd vhci_hcd.0: stop threads [ 97.382619][ T6911] vhci_hcd vhci_hcd.0: remove, state 4 [ 97.389247][ T12] ================================================================== [ 97.392231][ T12] BUG: KASAN: slab-use-after-free in vhci_shutdown_connection.cold+0x2f1/0x37c [ 97.395831][ T12] Read of size 8 at addr ffff8880252bd0c0 by task kworker/u32:0/12 [ 97.400063][ T12] [ 97.401414][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.401440][ T12] Tainted: [L]=SOFTLOCKUP [ 97.401446][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.401459][ T12] Workqueue: usbip_event event_handler [ 97.401512][ T12] Call Trace: [ 97.401519][ T12] [ 97.401526][ T12] dump_stack_lvl+0x100/0x190 [ 97.401548][ T12] print_report+0x13d/0x4b0 [ 97.401573][ T12] ? __virt_addr_valid+0x239/0x430 [ 97.401592][ T12] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 97.401616][ T12] kasan_report+0xdf/0x1c0 [ 97.401640][ T12] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 97.401667][ T12] vhci_shutdown_connection.cold+0x2f1/0x37c [ 97.401692][ T12] event_handler+0x216/0x570 [ 97.401712][ T12] process_one_work+0xa23/0x1940 [ 97.401741][ T12] ? __pfx_process_one_work+0x10/0x10 [ 97.401769][ T12] ? __pfx_event_handler+0x10/0x10 [ 97.401789][ T12] worker_thread+0x5ef/0xe50 [ 97.401817][ T12] ? kthread+0x13a/0x450 [ 97.401839][ T12] ? __pfx_worker_thread+0x10/0x10 [ 97.401861][ T12] kthread+0x370/0x450 [ 97.401882][ T12] ? __pfx_kthread+0x10/0x10 [ 97.401904][ T12] ret_from_fork+0x72b/0xd50 [ 97.401926][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 97.401948][ T12] ? __switch_to+0x800/0x10f0 [ 97.401974][ T12] ? __pfx_kthread+0x10/0x10 [ 97.401997][ T12] ret_from_fork_asm+0x1a/0x30 [ 97.402024][ T12] [ 97.402030][ T12] [ 97.461155][ T12] Allocated by task 1: [ 97.462437][ T12] kasan_save_stack+0x30/0x50 [ 97.463912][ T12] kasan_save_track+0x14/0x30 [ 97.465469][ T12] __kasan_kmalloc+0xaa/0xb0 [ 97.467071][ T12] __kmalloc_noprof+0x322/0x820 [ 97.468574][ T12] __usb_create_hcd+0x5e/0xac0 [ 97.470094][ T12] vhci_hcd_probe+0x1a5/0x4e0 [ 97.471542][ T12] platform_probe+0x106/0x1d0 [ 97.472999][ T12] really_probe+0x241/0xa60 [ 97.474435][ T12] __driver_probe_device+0x20e/0x450 [ 97.476111][ T12] driver_probe_device+0x4a/0x140 [ 97.477972][ T12] __device_attach_driver+0x1df/0x320 [ 97.480032][ T12] bus_for_each_drv+0x159/0x1e0 [ 97.481798][ T12] __device_attach+0x1e4/0x4d0 [ 97.483561][ T12] device_initial_probe+0xaf/0xd0 [ 97.485436][ T12] bus_probe_device+0x64/0x160 [ 97.487168][ T12] device_add+0x121d/0x1970 [ 97.488628][ T12] platform_device_add+0x35a/0x800 [ 97.490179][ T12] platform_device_register_full+0x5cf/0x830 [ 97.491998][ T12] vhci_hcd_init+0x1a1/0x2f0 [ 97.493508][ T12] do_one_initcall+0x11d/0x700 [ 97.495009][ T12] kernel_init_freeable+0x6ea/0x7b0 [ 97.496654][ T12] kernel_init+0x1f/0x1e0 [ 97.497957][ T12] ret_from_fork+0x72b/0xd50 [ 97.499359][ T12] ret_from_fork_asm+0x1a/0x30 [ 97.500778][ T12] [ 97.501514][ T12] Freed by task 6911: [ 97.502753][ T12] kasan_save_stack+0x30/0x50 [ 97.504141][ T12] kasan_save_track+0x14/0x30 [ 97.505624][ T12] kasan_save_free_info+0x3b/0x70 [ 97.507330][ T12] __kasan_slab_free+0x5f/0x80 [ 97.508835][ T12] kfree+0x22b/0x6c0 [ 97.510243][ T12] usb_put_hcd+0x149/0x1f0 [ 97.511809][ T12] vhci_hcd_remove+0xb5/0x1b0 [ 97.513301][ T12] platform_remove+0x5f/0x80 [ 97.514693][ T12] device_remove+0xcb/0x180 [ 97.516148][ T12] device_release_driver_internal+0x44e/0x620 [ 97.518364][ T12] unbind_store+0xf8/0x110 [ 97.519991][ T12] drv_attr_store+0x74/0xb0 [ 97.521664][ T12] sysfs_kf_write+0xf2/0x150 [ 97.523338][ T12] kernfs_fop_write_iter+0x3e0/0x5f0 [ 97.525146][ T12] vfs_write+0x6ac/0x1050 [ 97.526742][ T12] ksys_write+0x12a/0x250 [ 97.528331][ T12] __do_fast_syscall_32+0xe7/0x970 [ 97.529786][ T6911] usb usb37: USB disconnect, device number 1 [ 97.530124][ T12] do_fast_syscall_32+0x32/0x70 [ 97.533926][ T12] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.536120][ T12] [ 97.536907][ T12] Last potentially related work creation: [ 97.538592][ T12] kasan_save_stack+0x30/0x50 [ 97.540255][ T12] kasan_record_aux_stack+0xa7/0xc0 [ 97.542120][ T12] insert_work+0x36/0x230 [ 97.543660][ T12] __queue_work+0x9bc/0x12b0 [ 97.543951][ T6911] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 97.545347][ T12] queue_work_on+0x1a9/0x1e0 [ 97.549225][ T12] usb_hcd_giveback_urb+0x330/0x4a0 [ 97.551075][ T12] unlink1+0x418/0x510 [ 97.552557][ T12] usb_hcd_unlink_urb+0x131/0x210 [ 97.554311][ T12] usb_kill_urb+0x121/0x320 [ 97.555880][ T12] hub_quiesce+0x1e9/0x320 [ 97.557412][ T12] hub_suspend+0x4ab/0x9e0 [ 97.559051][ T12] usb_suspend_both+0x288/0x950 [ 97.560663][ T12] usb_runtime_suspend+0x49/0x120 [ 97.562231][ T12] __rpm_callback+0xc8/0x620 [ 97.563709][ T12] rpm_callback+0x16a/0x1b0 [ 97.565140][ T12] rpm_suspend+0x2f4/0x11a0 [ 97.566539][ T12] __pm_runtime_suspend+0xba/0x1a0 [ 97.568136][ T12] usb_runtime_idle+0x7e/0x90 [ 97.569794][ T12] rpm_idle+0x322/0x790 [ 97.571120][ T12] pm_runtime_work+0x120/0x150 [ 97.572820][ T12] process_one_work+0xa23/0x1940 [ 97.574509][ T12] worker_thread+0x5ef/0xe50 [ 97.576220][ T12] kthread+0x370/0x450 [ 97.577600][ T12] ret_from_fork+0x72b/0xd50 [ 97.579216][ T12] ret_from_fork_asm+0x1a/0x30 [ 97.580885][ T12] [ 97.581765][ T12] Second to last potentially related work creation: [ 97.583850][ T12] kasan_save_stack+0x30/0x50 [ 97.585409][ T12] kasan_record_aux_stack+0xa7/0xc0 [ 97.587033][ T12] insert_work+0x36/0x230 [ 97.588471][ T12] __queue_work+0x9bc/0x12b0 [ 97.590099][ T12] queue_work_on+0x1a9/0x1e0 [ 97.591640][ T12] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 97.593311][ T12] usb_hcd_submit_urb+0xab7/0x2150 [ 97.594876][ T12] usb_submit_urb+0x827/0x19b0 [ 97.596331][ T12] usb_start_wait_urb+0x10e/0x580 [ 97.597798][ T12] usb_control_msg+0x328/0x4b0 [ 97.599209][ T12] hub_suspend+0x826/0x9e0 [ 97.600549][ T12] usb_suspend_both+0x288/0x950 [ 97.601999][ T12] usb_runtime_suspend+0x49/0x120 [ 97.603736][ T12] __rpm_callback+0xc8/0x620 [ 97.605358][ T12] rpm_callback+0x16a/0x1b0 [ 97.607003][ T12] rpm_suspend+0x2f4/0x11a0 [ 97.608795][ T12] __pm_runtime_suspend+0xba/0x1a0 [ 97.610663][ T12] usb_runtime_idle+0x7e/0x90 [ 97.612390][ T12] rpm_idle+0x322/0x790 [ 97.613970][ T12] pm_runtime_work+0x120/0x150 [ 97.615913][ T12] process_one_work+0xa23/0x1940 [ 97.617738][ T12] worker_thread+0x5ef/0xe50 [ 97.619263][ T12] kthread+0x370/0x450 [ 97.620664][ T12] ret_from_fork+0x72b/0xd50 [ 97.622204][ T12] ret_from_fork_asm+0x1a/0x30 [ 97.623725][ T12] [ 97.624622][ T12] The buggy address belongs to the object at ffff8880252bc000 [ 97.624622][ T12] which belongs to the cache kmalloc-8k of size 8192 [ 97.629889][ T12] The buggy address is located 4288 bytes inside of [ 97.629889][ T12] freed 8192-byte region [ffff8880252bc000, ffff8880252be000) [ 97.635142][ T12] [ 97.636025][ T12] The buggy address belongs to the physical page: [ 97.638109][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x252b8 [ 97.640847][ T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 97.643528][ T12] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 97.646070][ T12] page_type: f5(slab) [ 97.647534][ T12] raw: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 97.650713][ T12] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 97.653986][ T12] head: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 97.656845][ T12] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 97.659520][ T12] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 97.662204][ T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 97.664885][ T12] page dumped because: kasan: bad access detected [ 97.666863][ T12] page_owner tracks the page as allocated [ 97.668635][ T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10700515962, free_ts 10682146602 [ 97.674890][ T12] post_alloc_hook+0xfd/0x120 [ 97.676371][ T12] get_page_from_freelist+0xf48/0x3530 [ 97.678068][ T12] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 97.679907][ T12] new_slab+0xa2/0x640 [ 97.681200][ T12] refill_objects+0xe3/0x410 [ 97.682645][ T12] __pcs_replace_empty_main+0x376/0x680 [ 97.684604][ T12] __kmalloc_noprof+0x66d/0x820 [ 97.686266][ T12] __usb_create_hcd+0x5e/0xac0 [ 97.687781][ T12] vhci_hcd_probe+0x1a5/0x4e0 [ 97.689264][ T12] platform_probe+0x106/0x1d0 [ 97.690767][ T12] really_probe+0x241/0xa60 [ 97.692118][ T12] __driver_probe_device+0x20e/0x450 [ 97.693729][ T12] driver_probe_device+0x4a/0x140 [ 97.695261][ T12] __device_attach_driver+0x1df/0x320 [ 97.696933][ T12] bus_for_each_drv+0x159/0x1e0 [ 97.698415][ T12] __device_attach+0x1e4/0x4d0 [ 97.699867][ T12] page last free pid 60 tgid 60 stack trace: [ 97.701790][ T12] free_pages_prepare+0x586/0xd80 [ 97.703389][ T12] __free_contig_range_common+0x14f/0x250 [ 97.705190][ T12] free_pages_bulk+0x12a/0x200 [ 97.706642][ T12] vm_area_free_pages+0xad/0x2b0 [ 97.708194][ T12] vfree+0x107/0x750 [ 97.709406][ T12] delayed_vfree_work+0x56/0x80 [ 97.710928][ T12] process_one_work+0xa23/0x1940 [ 97.712434][ T12] worker_thread+0x5ef/0xe50 [ 97.713869][ T12] kthread+0x370/0x450 [ 97.715194][ T12] ret_from_fork+0x72b/0xd50 [ 97.716648][ T12] ret_from_fork_asm+0x1a/0x30 [ 97.718078][ T12] [ 97.718846][ T12] Memory state around the buggy address: [ 97.720594][ T12] ffff8880252bcf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 97.723000][ T12] ffff8880252bd000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 97.725412][ T12] >ffff8880252bd080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 97.727817][ T12] ^ [ 97.729799][ T12] ffff8880252bd100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 97.732253][ T12] ffff8880252bd180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 97.734689][ T12] ================================================================== [ 97.747056][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 97.749516][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.752870][ T12] Tainted: [L]=SOFTLOCKUP [ 97.754238][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.757801][ T12] Workqueue: usbip_event event_handler [ 97.759920][ T12] Call Trace: [ 97.761014][ T12] [ 97.761957][ T12] dump_stack_lvl+0x100/0x190 [ 97.763492][ T12] vpanic+0x552/0x970 [ 97.764787][ T12] ? __pfx_vpanic+0x10/0x10 [ 97.766283][ T12] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 97.768459][ T12] panic+0xd1/0xe0 [ 97.769690][ T12] ? __pfx_panic+0x10/0x10 [ 97.771101][ T12] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 97.773049][ T12] ? preempt_schedule_common+0x42/0xc0 [ 97.774952][ T12] ? check_panic_on_warn+0x1f/0x90 [ 97.776910][ T12] check_panic_on_warn.cold+0x19/0x34 [ 97.779014][ T12] end_report.part.0+0x3a/0x90 [ 97.780902][ T12] kasan_report.cold+0xe/0x18 [ 97.782443][ T12] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 97.784388][ T12] vhci_shutdown_connection.cold+0x2f1/0x37c [ 97.786453][ T12] event_handler+0x216/0x570 [ 97.787903][ T12] process_one_work+0xa23/0x1940 [ 97.789496][ T12] ? __pfx_process_one_work+0x10/0x10 [ 97.791261][ T12] ? __pfx_event_handler+0x10/0x10 [ 97.792868][ T12] worker_thread+0x5ef/0xe50 [ 97.794368][ T12] ? kthread+0x13a/0x450 [ 97.795743][ T12] ? __pfx_worker_thread+0x10/0x10 [ 97.797490][ T12] kthread+0x370/0x450 [ 97.798914][ T12] ? __pfx_kthread+0x10/0x10 [ 97.800468][ T12] ret_from_fork+0x72b/0xd50 [ 97.801940][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 97.803546][ T12] ? __switch_to+0x800/0x10f0 [ 97.805208][ T12] ? __pfx_kthread+0x10/0x10 [ 97.806692][ T12] ret_from_fork_asm+0x1a/0x30 [ 97.808250][ T12] [ 97.809870][ T12] Kernel Offset: disabled [ 97.811252][ T12] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:37:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000000193751 RBX=ffffffff8e891480 RCX=ffffffff8bb892d5 RDX=0000000000000000 RSI=ffffffff8e1a9a00 RDI=ffffffff8c400a80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb8789f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5475da4 CR3=0000000067842000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a09d75 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc900001e75d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=000000000000006b R14=ffffffff9b6f7227 R15=ffffffff85a09d10 RIP=ffffffff85a09d9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f74282f0 CR3=000000002a0bb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000029 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc409546f8 00007ffc409546f8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc409548d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563f2485cca0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f173f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f173f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373254c73437343 1e161e035c18101c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f115c435d431610 120300161e121d5c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 337570632f302f71 6d2f32706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 0000000000003375 70632f302f716d2f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563a47771e24 0000000000000021 0000000000000033 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a6166703a756b 733a302e30312d35 33712d6370727663 3a3174633a554d45 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000004 RBX=ffff8880292431d0 RCX=0000000000000000 RDX=ffff8880292431a8 RSI=ffff8880292431a8 RDI=0000000000000040 RBP=ffff888029242540 RSP=ffffc90000538c58 R8 =0000000000000001 R9 =0000000000000002 R10=0000000000000000 R11=0000000000000006 R12=0000000000000000 R13=0000000000000006 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e543c3 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4493171300 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055eb620ee000 CR3=000000005025d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000102 0000001000000000 0000000000000000 000000000000001c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 707364612f766564 2f01ffffffffffff ffffe9080c800320 0000026600000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 920008000498030c 08000490033e0800 0488030c08000480 0300080002080006 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8002060478d40023 647261632f697264 2f7665642f01ffff ffffffffffffe108 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0680030008000208 00068002060278d4 0023647261632f69 72642f7665642f01 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff e108068003000400 0008000c800201c7 0800080046c80031 ZMM24=8c528ca68c528ca6 8c528ca68c528ca6 8c528ca68c528ca6 8c528ca68c528ca6 8c528ca68c528ca6 8c528ca68c528ca6 8c528ca68c528ca6 8c528ca68c528ca6 ZMM25=0e447eb80e447eb8 0e447eb80e447eb8 0e447eb80e447eb8 0e447eb80e447eb8 0e447eb80e447eb8 0e447eb80e447eb8 0e447eb80e447eb8 0e447eb80e447eb8 ZMM26=3dc97a443dc97a44 3dc97a443dc97a44 3dc97a443dc97a44 3dc97a443dc97a44 3dc97a443dc97a44 3dc97a443dc97a44 3dc97a443dc97a44 3dc97a443dc97a44 ZMM27=4acf90454acf9045 4acf90454acf9045 4acf90454acf9045 4acf90454acf9045 4acf90454acf9045 4acf90454acf9045 4acf90454acf9045 4acf90454acf9045 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0b0700000b070000 0b0700000b070000 0b0700000b070000 0b0700000b070000 0b0700000b070000 0b0700000b070000 0b0700000b070000 0b0700000b070000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=ffff88802b53b6c0 RCX=1ffff110056a76eb RDX=0000000000000000 RSI=0000000000000018 RDI=ffffffff8bcf2a00 RBP=ffff88802b53b758 RSP=ffffc900005e8ca0 R8 =0000000000000000 R9 =ffffed10056a76f0 R10=ffff88802b53b783 R11=0000000000000000 R12=00000000000001ac R13=0000000000000018 R14=ffff88802b53b748 R15=ffff88802b53b75c RIP=ffffffff81df5a4b RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7258a50 CR3=0000000013880000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffffd0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563f2484aaa0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f173f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f173f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff00000000ff00 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 58455a045a5e4c07 41494b585e444445 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 49074c440a48495e 1753494346455a75 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563f24854970 0000563f24890660 0000563f2484d8d0 0000563f2483a320 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000