last executing test programs: 47.09813404s ago: executing program 0 (id=657): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000085ff85000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) 47.030198068s ago: executing program 0 (id=659): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb0000001801000c2020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa1, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) 46.88646769s ago: executing program 0 (id=660): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xc, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) syz_open_dev$vim2m(0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000082038851000000600000018000000", @ANYRES32, @ANYBLOB="0000000001030fff6608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 46.030463507s ago: executing program 0 (id=664): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xe5000000}, 0x90) 46.029645332s ago: executing program 0 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r5}, './file0\x00'}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000740)=@mpls_getroute={0x1c, 0x1a, 0xf21, 0x0, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000740)=@mpls_getroute={0x1c, 0x1a, 0xf21, 0x0, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000000000007410000004c001800000000756470000000000000000000000000000000000000000000000000000000000000000000000000001000"/98], 0x68}}, 0x0) 45.869756703s ago: executing program 0 (id=666): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) epoll_create1(0x0) socket$packet(0x11, 0x2, 0x300) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000600)={@link_local, @dev, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x3, 0x0, 0x24, 0x66, 0x0, 0x9, 0x21, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3e}}, {{0x4e20, 0x4e24, 0x4, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, "8701af", 0x6, "1cc938"}}}}}}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r0}, 0x38) 30.866728403s ago: executing program 32 (id=666): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) epoll_create1(0x0) socket$packet(0x11, 0x2, 0x300) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000600)={@link_local, @dev, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x3, 0x0, 0x24, 0x66, 0x0, 0x9, 0x21, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3e}}, {{0x4e20, 0x4e24, 0x4, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, "8701af", 0x6, "1cc938"}}}}}}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r0}, 0x38) 9.130204695s ago: executing program 1 (id=868): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x80000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000080)) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000020601000000000000000000000000000d000300686173683a6e6574000000000900020073797a32000000000c0007800800062a00000000050001000700000005000400dfff00000500050002000000"], 0x54}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) sendmmsg$unix(r7, &(0x7f00000013c0)=[{{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000680)="6e64175c06a7ce91e61eb9b9cccd1fb228d58cd05e6d6aae071e33e267bc08923c528dd4cd683de7a544a3206f660cff94dda5440ee3f42e8ee7ceaaf0b21c6b36acb408730a8a1ee347d8b57a548b06a9f2b2fcf24fad8d37712c849d043b20c49b6e543fa81f85f531f01d9d834f9ae0092a7d453c76606e726cf1b5b3b4efca477ea8ab24ec7ce42c4e70f9b1af1333af7956b7ebbdfef801ece43a", 0x9d}], 0x1, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, r0, 0xffffffffffffffff, r6, r0]}}], 0x24, 0x4880}}, {{&(0x7f0000000740)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000007c0)="031126684ae3595f91fc7f6a9e501c9b52015c45012fa7b9464a17ca6544029d4258b5c12434c79ae1152ef3f4637645fa62ad16c04beb1886118a6b6c7a5871e964e39b249e605d5167130ca44ed58fa90bcffb", 0x54}, {&(0x7f0000000340)="6dc3fa7d206ff5aaec8561ea3639f7a771034c6ab18d2eb0fb", 0x19}, {&(0x7f0000000d00)="d4daacba066baaa178dfcd64c68243a473e1db45a9fc101baa987724bce7fcefe85e25579bcf1d8d2aab5fc1476e0ec62e5d039ada9d7d8e65fac7e26fefdb145e170c9124a5d04980f301710acd2c3ae1f0016bd1e039bf53486c7ea4e329858ac92827a48c6685fa3ac04abf935395a0ff4dfe54f79c72ce8f16492f9e8ca19a00d722734a90352a404b71d2788ea3a57b24addbef7abf93005e7338bcbb85e2ec702aded5fbaf453ce94dd790a1bb38fd32fddbe430c6c035115169df7f9d6a3c0c9c8315beaa3a959783ce1368346d84427b9968aa4d9620a68a4ab62c5876e96e72bb70bf643f", 0xe9}, {&(0x7f0000001d40)="2f25f5a93ce8e47b6fd580456c789859e75764abb6da18bf1a413a6e6a70808623991ba00031e054899852c95b32ac9b8478ab1931434048b057032e4e8cff342c4f234e7cbd2c8e94827461314b1ac6cd4603eb6c726ce78f082c645c0fea7afedb2588c9678b171c42891721356d55fd11761fecdee351185f18abecd8e570b9c5a8c5f4df08d1472a81987617d743995a745dc01e448a75b5660fdec045c9fe1e68d42043abfc0ff02fbc839b3afd20e5ac3e1cfb330f6bd9e87cab773bce3f3dcc75439cc3f0f6c78b2b74117125dac76227b90f693efd22396ac98b59099264fa7e84afcec18392ab2c63a9a190ff4d0e0dd0a8df032f9276eb3e9c4ffb8e5cdc94a35942ce04b8ef29028f7d11ed31823aab6b8f9dc2b9ec4aabb07b369b400d25cfeaa2b3a12f702e63cde7c680864632604c1df9da9a22bd35d58a1d85e95c463dd0a39d9a176b10d29d628edd381e1eceadd699518f0095d127f6074c2e303925631addebdc73def28bc0e6273ac4fa6275229183c6e402f7ef9a34d841b6e901c7238c4d297ac24464fca258b6b491231936a3a064b8ac43d6d81fb1a820a2bac3b81f28f243cb09a6a2b4b9da33c6eb2cd4d0a2df39afb0850d44ca4d208d2f1e6705f0a5993cc418f6dfb168c2563e6bc3687c5c4c8565345c31b92e5d0227070ebe359a9408f9dfd589a71e06957f5cd2410c14c7d56dae1b73098df1b489f555bbf2aa520aec9c0f88b749e1be81138421a3ff683566ebdd55a28fecbb38dd696b82f280ad7fbd02e4151bdd7762dc8725c85fdaaac3fb51b6d9e9bab3b7a2c8b66185e7b9dedb5fd4d4b142d32fab425f0e597baa71493891b4d2e25a06b229466fd2d56d0e6980dd5eb0d9e7143e23351e254ade4f7211e47f43dac52b42caab29d58f3f34a38b1fac835ae72d4110d4e45157c94f439829f27b05314e50a7cb2615c6e9f75e9da565b5938d1426aa48285557a0dbf421a190df63fc2e7744f0122bf65be51dda0a56416d0d6b126f806408518514aa89b0a45a2db736473d0b92fef5c29d3d77f68b2d8b1d206c9284739ba973c83fa9d3a710f326d82a58e1323bd14b71a8ac3c59b5cc0db0bc05c195db26fe82276a4fc683bf245b44037ae92f2adc47d711b71c04b7a6cba11b678dbc5c4939d9c695480f996227309e0bb8738c3d54658c5004e8f78b5c97a6f749d87126552ed6ee30b045e52d727a4617fd837d3aee5a25c2370d8dc59650eb005c1d811e899f1c1e6cd6a9d1b6f1c4658f54adac3638916ac5763b12493ba5464c93c415bfc1100809ca97b8d0dfaaeb4f622a66b1d27561109ad3df25eaf95b26ab9810ed65e9d496efb9f12f0495249c33492b9cda49db54d9c5725008c7b7f72eee4b8051b34b0c2a6ed48f9ebca9decb95e9104de16659eb51d06ceade704aaa3998765c299eaccf45e1d98bbb76b667b21a6af362aedad6de53adfafac16beb81d07eed778a7a42fb2b17c1f5662e17eb1678061cb889dafd901eac80d735b59010a308cae57a06deaeda5f510122c456290e626eb44ea418bef972aa1f7f48faec70d895def59d8081b15398a19be25dc265b78d38126fc7f8b1941d467f33e9691744fcb5aff2456b2f01d2dd810a9d3e216db437fbe3388658dcb9233f3918a9fdec127b25792ededaff9d2a2e0572a0759495c14adcfa43fa30ed0467fad3739e438748436ba086086c59cb3093b90191cbc499ae7d03f7146422bb6f7a82bc3c805a8cb61a05083cfc329c46376291d69ffe36a5f457afe564820e00a81ad981393f5c6c8a3aa1783711f33633a297351cc2de3239e46c8b21b410ce5743a63b0b834111d70556979d0d26b7c7d19fab8843b8f787ae0d9b9725feb7b42b969f28ab76e5401044ce2a3f7eccf852ce879a94f87197274a415ed2ecaa958c95d2e20a7ea7757d4316dba4e6f0cbbaa299ac324aab024d3c8672e874c79964842db57d11f737ca0bfc2c7d4d715c7ac17acf60006c56bee786968f8e3aca437705b6b6c4d15d0a692464942cb07c8e7d354ef0fb72b0d6c584d149759c545ba07663c546072f096cbe4148eb88e534c2cdc406bf56d13037d7f36cb5e9b2b142a1adea3070584fbae8d8c9b20f1c26b9f5ceea2003f12c4e44e1437e300b4c2152e6a708013dac288e904fd2702a0fccacf79a50f640695f8c7192379ece4490fd1ff059cdeb2a1370214550441882df8184e6d81ad749555e5e540554a51351f05ed44fe3655c3eac584004c94d9d3be3808f046237107d2fac9a89290691c92ab03840c8b77901d6fcd589545caff6893490e55586c82a3e119c10d1729b388f1036ac8ca62e64fe7bd9178bb3b0dd8b4a6d06ecf4c8e9b87c03b302016c1eca45b5db074a059846d897b15390f351d9746b0569ea1c04dbcf831475aa68fe56ca2de599f23187181d73e458f917c157049bd7b5ce28ba01db87c71e724e4c06ca79b6b19c3c6039a9d1eebf86f0d2b055e5e513a8dea897a1fc08eb27c624a6084a0f9a31cf074ee10c7184a2abc2b5e8a7f1e4fb81a6597c95b7cc449eae0f343fdebb97c671cbe53dc3ca57d0d65cc1b99fd7d1e23f7893dcb4cac6d4be5fdb119cf320df855190fb9b3cb737e9f0ef957a433b1541a22f6641ade3261e7523ddfc8e9cd988b5409fd1bdcb9dc7e5ed8f6a7aac2304228a0ca3e09703ea010d76a2bc5adc60c84b3854d7a31147c1d2c92e333bb4c9fc247a90cbb649500636c15346fd399613f8fbd0ac55cff4b85e3d26732f9546f619c44247df25c633e4f3127ae62d33e07fb574df2f4c01ab8814d8e8e62fb8fa01913b7ebc7e4576d416920e80da24e77e28f8249833c81b67cbe60c6f83c3f6c8380bb803fdf689671ab6431e12030c2bceac857aa5fb739704bcc070f754d89757a8c6df4222257b2eae21ee683fe7a1671d9c01066c7216f396b0ebcf9e65389b26757c9a718346f229f7268ccb184145ecd1f180ca8d4afb148e206e2367940f2ba689d88ad098f796b8ef64a4d1f101d66cbcafd3161073d33cf7fc65fa47783ea0025c9be6d6465d56a4c0942668db50bb6376846fe8e6917905b03bbe1c508cfaeaf402a59622ac948f7960223c2943de69f22dd0953a238a577b6842ad8124d63d1efaa4f09f05ddec306b42cba3199ff6d6affbc4c9499943116b457c9087e67b68dc12e234a17f174b2d34d3191cee2f99098fe3db0387d76993a1eb322bfa90b6fd0ed042d2301208c99b8e7a8c9bac54d76af46c83a06023edd290404357ee79fbc5a07c9daff2f810714b7cafa2dea09a27c152e47d49a8691b6f68858fea4d0d36eccca532ec4b084736265bad664f4bc7682c06d2d5ce236d144a3114981526d2d75996465d27bc05730693ce524b8e727789dc923996bd2066a9ce1a0a6abf0755ef2e6b0369c74a370b429670d8b85c9f751d2e39e43928031da5179022d6608085d9b1598a01cbbab78d4332d4e5f13b1065e8a9d11b8f887ed62605886750ae91c8c063df30a9e27e3ef0740504e7345b19b201f152f64f6f84b0a2e1d7bc716685a375a3d9b77dd1672af8c329afdb1168dc33e04752ae64e5d3377f9f3f50362100c06d7d8b9cbbde80c9846e5c4bf7b602c658fee360d0c16bc17387bb5e07e76ace93036d88042073a3ef2583da796583deaaf2120286fa6c2024166f3d536164576e90e844678d1dc3b3697502d2d915b5b042d18042df5eab5dd8b2e11f6f24e4d9db4f3bc1cfacb99388bdd6941a063db2ff545d1ccd7311747009a026aacafb797d5e878445d02176ddd5faec9f1a3aa1ce00e65e80bf31e25bff4fc96c44bb04fc7a6eefef97975baf205c9413f9207df196dbe65e161cbca47de9d2c8554c4da30d915fea93d6d89e78c381cec0bcc9da7721211e404c0fecda2e91b1be739617bbd1a02be7272751c0a203e08a54b062f50809cc521ffa68c0d188a5f8569303847bf1434ec66450357974c0787c29af2b0cc1921c9fc4295ffb51d5a232319bca867970b841706e4c84a7a02b7b3ad880fd0feb9cdb800208b87cf87ccf0cdec62b1f752a0629b4fa4a40db38ceea0f7b1a6f621dd4c1c13ab8d403eb1d7f4bd04b0dde8cb283c7cd1f65bfcf48d1ab6b8f7f19bd26b459293a74430cfe4e234bd00dbeac13ab9c315c85a3f4736595edc70c13301d2fadcaa2a01e8c6542e90527410ce70e7ca9c42b559b4212de7210c5a00487acbe2e8779f2db7120dd83659d6eb4b161ab2e1c07c56502eb0a6d0ab65f7af4fd96dff467f1edd1298414118264b78f18056c8c4f4cc0eaa2acbe1bd977b7bc09fd87d1457bb53915557c1cad954dfe2705eba4d036714ec971238b03521848d72db5fec742342458acd392a94bb10722a3ac5dba1504d6938528eb390a2a129a192de0b20a4b15ce54f15552653ae35f052fde1920592b5d175e8c2b11f2ada9a66804306b419ca54c75ac37f9ef2ca2421d0d316ed7c9441b62aca10d789fff3a3e26d406d08d634b3f3470b0f3bdad4b3834a2a0f822b6f16026d2cb79ded02a1ad985beeafb62034dd955542ad7e387a4af9c7bb5d33ca8146947079fb744e72e8be39a7a7f1bee2dadd2954dbd1b357c051b94f818232031e0826ae1c526d2b5cf42b28f607c6968f48efb309c6bdb6cdae0060b2772f784fa700323e8717404bb55bc907bef9e272d0bc80e4f17b81de3665975d5b707ec57020cac69bacb82d576998bbe9b6c7fb4ebede5ee2075a6787f9503f0ee3224f4b3c88cfe160e7ddaef6cd3776cab40f98b65f2513aebd9cfe393949fc6304afa5f1eb85addc8c50067be18afbf609cda7d6e60b812f9dbe279f1e4bec55577826dca158ff0cba1195e061009fbe0e6e92611c6ba106e86c3cd74314bc73bcc3c445b4ccf3db053f0b09a1cc72e95b88c4548f57f088424641a61f7b8e5717e6848b772fe98a4c15c84a067d253887960772594523a0cb44ef1a36ac251c759bd2deb527372745eb7795fa0f767466c02ed4017f570c2041154e6a602c511563001a22b4dcb18a50e7afe92716a5bfdac3b7cea32641b392f11f0fea35961afedce0f50bb0e454097d641ca95b23a6c89c6b7bd0e15e9e88a9adb9c77c80976351465e2e38500690d696d662c740244a6586a57a504839bcd27af5675242bc619714321fb4fc2bd1f4b98cda9f4424df890ac1ddf5fc96c9637d80ce220e2ec9f2d96b637e6c7f7a325ad163d6a98e720cd1fd137329c295c2e63dda48e23cc20f4502461d43e4e39cd188900a0b9911ea27f3fabd56c8e6c1109c67ade8d21e39d38f59f25708955d05cfd9c055b1eb66238e31441b6b2f3cb5b6aabeeb6341a6defc5938d79328854c130ce0e90fbc96d21a900beaaa90157718157e8c76d3ecd661fe7208b9b8ad03fe1080513ebab842c790fd570c8428a30d2cf197ec544b3db342f1a93a61dca8b6f1a91870f81821bcc6bf18b4b5c2bce5aedb6e41aeef4a87de3e1cab92b3c293c19e030fe053144024dbff1db49147494d924f9fcb5aa7c53c91a083ef08ab72a46134c59d1e27f9338b46ca62378c16e84b0e19a50053c16d8abe29ee330c396a84fa096d78c1284d7ac8d3f7739289e04708e8d9be9591ee846b07718c801db4a4fcf1d5785e6a25e4cad0d32cc62b75031ebb3f03d5ad91c739b6df52a2ab885da7a689f52fdf1079801530246b41ac2f27cdd8b8078c7d3e0e3cf10fadb64668cd5a05b2c34aad602143dfffd860df809dacd3f25b9f0e6b0129b599b74", 0x1000}, {&(0x7f0000000e00)="a053b386c3e6276c45efb6ebc7f8c77a847c3462f62b11b496cd4ce3f102255793de3c6a472d6f3bcee197c0354ec0e1eb443d6dd58e3fe04f42c4bbccc6c13422e6082f0b9eeea5e5dc0e11e22b012a3661ffa75d92cd6664ff5548a7e5ff3421a5373195afb7e453384fe1895a84a7c23927e0323ba17ef4047c65425721be1d6b6107c24b2bc1936d39bfcc3a5eb1c6d5aa3d6ef609d7169aa8e4a0551306b435e60541ff226be17e9ec81f77ff7615e98e9ba6e2f2210acd59cb9a0cac937ee4449d5a3a39e6e031a4ce370cd967c71995350935d8cf90a478b05df2855bda9daaab51affa700a3ffe73", 0xec}, {&(0x7f0000000f00)="8a58f594ac50957e14504d0a178687aeb19bf96fbe6464c5533f7ead6262ee173e0d84f0eb7c620b98f59ac013e864fd22983ade6c460a6dc7668998a84d9df1dc8cad4c2b2fdbbae86d573659f1035c51ddb4b15e17d54de989509a363d23ae89a161b46e4ef3bf794170ac4df3ea311515e1e52c216d673e2ea68a861a76ff7ef966591266c4c94b8a7102db51a3ec0bb644bb43ad9e2c2cca50304bc0300d05d90c5f0a84a62cf67abea962fbe51a8fafcb07ee3fbcb5fbb25faf1d79797a0c026adf63590a192aaad20856f2658a4ccfe7cc0e2edf965fc72d461a391ebc8d2ecee980b432e51c85c3626764df5c79fd9f", 0xf3}], 0x6, &(0x7f0000001040)=[@rights={{0x24, 0x1, 0x1, [r6, 0xffffffffffffffff, r6, r3, r8, r3]}}, @cred={{0x18, 0x1, 0x2, {0x0, r9}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r5, r0]}}, @cred={{0x18, 0x1, 0x2, {r4, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r5, r6]}}], 0x9c, 0x2400c040}}, {{&(0x7f0000001100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001180)="78c5397d32bde15dbdd353588bfc00fe8a1ab8d39a9d41712a5bd06cd2afcb4078ce89103d2f352fd6b8b3e2a98d2742945ec99d80a640457f71de9195d21b9a3ef2402d306aaa772655a4553a3f95b6221aa7a762996478348a1490865af8774f3e4210cbc364c796acdb5196e7e2766507efc6b6319922a3563bfee7482ba720ddd32216eb1fac8d42382eea8c86db3bedab46", 0x94}, {&(0x7f0000001240)="28b1cd1f79020976239857e34ed6f8a2bb16c2891bbba0a9710f7bdae238605347c003cd5dd502a3d7460daaf1e8883720f19c91fed984169aea2c35de702f5cd22a9ca2e51882c3b5b48a07d4c5255a1af364bafd566e650c3f635733af603e414c726093c458650717b809cee54e072d8ab925fba921111b60eb1fd4aeecf89eb3f35c1f09556fa07eed53344dacd48777d2cc3547281c8f8bac4d33ceac9ac1f4194982979bed7ac5ca0e239f0a0d148546554e23bdc56c1e6af79dd4349292450295f16927378a9059020b5e8c9d", 0xd0}], 0x2, &(0x7f0000001380)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, r10}}}], 0x18, 0x2000c001}}], 0x3, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r12 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r12, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x3f4, 0x208, 0x0, 0xfc, 0x314, 0x314, 0x314, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x3a}, @private=0xa010100, 0x0, 0xffffffff, 0x2, 0xa, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x7, 0x200, 0x0, 0x4, 0x0, 'macvtap0\x00', 'ip_vti0\x00', {0xff}, {}, 0x0, 0x80}, 0xbc, 0xfc}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2abdf16810cc57360de592967a5b747ffbcf7b7c49413ff9a3b51333a6fb"}}, {{@arp={@local, @multicast1, 0xff000000, 0xffffffff, 0x9, 0x3, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x9f2f, 0x6, 0xffbc, 0x8, 0x7ff, 0x3, 'syzkaller1\x00', 'pimreg\x00', {0xff}, {0xff}, 0x0, 0x10}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @local, @multicast1, 0x8}}}, {{@arp={@multicast2, @broadcast, 0xff000000, 0xffffffff, 0x6, 0x10, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x0, 0x80, 0x2, 0xc8, 0x5, 'rose0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x0, 0x44}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast1, @multicast2, 0x8}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x440) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x9, 0x5}}, './file0\x00'}) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r13, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r11, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 8.075183126s ago: executing program 1 (id=871): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004680)=""/102376, 0x18fe8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa101}, @mptcp=@ack={0x1e, 0xd, 0x7, 0x4, "0b6df4f5c06e887c69"}, @exp_fastopen={0xfe, 0x12, 0xf989, "519f7eff2e9879026a27bd980764"}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}, @mptcp=@capable={0x1e, 0xc, 0x9, 0x8, 0x1, 0x8}]}}}}}}}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[]}, 0x50) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='rxrpc_rx_abort\x00'}, 0x10) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = syz_io_uring_setup(0x71d3, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x3666b165f8ff1357}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x400454de, &(0x7f0000001940)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndtimer(0xffffff9c, &(0x7f0000000380), 0x80000) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r4, 0x0) 5.009529637s ago: executing program 1 (id=888): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000030000000100000300000000000000100000000000000003000000000400004005000000ffff0000002e00"], 0x0, 0x3f, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value}, 0x28) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mlockall(0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x802a80, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'tunl0\x00', 0x400}) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x35000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendto(r3, 0x0, 0x0, 0x1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0xa, 0x101080) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x700000e, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x80000480, 0x0, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) r4 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r5, 0x800442d3, 0x200000f3) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x16, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='ocfs2\x00', 0x26000c, &(0x7f0000000400)='u\xff\x0fu\xd3oda') bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) 4.430003467s ago: executing program 1 (id=890): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x3) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r3, r5, 0x8f5, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @default, r6}) fcntl$setsig(r0, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r1}], 0x2c, 0xffffffffffbffff8) 3.797462923s ago: executing program 3 (id=895): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="021800000b0000000000000000000000030005000000000002000000e00000010000000000000000030012000000000002000000000000000000000000000000030006000000000002"], 0x58}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)={0x28, r0, 0x1, 0x0, 0x2, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x28}}, 0x0) 3.793915541s ago: executing program 3 (id=896): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.710244286s ago: executing program 3 (id=897): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='contention_end\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) (fail_nth: 8) 2.266433383s ago: executing program 3 (id=902): socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f00fb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4c31b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4a05004a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3000000007d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r3, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_emit_ethernet(0x44, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe27, 0x0, 0x33, 0x8, @empty=0xac1414aa}, "341517c1b7df"}}}}}, 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x200000000000000) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000400)=@ethtool_cmd={0x3a, 0xfff, 0x0, 0x3, 0x7, 0x0, 0x3, 0xfc, 0x3, 0xfc, 0x0, 0x1, 0x0, 0xff, 0x0, 0x1045}}) (async) flock(r4, 0x1) ioctl$VT_ACTIVATE(r4, 0x5606, 0xcffe) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (async, rerun: 64) syz_usbip_server_init(0x4) (async, rerun: 64) creat(&(0x7f0000000000)='./file0\x00', 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) 2.265683723s ago: executing program 3 (id=903): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xa3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}], [], 0x2c}) r2 = io_uring_setup(0x84, &(0x7f0000000440)={0x0, 0x20ee80, 0x200, 0x3, 0x109}) syz_io_uring_setup(0x814172, &(0x7f0000000780)={0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000140)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000130000000000000000004bc3e639d38027000000000000000000000069b6a7c14f0000000b1f69ab2211138d66d85740eb4bdc5f57427db8a17cda87b2f314863207773e57"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xe) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x3, 0x0, 0x9}], 0x10, 0x37, @void, @value}, 0xfffffe77) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$nfs(&(0x7f0000000040)='cgroup.subtree_control\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), 0x8030, &(0x7f0000000180)={[{'{,.:./'}]}) 1.856645886s ago: executing program 4 (id=905): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20000000, 0x4, r1, 0x0, 0x1, 'syz1\x00', 0x0}) 1.740176465s ago: executing program 4 (id=906): syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000ef0db4ed344a8240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000001c0000000000000000000000000001"], 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x80000000000000}}, 0x1c) sendto$inet6(r4, 0x0, 0xd0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{0x5}, {0x52, 0xc, 0x7, 0x3, 0x4, 0x1}}}}, 0xf) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) mkdir(&(0x7f0000000440)='./file1\x00', 0xc) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') ioctl$NS_GET_OWNER_UID(r5, 0x5421, &(0x7f0000000040)) 1.369860963s ago: executing program 2 (id=907): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000a80)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000040)="22f0987200fc0341cf7027d80f4081c95296b7f0", 0x14) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{r1, r2+60000000}}, &(0x7f00000000c0)) membarrier(0x10, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xbc0c3000) 1.367642249s ago: executing program 1 (id=908): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000440)={0x1d, r3, 0x3, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r5, 0x8002f515, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.364285478s ago: executing program 2 (id=909): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @sack_perm, @timestamp, @sack_perm], 0x4) 1.310066358s ago: executing program 2 (id=910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x8b) (async, rerun: 32) r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f00000001c0)) (async) openat$incfs(r1, &(0x7f00000000c0)='.log\x00', 0x2d80, 0x50) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r7, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="9caa40d4d36ce39b70e20513f20471c2a64052d8b34d9c6b2b7f27538381a7d63b081067056b246f1751204daa21b671f1b097797ecef694f2f820bddda01a9e08c52736a478f97bb85d5760c064757fe7ff4287aa04aef35996d65eb3f5218147abe31ea2e1999916ba60350155eb3b87400f9fddbe25b192041957aaffe6f0e51b7c63a8bebe55d1bcdc66863781c44fbb3c2d5c2433f380aa4be28f3558f8122ef5aa72485c0d9b03fb5ead2206f0891ab5a7f644c8a01c73d1ff0820d1460aecc15fb1ce3f907bdcb645f3ea65f4a7d466e2a72b6932ac121cc8b36651"], 0x24}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000a0000004be280000000000000007c7b39f3ecf800100000000000004203b8b2025cb56b5127e7b7de86015585", @ANYRES32=r8, @ANYBLOB="920100000000000014001680100001800c00040008000000faffffff"], 0x34}}, 0x0) 1.309657185s ago: executing program 3 (id=911): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='contention_end\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) (fail_nth: 9) 1.197438252s ago: executing program 2 (id=912): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x289) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) pivot_root(&(0x7f00000001c0)='./file1/file4/file6\x00', &(0x7f0000000380)='./file0/file2\x00') r1 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x98f907, 0x1, @value=0x1}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x20000000) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) r4 = openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') pread64(r5, 0x0, 0x0, 0x1) accept4(r4, 0x0, &(0x7f0000000180), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff}, {0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r6], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x80) 1.194691994s ago: executing program 2 (id=913): r0 = openat$urandom(0xffffff9c, &(0x7f00000000c0), 0x8102, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x40043311) (async) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010001000100000001000000050000000000000080c889ceab0da8530d66f8f380b679a8f56db408bdf5fbf0012ab833b12256a7dfb3b568cf7dd862f75533b05926200b0cf1a69c507877ae3c60a84b4e93da91457e94139e554acaebdd000000"], 0x119) (async) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) (async) fanotify_init(0x0, 0x0) (async) r4 = fanotify_init(0x20, 0x80000) (async) r5 = fanotify_init(0x4, 0x0) (async) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) fanotify_mark(r5, 0x1, 0x8000011, r7, 0x0) (async) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x1, 0x8000011, r9, 0x0) 746.97944ms ago: executing program 4 (id=914): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000980)={0x3b8, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x95e4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x16d9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fd5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x49d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x1d0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x92, 0x3, "d2dc1600ec20d4f02a81bb1a9440b0f97e11a0128479be99d4bc4362e3e0e4944ca54fdd45d4f93fd8c9d086dc4157e54965b64fd2637e707eb7de358cfb33ed37918dca6d35380bc7d16c60047d0370a2e88879347c612231c734bf6d14f943da8aa3263391457da0d8cfad3188bbcc2e3c49875f5f40f2d3cca7391fa6fb58418802d0721589eb34fa550be210"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "8f0877f74b45007202456619bdbf5841d68a4844f6af674210c3a2cf624aee148a0379"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc9, 0x3, "ee3bf1b388913f6d0e2d3247cf14b2cca0103f45fa85acb0ff861e0c08bda8542e778ebf31dd6a96400edb66ccf94feda3a8eff9158588d888a2fd1f9d87d913659a7ab47c0247e6bdbba50290944d58d5c0165f8f78e53f1f4ba95151e805ef297076a208ed0860d74132ec4896e5f2a18dda5e7db61667ca745fd9ba1f61f780b352ab847c76546b3e675b98dde7b4f3750449736033528d492986b3e93b1d5b14581679d3acc31cc325325549616a559447fb6db8ff600ccf65e1b56ca0b0bf3c330bde"}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_LINK={0x0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU]}, @TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x10e}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x400}]}, @TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0xe7000000}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x2}]}]}, @TIPC_NLA_MEDIA={0x85, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000340)="a6", 0x1) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000fe070000000000000000000002410000001000b1137564703a73797ab600000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000000) 618.307803ms ago: executing program 4 (id=915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000009045000000100000000000009500000004000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x8d8f2170d974c5a9, 0x0, 0x0, 0x42, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000023c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="2f0000002820000004000000", @ANYRES32, @ANYBLOB="a3ba6aed3e3425ad8ea71a5b8629855126fed47ac5038af850f2a8351263d983f4128bcb7e16e32c6e784cca7ebe28c6ebebb48d9e1836bc0d620fa0be1c23f5780f5131543b51c583f7165f41f9b5b7022953d3be9e4cc8cbf21ad1b4290a722e70e23acf87ea910fcb58c0835d399273d96b787141266ff107df0dee0551802ba44cf15d3c4943ce574ad0429d6177e396a0c51d7fe14c903c3c8f86ac2c45afa49455fd2b7fbf8adeaf6b1b04c6d2707dc1234efb1395ab450a31275c6b12999d9564e15a4aa3d7d185d372a004465e0bbd59eadb054dbdd4114d", @ANYRES64=0x0], 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x8, 0xc7, &(0x7f00000026c0)=""/199, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) (async) prlimit64(0x0, 0xb, &(0x7f0000000140)={0xa, 0x36}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000180), 0x10) bind$can_raw(r4, &(0x7f0000000000), 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xf, &(0x7f0000000240)={0x1, 0x9}, &(0x7f0000000300)) (async) socket$netlink(0x10, 0x3, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r6}, 0x38) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r0}, 0xc) getsockopt$bt_hci(r3, 0x84, 0x81, 0x0, &(0x7f00000004c0)) writev(r2, &(0x7f00000044c0)=[{0x0}, {&(0x7f0000000380)="89", 0x1}], 0x2) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000024c0)=ANY=[@ANYBLOB="3800000003140100fcffffffffdbdf250900020073797a310000000008004100727865001400330073797a6b616c723000000000000060da8500e71caf308c063880105d5c4abddc886e9ace8e969c372b995bf833179351af8b3230513991c4665b2a07e7728bf852ac3c"], 0x38}}, 0x0) 540.108753ms ago: executing program 4 (id=916): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) r2 = socket(0x10, 0x3, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000000)={0x8000000e}) (async) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902"], 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x48) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) (async, rerun: 64) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x3) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) (async) lstat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000680)) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x2d4a4f5a5094f62f, &(0x7f00000004c0)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100200008004500001c000000000001907864010100ac1414aa0d00907800000000bba7a6af7955a4618b58b84c8aeff1bba79794d10fad5be5199e5e6bb7b6f242bcc103dd5dfc3fcb486dc11e013f8dca6e7b918cd95dbb2d4c3d8d00b8195b86ea328c7536c3e506dc96"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000f40)={0x64, r9, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8, 0xb, 0xad42}}]}, 0x64}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) (async) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000100", 0x41d) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 410.138769ms ago: executing program 4 (id=917): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x3) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r3, r5, 0x8f5, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @default, r6}) fcntl$setsig(r0, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r1}], 0x2c, 0xffffffffffbffff8) 291.889738ms ago: executing program 1 (id=918): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, 0x0, 0x0, 0x4) r4 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x10, 0x0, 0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', &(0x7f0000000780)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r4, 0x3f70, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video(0x0, 0x10000a7, 0x80080) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @sack_perm, @timestamp, @sack_perm], 0x4) 0s ago: executing program 2 (id=919): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e0) syz_open_dev$ndb(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e300000000000000000000000050053"], 0x138}}, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x1155, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}) (async, rerun: 64) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, 0x0}, {0x3, 0x1, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001040)=""/86, 0x56}, {0x0}, {&(0x7f00000012c0)=""/198, 0xc6}], 0x0}, {0x0, 0x1, 0x0, 0x0, &(0x7f0000001680)=[0x9, 0x7]}], 0x3) (async, rerun: 32) read(r5, 0x0, 0x2) (rerun: 32) pwrite64(r5, &(0x7f0000000340)="5da1", 0x4, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a40)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x1279312a2a8c61f9}, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0x2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) kernel console output (not intermixed with test programs): 2] RIP: 0023:0xf7f58579 [ 71.465746][ T6792] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 71.470631][ T6792] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 71.472804][ T6792] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 71.474765][ T6792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.476769][ T6792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.478822][ T6792] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 71.481138][ T6792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.483219][ T6792] [ 71.504725][ T6794] netlink: 72 bytes leftover after parsing attributes in process `syz.0.204'. [ 71.560377][ T6798] net_ratelimit: 17 callbacks suppressed [ 71.560388][ T6798] netlink: zone id is out of range [ 71.565579][ T6798] netlink: zone id is out of range [ 71.567039][ T6798] netlink: zone id is out of range [ 71.568899][ T6798] netlink: zone id is out of range [ 71.573452][ T6798] netlink: zone id is out of range [ 71.575280][ T6798] netlink: set zone limit has 8 unknown bytes [ 72.187417][ T25] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 72.226071][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.228857][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.233411][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 72.235006][ T6829] bridge0: left promiscuous mode [ 72.241062][ T6827] [U] rMý·È™µSöÝ=Ë>X³<Ûÿnð™+ [ 72.242893][ T6827] [U] [ 72.243885][ T6827] [U] [ 72.244878][ T6827] [U] [ 72.245844][ T6827] [U] [ 72.246789][ T6827] [U] [ 72.247751][ T6827] [U] [ 72.248699][ T6827] [U] [ 72.249659][ T6827] [U] [ 72.250641][ T6827] [U] [ 72.253306][ T6827] [U] [ 72.254334][ T6827] [U] [ 72.255335][ T6827] [U] [ 72.258612][ T6825] [U] [ 72.360449][ T25] usb 5-1: config 2 has an invalid interface number: 94 but max is 0 [ 72.362598][ T25] usb 5-1: config 2 has no interface number 0 [ 72.364192][ T25] usb 5-1: config 2 interface 94 has no altsetting 0 [ 72.367471][ T25] usb 5-1: New USB device found, idVendor=413c, idProduct=8181, bcdDevice=62.f7 [ 72.369760][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.371835][ T25] usb 5-1: Product: syz [ 72.372934][ T25] usb 5-1: Manufacturer: syz [ 72.374175][ T25] usb 5-1: SerialNumber: syz [ 72.425745][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.427726][ T6823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.429756][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.431602][ T6823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.437037][ T6823] bridge0: entered promiscuous mode [ 72.708210][ T25] option 5-1:2.94: GSM modem (1-port) converter detected [ 72.732476][ T25] usb 5-1: USB disconnect, device number 2 [ 72.741460][ T25] option 5-1:2.94: device disconnected [ 73.771733][ T6129] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 73.939765][ T6852] netlink: zone id is out of range [ 73.941338][ T6852] netlink: zone id is out of range [ 73.942872][ T6852] netlink: zone id is out of range [ 73.944544][ T6852] netlink: zone id is out of range [ 73.997798][ T6129] usb 7-1: device descriptor read/64, error -71 [ 74.146145][ T6858] capability: warning: `syz.3.224' uses 32-bit capabilities (legacy support in use) [ 74.185853][ T6863] FAULT_INJECTION: forcing a failure. [ 74.185853][ T6863] name failslab, interval 1, probability 0, space 0, times 0 [ 74.190635][ T6863] CPU: 0 UID: 0 PID: 6863 Comm: syz.3.225 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 74.193354][ T6863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.196223][ T6863] Call Trace: [ 74.197196][ T6863] [ 74.197988][ T6863] dump_stack_lvl+0x16c/0x1f0 [ 74.199288][ T6863] should_fail_ex+0x497/0x5b0 [ 74.200578][ T6863] ? fs_reclaim_acquire+0xae/0x150 [ 74.201970][ T6863] should_failslab+0xc2/0x120 [ 74.203252][ T6863] __kmalloc_node_noprof+0xd1/0x520 [ 74.204612][ T6863] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 74.206143][ T6863] __kvmalloc_node_noprof+0xad/0x1a0 [ 74.207596][ T6863] nf_tables_newset+0x22db/0x4120 [ 74.208983][ T6863] ? __pfx_nf_tables_newset+0x10/0x10 [ 74.210449][ T6863] ? __pfx___lock_acquire+0x10/0x10 [ 74.211839][ T6863] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.213451][ T6863] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.215113][ T6863] ? __nla_validate_parse+0x605/0x2b10 [ 74.216614][ T6863] ? net_generic+0xea/0x2a0 [ 74.218037][ T6863] ? __pfx_lock_release+0x10/0x10 [ 74.219525][ T6863] ? __nla_parse+0x40/0x60 [ 74.220767][ T6863] nfnetlink_rcv_batch+0x1a2a/0x24e0 [ 74.222229][ T6863] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 74.223645][ T6863] ? __pfx_lock_release+0x10/0x10 [ 74.225066][ T6863] ? __local_bh_enable_ip+0xa4/0x120 [ 74.226660][ T6863] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.228107][ T6863] ? __pfx___dev_queue_xmit+0x10/0x10 [ 74.229620][ T6863] ? __nla_parse+0x40/0x60 [ 74.230848][ T6863] nfnetlink_rcv+0x3c3/0x430 [ 74.232140][ T6863] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 74.233564][ T6863] netlink_unicast+0x53c/0x7f0 [ 74.235067][ T6863] ? __pfx_netlink_unicast+0x10/0x10 [ 74.236604][ T6863] ? __phys_addr_symbol+0x30/0x80 [ 74.238096][ T6863] ? __check_object_size+0x488/0x710 [ 74.239737][ T6863] netlink_sendmsg+0x8b8/0xd70 [ 74.241161][ T6863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.242628][ T6863] ____sys_sendmsg+0x9ae/0xb40 [ 74.244099][ T6863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.245871][ T6863] ? get_compat_msghdr+0x11b/0x170 [ 74.247283][ T6863] ___sys_sendmsg+0x135/0x1e0 [ 74.248583][ T6863] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.250019][ T6863] ? __pfx_lock_release+0x10/0x10 [ 74.251347][ T6863] ? trace_lock_acquire+0x14e/0x1f0 [ 74.252741][ T6863] ? __fget_files+0x206/0x3a0 [ 74.254053][ T6863] __sys_sendmsg+0x16e/0x220 [ 74.255304][ T6863] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.256670][ T6863] __do_fast_syscall_32+0x73/0x120 [ 74.258080][ T6863] do_fast_syscall_32+0x32/0x80 [ 74.259367][ T6863] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.261099][ T6863] RIP: 0023:0xf7fb1579 [ 74.262209][ T6863] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 74.267371][ T6863] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 74.269599][ T6863] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 74.271702][ T6863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.273783][ T6863] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.275974][ T6863] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 74.278103][ T6863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.280232][ T6863] [ 74.282632][ T6129] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 74.477326][ T6129] usb 7-1: device descriptor read/64, error -71 [ 74.590106][ T6129] usb usb7-port1: attempt power cycle [ 74.785854][ T6885] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.787958][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.791550][ T6885] bridge0: left promiscuous mode [ 74.805532][ T6885] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.808212][ T6885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.811043][ T6885] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.813787][ T6885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.817173][ T6885] bridge0: entered promiscuous mode [ 74.937369][ T6129] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 74.958969][ T6129] usb 7-1: device descriptor read/8, error -71 [ 75.197887][ T6129] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 75.221414][ T6129] usb 7-1: device descriptor read/8, error -71 [ 75.338610][ T6129] usb usb7-port1: unable to enumerate USB device [ 75.792124][ T64] cfg80211: failed to load regulatory.db [ 76.509109][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.511887][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.515462][ T6929] bridge0: left promiscuous mode [ 76.534373][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.536884][ T6929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.539630][ T6929] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.542074][ T6929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.590730][ T6929] bridge0: entered promiscuous mode [ 77.194073][ T6943] net_ratelimit: 14 callbacks suppressed [ 77.194084][ T6943] netlink: zone id is out of range [ 77.196969][ T6943] netlink: zone id is out of range [ 77.198439][ T6943] netlink: zone id is out of range [ 77.200222][ T6943] netlink: zone id is out of range [ 77.201584][ T6943] netlink: zone id is out of range [ 77.203526][ T6943] netlink: set zone limit has 8 unknown bytes [ 77.247771][ T6947] netlink: zone id is out of range [ 77.249590][ T6947] netlink: zone id is out of range [ 77.251218][ T6947] netlink: zone id is out of range [ 77.252996][ T6947] netlink: zone id is out of range [ 78.815728][ T6965] Falling back ldisc for ttyS3. [ 80.556482][ T7010] netlink: 44 bytes leftover after parsing attributes in process `syz.3.266'. [ 80.765974][ T7021] can0: slcan on ttyS3. [ 81.087438][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 81.210884][ T39] audit: type=1326 audit(1734490262.533:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.2.272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 81.216563][ T39] audit: type=1326 audit(1734490262.533:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.2.272" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 81.222678][ T39] audit: type=1326 audit(1734490262.533:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.2.272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 81.237348][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 81.239015][ T39] audit: type=1326 audit(1734490262.533:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.2.272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 81.246505][ T25] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 81.249565][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 81.252142][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.254858][ T25] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.259346][ T39] audit: type=1326 audit(1734490262.533:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.2.272" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 81.264812][ T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 81.267163][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.271914][ T39] audit: type=1326 audit(1734490262.533:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.2.272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 81.292563][ T39] audit: type=1326 audit(1734490262.533:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.2.272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 81.298665][ T39] audit: type=1326 audit(1734490262.533:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.2.272" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 81.304521][ T39] audit: type=1326 audit(1734490262.533:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.2.272" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 81.316914][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.319396][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.321440][ T39] audit: type=1326 audit(1734490262.543:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.2.272" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 81.322380][ T7043] bridge0: left promiscuous mode [ 81.399079][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.401031][ T7037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.403522][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.406119][ T7037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.422695][ T7037] bridge0: entered promiscuous mode [ 81.437830][ T7009] can0 (unregistered): slcan off ttyS3. [ 81.495966][ T25] usb 6-1: GET_CAPABILITIES returned 0 [ 81.497500][ T25] usbtmc 6-1:16.0: can't read capabilities [ 81.657629][ T25] usb 6-1: USB disconnect, device number 2 [ 82.423782][ T7076] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.594044][ T7078] net_ratelimit: 9 callbacks suppressed [ 82.594054][ T7078] netlink: zone id is out of range [ 82.596900][ T7078] netlink: zone id is out of range [ 82.598702][ T7078] netlink: zone id is out of range [ 82.600140][ T7078] netlink: zone id is out of range [ 82.601362][ T7078] netlink: zone id is out of range [ 82.603089][ T7078] netlink: set zone limit has 8 unknown bytes [ 83.359106][ T7097] netlink: 32 bytes leftover after parsing attributes in process `syz.2.285'. [ 83.493884][ T7103] loop9: detected capacity change from 0 to 7 [ 83.496913][ T7103] Dev loop9: unable to read RDB block 7 [ 83.500723][ T7103] loop9: unable to read partition table [ 83.503373][ T7103] loop9: partition table beyond EOD, truncated [ 83.506132][ T7103] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 84.084983][ T7131] capability: warning: `syz.1.290' uses deprecated v2 capabilities in a way that may be insecure [ 84.304966][ T7154] netlink: zone id is out of range [ 84.306840][ T7154] netlink: zone id is out of range [ 84.308688][ T7154] netlink: zone id is out of range [ 84.310567][ T7154] netlink: zone id is out of range [ 84.496848][ T9] IPVS: starting estimator thread 0... [ 84.537403][ T6129] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 84.597447][ T7166] IPVS: using max 38 ests per chain, 91200 per kthread [ 84.682988][ T7170] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.684955][ T7170] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.687147][ T7170] bridge0: left promiscuous mode [ 84.697630][ T6129] usb 8-1: Using ep0 maxpacket: 8 [ 84.700310][ T6129] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.702868][ T6129] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.705575][ T6129] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.708183][ T6129] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.714719][ T7170] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.716567][ T7170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.717291][ T6129] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.718561][ T7170] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.720713][ T6129] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.722571][ T7170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.731110][ T7170] bridge0: entered promiscuous mode [ 84.933091][ T6129] usb 8-1: GET_CAPABILITIES returned 0 [ 84.934615][ T6129] usbtmc 8-1:16.0: can't read capabilities [ 85.141956][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.145104][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.147459][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.149798][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.152119][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.154470][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.156805][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.159147][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.161505][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.163857][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.166204][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.171795][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.174244][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.176619][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.178991][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.181374][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 85.190295][ T35] usb 8-1: USB disconnect, device number 2 [ 85.589921][ T7181] random: crng reseeded on system resumption [ 85.700019][ T7183] syz.0.298: attempt to access beyond end of device [ 85.700019][ T7183] nbd0: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 85.719144][ T7183] XFS (nbd0): SB validate failed with error -5. [ 85.793724][ T7190] : renamed from ipvlan1 [ 86.700228][ T7223] syz.3.305: attempt to access beyond end of device [ 86.700228][ T7223] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 86.703798][ T7223] XFS (nbd3): SB validate failed with error -5. [ 87.088544][ T7243] tipc: Started in network mode [ 87.089897][ T7243] tipc: Node identity ffffffff, cluster identity 4711 [ 87.091657][ T7243] tipc: Node number set to 4294967295 [ 87.236672][ T7245] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 87.626284][ T7271] net_ratelimit: 15 callbacks suppressed [ 87.626295][ T7271] netlink: zone id is out of range [ 87.629287][ T7271] netlink: zone id is out of range [ 87.630663][ T7271] netlink: zone id is out of range [ 87.632032][ T7271] netlink: zone id is out of range [ 87.633747][ T7271] netlink: zone id is out of range [ 87.635083][ T7271] netlink: zone id is out of range [ 87.636902][ T7271] netlink: set zone limit has 8 unknown bytes [ 87.792655][ T7269] 9pnet: Unknown protocol version 9p200 [ 87.797565][ T7269] lo speed is unknown, defaulting to 1000 [ 87.807750][ T7269] lo speed is unknown, defaulting to 1000 [ 87.830845][ T7269] lo speed is unknown, defaulting to 1000 [ 87.836350][ T7269] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 88.042105][ T7269] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 88.061565][ T7269] lo speed is unknown, defaulting to 1000 [ 88.063676][ T7269] lo speed is unknown, defaulting to 1000 [ 88.065912][ T7269] lo speed is unknown, defaulting to 1000 [ 88.082323][ T7269] lo speed is unknown, defaulting to 1000 [ 88.084340][ T7269] lo speed is unknown, defaulting to 1000 [ 88.752648][ T7283] program syz.0.321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.759421][ T7283] ubi0: attaching mtd0 [ 88.761433][ T7283] ubi0: scanning is finished [ 88.764687][ T7283] ubi0: empty MTD device detected [ 88.838570][ T7283] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 88.841316][ T7283] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 88.843915][ T7283] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 88.846418][ T7283] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 88.849175][ T7283] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 88.851641][ T7283] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 88.854400][ T7283] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1294361200 [ 88.857093][ T7283] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 88.870511][ T7292] ubi0: background thread "ubi_bgt0d" started, PID 7292 [ 88.958233][ T7297] netlink: zone id is out of range [ 88.959767][ T7297] netlink: zone id is out of range [ 88.961285][ T7297] netlink: zone id is out of range [ 89.800852][ T7318] netlink: 'syz.3.330': attribute type 9 has an invalid length. [ 89.858121][ T7325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.333'. [ 90.207759][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.427510][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 90.431799][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 90.434540][ T9] usb 5-1: config 0 has no interface number 0 [ 90.436521][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 90.440162][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 90.443822][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 90.446179][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 90.449087][ T9] usb 5-1: Product: syz [ 90.450560][ T9] usb 5-1: SerialNumber: syz [ 90.453527][ T9] usb 5-1: config 0 descriptor?? [ 90.458817][ T9] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 90.462393][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input7 [ 90.611723][ T7360] loop9: detected capacity change from 0 to 7 [ 90.617210][ T7360] Dev loop9: unable to read RDB block 7 [ 90.619627][ T7360] loop9: unable to read partition table [ 90.621383][ T7360] loop9: partition table beyond EOD, truncated [ 90.623177][ T7360] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 90.714500][ T7335] vxcan3: entered promiscuous mode [ 90.719528][ T7335] vxcan3: entered allmulticast mode [ 90.912203][ T64] usb 5-1: USB disconnect, device number 3 [ 90.912790][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 90.916396][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 90.926560][ T64] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 91.525302][ T7372] lo speed is unknown, defaulting to 1000 [ 91.654493][ T7387] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 92.399667][ T7401] loop9: detected capacity change from 0 to 7 [ 92.401681][ T7401] Dev loop9: unable to read RDB block 7 [ 92.403238][ T7401] loop9: unable to read partition table [ 92.404786][ T7401] loop9: partition table beyond EOD, truncated [ 92.406490][ T7401] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 93.203827][ T7435] net_ratelimit: 27 callbacks suppressed [ 93.203838][ T7435] netlink: zone id is out of range [ 93.206886][ T7435] netlink: zone id is out of range [ 93.208413][ T7435] netlink: zone id is out of range [ 93.210118][ T7435] netlink: zone id is out of range [ 93.211449][ T7435] netlink: zone id is out of range [ 93.213313][ T7435] netlink: set zone limit has 8 unknown bytes [ 93.304229][ T7440] loop9: detected capacity change from 0 to 7 [ 93.335123][ T7440] Dev loop9: unable to read RDB block 7 [ 93.336682][ T7440] loop9: unable to read partition table [ 93.338397][ T7440] loop9: partition table beyond EOD, truncated [ 93.340067][ T7440] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 93.366390][ T7443] futex_wake_op: syz.3.377 tries to shift op by -1; fix this program [ 93.370362][ T7443] netlink: 188 bytes leftover after parsing attributes in process `syz.3.377'. [ 93.547409][ T39] kauditd_printk_skb: 541 callbacks suppressed [ 93.547482][ T39] audit: type=1326 audit(1734490274.813:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 93.554636][ T39] audit: type=1326 audit(1734490274.813:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 93.561510][ T39] audit: type=1326 audit(1734490274.813:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.377" exe="/syz-executor" sig=0 arch=40000003 syscall=379 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 93.568435][ T39] audit: type=1326 audit(1734490274.813:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 93.577350][ T39] audit: type=1326 audit(1734490274.813:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 93.584236][ T39] audit: type=1326 audit(1734490274.813:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.377" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 93.590296][ T39] audit: type=1326 audit(1734490274.813:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 93.595866][ T39] audit: type=1326 audit(1734490274.813:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 93.601803][ T39] audit: type=1326 audit(1734490274.813:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 93.607971][ T39] audit: type=1326 audit(1734490274.813:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 93.665556][ T7451] netlink: 44 bytes leftover after parsing attributes in process `syz.1.381'. [ 93.917352][ T64] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 94.044840][ T7455] can0: slcan on ttyS3. [ 94.087415][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 94.100378][ T64] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.102967][ T64] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.105477][ T64] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.108493][ T64] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.111951][ T64] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.114366][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.325982][ T64] usb 7-1: GET_CAPABILITIES returned 0 [ 94.330140][ T64] usbtmc 7-1:16.0: can't read capabilities [ 94.538753][ T9] usb 7-1: USB disconnect, device number 6 [ 94.558174][ T7450] can0 (unregistered): slcan off ttyS3. [ 95.073828][ T7504] netlink: 'syz.2.391': attribute type 13 has an invalid length. [ 95.127850][ T7507] loop9: detected capacity change from 0 to 7 [ 95.130167][ T7507] Dev loop9: unable to read RDB block 7 [ 95.131982][ T7507] loop9: unable to read partition table [ 95.133761][ T7507] loop9: partition table beyond EOD, truncated [ 95.135838][ T7507] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 95.180983][ T7512] netlink: zone id is out of range [ 95.184063][ T7512] netlink: zone id is out of range [ 95.188869][ T7512] netlink: zone id is out of range [ 95.190626][ T7512] netlink: zone id is out of range [ 95.291937][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 95.297642][ T7518] bridge_slave_1: left allmulticast mode [ 95.299616][ T7518] bridge_slave_1: left promiscuous mode [ 95.301348][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.304677][ T7518] bridge_slave_0: left allmulticast mode [ 95.306611][ T7518] bridge_slave_0: left promiscuous mode [ 95.309229][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.668501][ T5955] libceph: connect (1)[c::]:6789 error -101 [ 95.670599][ T5955] libceph: mon0 (1)[c::]:6789 connect error [ 95.717029][ T7527] ceph: No mds server is up or the cluster is laggy [ 96.668390][ T7565] syz.1.405: attempt to access beyond end of device [ 96.668390][ T7565] nbd1: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 96.671850][ T7565] XFS (nbd1): SB validate failed with error -5. [ 97.567131][ T7601] netlink: 32 bytes leftover after parsing attributes in process `syz.3.416'. [ 98.291464][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'. [ 98.608357][ T7645] loop9: detected capacity change from 0 to 7 [ 98.612021][ T7645] Dev loop9: unable to read RDB block 7 [ 98.614816][ T7645] loop9: unable to read partition table [ 98.616520][ T7645] loop9: partition table beyond EOD, truncated [ 98.620068][ T7645] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 98.678200][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.433'. [ 98.720155][ T7651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.435'. [ 98.738055][ T7655] net_ratelimit: 8 callbacks suppressed [ 98.738070][ T7655] netlink: zone id is out of range [ 98.741782][ T7655] netlink: zone id is out of range [ 98.743798][ T7655] netlink: zone id is out of range [ 98.746091][ T7655] netlink: zone id is out of range [ 98.748422][ T7655] netlink: zone id is out of range [ 98.750960][ T7655] netlink: set zone limit has 8 unknown bytes [ 98.918440][ T7665] netlink: zone id is out of range [ 98.920106][ T7665] netlink: zone id is out of range [ 98.921451][ T7665] netlink: zone id is out of range [ 98.923489][ T7665] netlink: set zone limit has 8 unknown bytes [ 99.556886][ T7679] overlay: Unknown parameter 'smackfstransmute' [ 99.744983][ T7685] loop9: detected capacity change from 0 to 7 [ 99.746968][ T7685] Dev loop9: unable to read RDB block 7 [ 99.748501][ T7685] loop9: unable to read partition table [ 99.750039][ T7685] loop9: partition table beyond EOD, truncated [ 99.751672][ T7685] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 100.327713][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.329736][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.332057][ T7717] bridge0: left promiscuous mode [ 100.354557][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.356435][ T7717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.358490][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.360349][ T7717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.367497][ T7717] bridge0: entered promiscuous mode [ 101.231953][ T7753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.465'. [ 101.405615][ T7756] hpfs: Bad magic ... probably not HPFS [ 101.589880][ T7762] netlink: 44 bytes leftover after parsing attributes in process `syz.2.468'. [ 101.661062][ T7770] netlink: 44 bytes leftover after parsing attributes in process `syz.0.472'. [ 102.152012][ T7773] can0: slcan on ttyS3. [ 102.578321][ T7769] can0 (unregistered): slcan off ttyS3. [ 102.662272][ T7812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.481'. [ 102.780609][ T7824] fuse: Unknown parameter 'šd90x0000000000000008' [ 102.797546][ T7824] ======================================================= [ 102.797546][ T7824] WARNING: The mand mount option has been deprecated and [ 102.797546][ T7824] and is ignored by this kernel. Remove the mand [ 102.797546][ T7824] option from the mount to silence this warning. [ 102.797546][ T7824] ======================================================= [ 102.956165][ T7824] 9pnet: Could not find request transport: f„ [ 103.119210][ T7845] netlink: 44 bytes leftover after parsing attributes in process `syz.1.491'. [ 103.146403][ T7849] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 103.362543][ T7855] can0: slcan on ttyS3. [ 103.362588][ T7853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.494'. [ 103.439248][ T5955] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.586228][ T7864] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 103.587178][ T7847] can: request_module (can-proto-0) failed. [ 103.599735][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 103.610783][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.620159][ T5955] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 103.624586][ T5955] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 103.630182][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.636617][ T5955] usb 5-1: config 0 descriptor?? [ 103.809006][ T7877] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 103.810905][ T7876] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 103.812551][ T7876] syzkaller1: linktype set to 804 [ 103.815533][ T7876] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 103.818081][ T7876] netlink: 224 bytes leftover after parsing attributes in process `syz.3.497'. [ 103.873087][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.875626][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.889866][ T7881] 9pnet_fd: Insufficient options for proto=fd [ 104.018201][ T7844] can0 (unregistered): slcan off ttyS3. [ 104.137639][ T35] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 104.187487][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.297595][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 104.303739][ T35] usb 8-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.307808][ T35] usb 8-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.312158][ T35] usb 8-1: config 1 interface 0 has no altsetting 0 [ 104.316320][ T35] usb 8-1: New USB device found, idVendor=0eef, idProduct=73f7, bcdDevice= 0.40 [ 104.318741][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.324474][ T35] usb 8-1: Product: з [ 104.325656][ T35] usb 8-1: Manufacturer: 今䅯爽䮸î›ë¸»í™±ê©Ÿî‘˜ë’„剴̆ꯖ㗻æ¥ã™å‚䊎辘æ³âŠë¦ªå¶»åµ‰ç´¤í–†ã³ç…´ï¤”綄퀄ï¤î§‚渃å±ë°¬â¨†è®«áºŸä²¦ [ 104.330785][ T35] usb 8-1: SerialNumber:  [ 104.447884][ T7849] bond1: entered promiscuous mode [ 104.449619][ T7849] bond1: entered allmulticast mode [ 104.457715][ T7849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.549993][ T7849] bond1 (unregistering): Released all slaves [ 104.553218][ T35] usbhid 8-1:1.0: can't add hid device: -71 [ 104.554979][ T35] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 104.560102][ T35] usb 8-1: USB disconnect, device number 3 [ 104.595586][ T7899] syz.1.500: attempt to access beyond end of device [ 104.595586][ T7899] nbd1: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 104.599337][ T7899] XFS (nbd1): SB validate failed with error -5. [ 105.229065][ T25] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 105.377380][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 105.380697][ T25] usb 7-1: config 0 has no interfaces? [ 105.382694][ T25] usb 7-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 105.385942][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.391199][ T25] usb 7-1: config 0 descriptor?? [ 106.174740][ T5955] usbhid 5-1:0.0: can't add hid device: -71 [ 106.178417][ T5955] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 106.184506][ T5955] usb 5-1: USB disconnect, device number 4 [ 106.396261][ T7933] syz.0.508: attempt to access beyond end of device [ 106.396261][ T7933] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 106.400620][ T7933] FAT-fs (nbd0): unable to read boot sector [ 106.407147][ T7935] netlink: 'syz.3.507': attribute type 10 has an invalid length. [ 106.423214][ T7935] team0: Port device geneve1 added [ 106.848090][ T7940] bridge0: port 3(syz_tun) entered blocking state [ 106.851219][ T7940] bridge0: port 3(syz_tun) entered disabled state [ 106.854048][ T7940] syz_tun: entered allmulticast mode [ 106.858552][ T7940] syz_tun: entered promiscuous mode [ 106.862356][ T7940] bridge0: port 3(syz_tun) entered blocking state [ 106.864607][ T7940] bridge0: port 3(syz_tun) entered forwarding state [ 107.134143][ T7952] loop9: detected capacity change from 0 to 7 [ 107.136748][ T7952] Dev loop9: unable to read RDB block 7 [ 107.138764][ T7952] loop9: unable to read partition table [ 107.140824][ T7952] loop9: partition table beyond EOD, truncated [ 107.142685][ T7952] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 107.570837][ T7958] syz.3.515: attempt to access beyond end of device [ 107.570837][ T7958] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 107.576409][ T7958] XFS (nbd3): SB validate failed with error -5. [ 107.960965][ T25] usb 7-1: USB disconnect, device number 7 [ 108.908111][ T8002] FAULT_INJECTION: forcing a failure. [ 108.908111][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 108.911410][ T8002] CPU: 1 UID: 0 PID: 8002 Comm: syz.1.527 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 108.914177][ T8002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.916987][ T8002] Call Trace: [ 108.917952][ T8002] [ 108.918746][ T8002] dump_stack_lvl+0x16c/0x1f0 [ 108.919996][ T8002] should_fail_ex+0x497/0x5b0 [ 108.921286][ T8002] ? fs_reclaim_acquire+0xae/0x150 [ 108.922665][ T8002] should_failslab+0xc2/0x120 [ 108.923909][ T8002] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 108.925344][ T8002] ? vfs_write+0x306/0x1150 [ 108.926553][ T8002] ? getname_flags.part.0+0x4c/0x550 [ 108.927954][ T8002] getname_flags.part.0+0x4c/0x550 [ 108.930384][ T8002] getname+0x8d/0xe0 [ 108.930401][ T8002] do_sys_openat2+0x104/0x1e0 [ 108.930415][ T8002] ? __pfx_do_sys_openat2+0x10/0x10 [ 108.930430][ T8002] ? __fget_files+0x206/0x3a0 [ 108.930444][ T8002] __ia32_sys_creat+0xcc/0x120 [ 108.930458][ T8002] ? __pfx___ia32_sys_creat+0x10/0x10 [ 108.930472][ T8002] ? __pfx_ksys_write+0x10/0x10 [ 108.930484][ T8002] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 108.930498][ T8002] ? lockdep_hardirqs_on+0x7c/0x110 [ 108.930510][ T8002] __do_fast_syscall_32+0x73/0x120 [ 108.930523][ T8002] do_fast_syscall_32+0x32/0x80 [ 108.930535][ T8002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.930550][ T8002] RIP: 0023:0xf7f84579 [ 108.930559][ T8002] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 108.930568][ T8002] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000008 [ 108.930580][ T8002] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000000000000 [ 108.930586][ T8002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.930592][ T8002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.930598][ T8002] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 108.930604][ T8002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.930616][ T8002] [ 108.930654][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.056774][ T8014] loop9: detected capacity change from 0 to 7 [ 109.059088][ T8014] Dev loop9: unable to read RDB block 7 [ 109.060584][ T8014] loop9: unable to read partition table [ 109.062374][ T8014] loop9: partition table beyond EOD, truncated [ 109.063990][ T8014] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 110.169555][ T8044] net_ratelimit: 9 callbacks suppressed [ 110.169568][ T8044] netlink: zone id is out of range [ 110.172484][ T8044] netlink: zone id is out of range [ 110.174170][ T8044] netlink: zone id is out of range [ 110.175548][ T8044] netlink: zone id is out of range [ 110.187957][ T8044] netlink: set zone limit has 8 unknown bytes [ 110.315889][ T8030] block nbd2: shutting down sockets [ 111.648668][ T8081] bridge0: port 3(syz_tun) entered disabled state [ 111.650437][ T8081] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.652291][ T8081] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.654485][ T8081] bridge0: left promiscuous mode [ 111.804366][ T8074] bridge0: port 3(syz_tun) entered blocking state [ 111.806757][ T8074] bridge0: port 3(syz_tun) entered forwarding state [ 111.809072][ T8074] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.811610][ T8074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.814344][ T8074] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.816962][ T8074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.829116][ T8086] syz.0.551: attempt to access beyond end of device [ 111.829116][ T8086] nbd0: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 111.833289][ T8074] bridge0: entered promiscuous mode [ 111.833364][ T8086] XFS (nbd0): SB validate failed with error -5. [ 112.624905][ T8099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.060007][ T8120] loop9: detected capacity change from 0 to 7 [ 113.062171][ T8120] Dev loop9: unable to read RDB block 7 [ 113.063726][ T8120] loop9: unable to read partition table [ 113.065401][ T8120] loop9: partition table beyond EOD, truncated [ 113.067131][ T8120] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 113.227457][ T25] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 113.370286][ T8131] block device autoloading is deprecated and will be removed. [ 113.376674][ T8129] md: md2 stopped. [ 113.378382][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 113.381630][ T25] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 113.383860][ T25] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.387000][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.391354][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.394794][ T25] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.400817][ T25] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.404032][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.711192][ T25] usb 7-1: usb_control_msg returned -32 [ 113.712742][ T25] usbtmc 7-1:16.0: can't read capabilities [ 114.069001][ T8142] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 114.077607][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 114.080294][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 114.143541][ T5949] block nbd0: Receive control failed (result -107) [ 114.272034][ T35] usb 7-1: USB disconnect, device number 8 [ 114.360499][ T8137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.568'. [ 114.417624][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.459577][ T8152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.569'. [ 114.567584][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.617500][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.807412][ T6129] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.838410][ T8156] netlink: zone id is out of range [ 114.839894][ T8156] netlink: zone id is out of range [ 114.841847][ T8156] netlink: zone id is out of range [ 114.843235][ T8156] netlink: zone id is out of range [ 114.845347][ T8156] netlink: set zone limit has 8 unknown bytes [ 114.887420][ T6129] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.943643][ T8162] netlink: 48 bytes leftover after parsing attributes in process `syz.1.571'. [ 114.997510][ T834] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.097454][ T834] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.177455][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.287414][ T6129] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.337567][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.780757][ T8182] netlink: 'syz.1.577': attribute type 7 has an invalid length. [ 115.788090][ T8182] netlink: 244 bytes leftover after parsing attributes in process `syz.1.577'. [ 116.067365][ T834] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 116.070059][ T8185] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.072560][ T8185] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.082616][ T8185] bridge0: left promiscuous mode [ 116.086393][ T8186] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.088437][ T8186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.091113][ T8186] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.093477][ T8186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.098789][ T8186] bridge0: entered promiscuous mode [ 116.218939][ T834] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 116.221869][ T834] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 116.224455][ T834] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.226839][ T834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.257647][ T8182] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.264080][ T834] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.763545][ T8201] FAULT_INJECTION: forcing a failure. [ 116.763545][ T8201] name failslab, interval 1, probability 0, space 0, times 0 [ 116.766853][ T8201] CPU: 1 UID: 0 PID: 8201 Comm: syz.2.581 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 116.769601][ T8201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.772408][ T8201] Call Trace: [ 116.773307][ T8201] [ 116.774098][ T8201] dump_stack_lvl+0x16c/0x1f0 [ 116.775362][ T8201] should_fail_ex+0x497/0x5b0 [ 116.776619][ T8201] ? fs_reclaim_acquire+0xae/0x150 [ 116.778002][ T8201] should_failslab+0xc2/0x120 [ 116.779273][ T8201] __kmalloc_noprof+0xce/0x4f0 [ 116.780537][ T8201] ? __pfx_d_absolute_path+0x10/0x10 [ 116.781952][ T8201] ? tomoyo_encode2+0x100/0x3e0 [ 116.783260][ T8201] tomoyo_encode2+0x100/0x3e0 [ 116.784500][ T8201] ? rcu_is_watching+0x12/0xc0 [ 116.785773][ T8201] tomoyo_realpath_from_path+0x1a7/0x710 [ 116.787254][ T8201] tomoyo_check_open_permission+0x2ad/0x3c0 [ 116.788877][ T8201] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 116.790566][ T8201] ? __pfx___lock_acquire+0x10/0x10 [ 116.791970][ T8201] ? __pfx_hook_file_open+0x10/0x10 [ 116.793361][ T8201] ? lock_acquire+0x2f/0xb0 [ 116.794553][ T8201] tomoyo_file_open+0x6b/0x90 [ 116.795798][ T8201] security_file_open+0x84/0x1e0 [ 116.797112][ T8201] do_dentry_open+0x57e/0x1ea0 [ 116.798404][ T8201] ? inode_permission+0xdd/0x5f0 [ 116.799734][ T8201] vfs_open+0x82/0x3f0 [ 116.800834][ T8201] ? may_open+0x1f2/0x400 [ 116.801982][ T8201] path_openat+0x1e6a/0x2d60 [ 116.803233][ T8201] ? __pfx_path_openat+0x10/0x10 [ 116.804530][ T8201] ? __pfx___lock_acquire+0x10/0x10 [ 116.805914][ T8201] ? lock_acquire.part.0+0x11b/0x380 [ 116.807295][ T8201] ? find_held_lock+0x2d/0x110 [ 116.808579][ T8201] do_filp_open+0x20c/0x470 [ 116.809789][ T8201] ? __pfx_do_filp_open+0x10/0x10 [ 116.811130][ T8201] ? find_held_lock+0x2d/0x110 [ 116.812434][ T8201] ? _raw_spin_unlock+0x28/0x50 [ 116.813742][ T8201] ? alloc_fd+0x41f/0x760 [ 116.814883][ T8201] do_sys_openat2+0x17a/0x1e0 [ 116.816131][ T8201] ? __pfx_do_sys_openat2+0x10/0x10 [ 116.817516][ T8201] ? __fget_files+0x206/0x3a0 [ 116.818762][ T8201] __ia32_sys_creat+0xcc/0x120 [ 116.820041][ T8201] ? __pfx___ia32_sys_creat+0x10/0x10 [ 116.821484][ T8201] ? __pfx_ksys_write+0x10/0x10 [ 116.822909][ T8201] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 116.824669][ T8201] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.826073][ T8201] __do_fast_syscall_32+0x73/0x120 [ 116.827447][ T8201] do_fast_syscall_32+0x32/0x80 [ 116.828757][ T8201] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.830445][ T8201] RIP: 0023:0xf7f58579 [ 116.831532][ T8201] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 116.836641][ T8201] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000008 [ 116.838867][ T8201] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000000000000 [ 116.840956][ T8201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.843047][ T8201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.845157][ T8201] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 116.847236][ T8201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.849329][ T8201] [ 116.850295][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.854138][ T8201] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.988721][ T6005] usb 6-1: USB disconnect, device number 3 [ 117.382090][ T8213] net_ratelimit: 7 callbacks suppressed [ 117.382105][ T8213] netlink: zone id is out of range [ 117.385961][ T8213] netlink: zone id is out of range [ 117.389028][ T8213] netlink: zone id is out of range [ 117.390431][ T8213] netlink: zone id is out of range [ 117.392099][ T8213] netlink: zone id is out of range [ 117.393483][ T8213] netlink: zone id is out of range [ 117.395300][ T8213] netlink: set zone limit has 8 unknown bytes [ 118.401469][ T8223] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 118.404424][ T8223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.462683][ T8227] loop9: detected capacity change from 0 to 7 [ 118.464688][ T8227] Dev loop9: unable to read RDB block 7 [ 118.466186][ T8227] loop9: unable to read partition table [ 118.468078][ T8227] loop9: partition table beyond EOD, truncated [ 118.469757][ T8227] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.578459][ T8238] netlink: 32 bytes leftover after parsing attributes in process `syz.2.594'. [ 119.220608][ T8251] netlink: 32 bytes leftover after parsing attributes in process `syz.0.599'. [ 119.319961][ T8255] loop9: detected capacity change from 0 to 7 [ 119.322599][ T8255] Dev loop9: unable to read RDB block 7 [ 119.324571][ T8255] loop9: unable to read partition table [ 119.326676][ T8255] loop9: partition table beyond EOD, truncated [ 119.329763][ T8255] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 119.444623][ T8263] input: syz0 as /devices/virtual/input/input8 [ 119.447300][ T8263] input: failed to attach handler leds to device input8, error: -6 [ 119.491648][ T8262] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 119.511698][ T8262] evm: overlay not supported [ 119.787163][ T8281] fuse: Bad value for 'user_id' [ 119.788993][ T8281] fuse: Bad value for 'user_id' [ 120.853342][ T8292] netlink: zone id is out of range [ 121.181222][ T8300] netlink: 44 bytes leftover after parsing attributes in process `syz.0.614'. [ 121.482649][ T8305] can0: slcan on ttyS3. [ 122.129698][ T8299] can0 (unregistered): slcan off ttyS3. [ 122.222111][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.224776][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.252573][ T8342] bridge0: left promiscuous mode [ 122.580665][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.583181][ T8335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.585758][ T8335] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.588214][ T8335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.593627][ T8335] bridge0: entered promiscuous mode [ 122.776761][ T8354] binder: 8353:8354 ioctl 40046205 0 returned -22 [ 123.085647][ T8368] overlayfs: failed to resolve './file0/file0': -2 [ 123.960887][ T8380] syz.1.631: attempt to access beyond end of device [ 123.960887][ T8380] nbd1: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 123.966527][ T8380] XFS (nbd1): SB validate failed with error -5. [ 124.221866][ T8392] fuse: Unknown parameter '0x0000000000000007' [ 125.774722][ T8415] PM: Enabling pm_trace changes system date and time during resume. [ 125.774722][ T8415] PM: Correct system time has to be restored manually after resume. [ 125.852829][ T8418] pim6reg1: entered promiscuous mode [ 125.854216][ T8418] pim6reg1: entered allmulticast mode [ 127.119942][ T8441] Cannot find del_set index 4 as target [ 127.135006][ T8442] net_ratelimit: 6 callbacks suppressed [ 127.135015][ T8442] netlink: zone id is out of range [ 127.138866][ T8442] netlink: zone id is out of range [ 127.140261][ T8442] netlink: zone id is out of range [ 127.141648][ T8442] netlink: zone id is out of range [ 127.143847][ T8442] netlink: zone id is out of range [ 127.145780][ T8442] netlink: zone id is out of range [ 127.149253][ T8441] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 127.153550][ T8442] netlink: set zone limit has 8 unknown bytes [ 128.093153][ T8454] loop9: detected capacity change from 0 to 7 [ 128.095188][ T8454] Dev loop9: unable to read RDB block 7 [ 128.096771][ T8454] loop9: unable to read partition table [ 128.099306][ T8454] loop9: partition table beyond EOD, truncated [ 128.101404][ T8454] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 128.194670][ T8457] netfs: Couldn't get user pages (rc=-14) [ 128.500674][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 128.500691][ T39] audit: type=1326 audit(1734490310.814:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 128.513033][ T39] audit: type=1326 audit(1734490310.814:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 128.547370][ T39] audit: type=1326 audit(1734490310.814:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 128.553795][ T39] audit: type=1326 audit(1734490310.814:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 128.567462][ T39] audit: type=1326 audit(1734490310.814:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 128.572928][ T39] audit: type=1326 audit(1734490310.814:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 128.697339][ T39] audit: type=1326 audit(1734490310.814:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 128.711590][ T8466] orangefs_mount: mount request failed with -4 [ 128.727281][ T39] audit: type=1326 audit(1734490310.814:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 128.741943][ T39] audit: type=1326 audit(1734490310.814:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 128.748115][ T39] audit: type=1326 audit(1734490310.814:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 129.030514][ T8473] netlink: 'syz.2.654': attribute type 12 has an invalid length. [ 129.650826][ T8473] syz.2.654: attempt to access beyond end of device [ 129.650826][ T8473] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 129.655458][ T8473] XFS (nbd2): SB validate failed with error -5. [ 130.451143][ T8515] netlink: 32 bytes leftover after parsing attributes in process `syz.2.667'. [ 132.109138][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.251915][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 132.325897][ T8543] 9pnet_fd: Insufficient options for proto=fd [ 132.327430][ T8545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.676'. [ 132.725816][ T8559] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 132.948767][ T8554] syz.1.679: attempt to access beyond end of device [ 132.948767][ T8554] nbd1: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 132.953346][ T8554] XFS (nbd1): SB validate failed with error -5. [ 133.012867][ T8566] loop9: detected capacity change from 0 to 7 [ 133.015671][ T8566] Dev loop9: unable to read RDB block 7 [ 133.017911][ T8566] loop9: unable to read partition table [ 133.019886][ T8566] loop9: partition table beyond EOD, truncated [ 133.022142][ T8566] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 133.111386][ T8577] netlink: 32 bytes leftover after parsing attributes in process `syz.3.685'. [ 133.142575][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 133.142595][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 133.557615][ T6005] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 133.727316][ T6005] usb 6-1: Using ep0 maxpacket: 16 [ 133.731605][ T6005] usb 6-1: config 0 has no interfaces? [ 133.735455][ T6005] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89 [ 133.738103][ T6005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.740348][ T6005] usb 6-1: Product: syz [ 133.741493][ T6005] usb 6-1: Manufacturer: syz [ 133.743648][ T6005] usb 6-1: SerialNumber: syz [ 133.752662][ T6005] usb 6-1: config 0 descriptor?? [ 134.113252][ T8600] Process accounting resumed [ 134.126300][ T8604] loop9: detected capacity change from 0 to 7 [ 134.128334][ T8604] Dev loop9: unable to read RDB block 7 [ 134.129810][ T8604] loop9: unable to read partition table [ 134.131330][ T8604] loop9: partition table beyond EOD, truncated [ 134.132967][ T8604] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.229830][ T8612] netlink: 10 bytes leftover after parsing attributes in process `syz.3.696'. [ 134.317182][ T6005] usb 6-1: USB disconnect, device number 4 [ 134.585408][ T8619] syz.3.697: attempt to access beyond end of device [ 134.585408][ T8619] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 134.589568][ T8619] XFS (nbd3): SB validate failed with error -5. [ 135.228070][ T8640] loop9: detected capacity change from 0 to 7 [ 135.230128][ T8640] Dev loop9: unable to read RDB block 7 [ 135.231600][ T8640] loop9: unable to read partition table [ 135.233162][ T8640] loop9: partition table beyond EOD, truncated [ 135.234838][ T8640] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 135.497161][ T8650] program syz.3.704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.737338][ T834] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 136.897478][ T834] usb 6-1: Using ep0 maxpacket: 8 [ 136.901583][ T834] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 136.903609][ T834] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 136.906895][ T834] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.915578][ T834] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.919985][ T834] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 136.924758][ T834] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 136.926907][ T834] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 136.932612][ T834] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.936173][ T834] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.939680][ T834] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 136.943669][ T834] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 136.945842][ T834] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 136.954189][ T834] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.961989][ T834] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.965193][ T834] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 136.976194][ T834] usb 6-1: string descriptor 0 read error: -22 [ 136.979868][ T834] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 136.983744][ T834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.993914][ T834] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 137.084009][ T8672] syz.3.710: attempt to access beyond end of device [ 137.084009][ T8672] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 137.089434][ T8672] XFS (nbd3): SB validate failed with error -5. [ 137.414955][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 138.618112][ T8692] syz.2.713: attempt to access beyond end of device [ 138.618112][ T8692] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 138.622103][ T8692] XFS (nbd2): SB validate failed with error -5. [ 139.794148][ T8714] [U] [ 139.795137][ T8714] [U] [ 139.796026][ T8714] [U] [ 139.797049][ T8714] [U] [ 139.801500][ T8714] [U] [ 139.802351][ T8714] [U] [ 139.803129][ T8714] [U] [ 139.803860][ T8714] [U] [ 139.804738][ T8714] [U] [ 139.805478][ T8714] [U] [ 139.806421][ T8714] [U] [ 139.807334][ T8714] [U] [ 139.808486][ T8714] [U] [ 139.809257][ T8714] [U] [ 139.809995][ T8714] [U] [ 139.810736][ T8714] [U] [ 139.811491][ T8714] [U] [ 139.812243][ T8714] [U] [ 139.813016][ T8714] [U] [ 139.813751][ T8714] [U] [ 139.814506][ T8714] [U] [ 139.815368][ T8714] [U] [ 139.816345][ T8714] [U] [ 139.817388][ T8714] [U] [ 139.819214][ T8714] [U] [ 139.820056][ T8714] [U] [ 139.820804][ T8714] [U] [ 139.821531][ T8714] [U] [ 139.822268][ T8714] [U] [ 139.823024][ T8714] [U] [ 139.823761][ T8714] [U] [ 139.824489][ T8714] [U] [ 139.825356][ T8714] [U] [ 139.826159][ T8714] [U] [ 139.826886][ T8714] [U] [ 139.827841][ T8714] [U] [ 139.827947][ T6005] usb 6-1: USB disconnect, device number 5 [ 139.829983][ T8714] [U] [ 139.831457][ T8714] [U] [ 139.832551][ T8714] [U] [ 139.833652][ T8714] [U] [ 139.834715][ T8714] [U] [ 139.835794][ T8714] [U] [ 139.836852][ T8714] [U] [ 139.837893][ T8714] [U] [ 139.840618][ T8714] [U] [ 139.841627][ T8714] [U] [ 139.842401][ T8714] [U] [ 139.843126][ T8714] [U] [ 139.844870][ T8714] [U] [ 139.845646][ T8714] [U] [ 139.846408][ T8714] [U] [ 139.847141][ T8714] [U] [ 139.852215][ T8714] [U] [ 139.853227][ T8714] [U] [ 139.854201][ T8714] [U] [ 139.855175][ T8714] [U] [ 139.856215][ T8714] [U] [ 139.857261][ T8714] [U] [ 139.858220][ T8714] [U] [ 139.858308][ T8715] netlink: 'syz.3.719': attribute type 27 has an invalid length. [ 139.859183][ T8714] [U] [ 139.863996][ T8714] [U] [ 139.865019][ T8714] [U] [ 139.865995][ T8714] [U] [ 139.866999][ T8714] [U] [ 139.868173][ T8714] [U] [ 139.869158][ T8714] [U] [ 139.870109][ T8714] [U] [ 139.871068][ T8714] [U] [ 139.872046][ T8714] [U] [ 139.873009][ T8714] [U] [ 139.873962][ T8714] [U] [ 139.874922][ T8714] [U] [ 139.875921][ T8714] [U] [ 139.876915][ T8714] [U] [ 139.877906][ T8714] [U] [ 139.878862][ T8714] [U] [ 139.880449][ T8714] [U] [ 139.881268][ T8714] [U] [ 139.881997][ T8714] [U] [ 139.882752][ T8714] [U] [ 139.883572][ T8714] [U] [ 139.884310][ T8714] [U] [ 139.885054][ T8714] [U] [ 139.885782][ T8714] [U] [ 139.886524][ T8714] [U] [ 139.887266][ T8714] [U] [ 139.887991][ T8714] [U] [ 139.888727][ T8714] [U] [ 139.890512][ T8714] [U] [ 139.891507][ T8714] [U] [ 139.892467][ T8714] [U] [ 139.893433][ T8714] [U] [ 139.894452][ T8714] [U] [ 139.895429][ T8714] [U] [ 139.896391][ T8714] [U] [ 139.897371][ T8714] [U] [ 139.898892][ T8714] [U] [ 139.899893][ T8714] [U] [ 139.900862][ T8714] [U] [ 139.901822][ T8714] [U] [ 139.902828][ T8714] [U] [ 139.903805][ T8714] [U] [ 139.904786][ T8714] [U] [ 139.905748][ T8714] [U] [ 139.906776][ T8714] [U] [ 139.907757][ T8714] [U] [ 139.908964][ T8714] [U] [ 139.909940][ T8714] [U] [ 139.913210][ T8714] [U] [ 139.914197][ T8714] [U] [ 139.915171][ T8714] [U] [ 139.915667][ T8718] netlink: 'syz.3.719': attribute type 27 has an invalid length. [ 139.916142][ T8714] [U] [ 139.920987][ T8714] [U] [ 139.921973][ T8714] [U] [ 139.922947][ T8714] [U] [ 139.923913][ T8714] [U] [ 139.924892][ T8714] [U] [ 139.925858][ T8714] [U] [ 139.926818][ T8714] [U] [ 139.927804][ T8714] [U] [ 139.928869][ T8714] [U] [ 139.929838][ T8714] [U] [ 139.930791][ T8714] [U] [ 139.931751][ T8714] [U] [ 139.932751][ T8714] [U] [ 139.933710][ T8714] [U] [ 139.934669][ T8714] [U] [ 139.941638][ T8717] netlink: zone id is out of range [ 139.943105][ T8717] netlink: zone id is out of range [ 139.945427][ T8717] netlink: zone id is out of range [ 139.946809][ T8717] netlink: zone id is out of range [ 139.948815][ T8717] netlink: zone id is out of range [ 139.950147][ T8717] netlink: zone id is out of range [ 139.952007][ T8717] netlink: set zone limit has 8 unknown bytes [ 139.995024][ T8715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.999098][ T8714] [U] [ 140.003020][ T8715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.064671][ T8715] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.067002][ T8715] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.070836][ T8715] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.074195][ T8715] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.100215][ T5955] lo speed is unknown, defaulting to 1000 [ 140.295711][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.721'. [ 140.452153][ T8720] hsr_slave_1 (unregistering): left promiscuous mode [ 140.837462][ T834] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 140.876123][ T8732] netlink: zone id is out of range [ 140.877567][ T8732] netlink: zone id is out of range [ 140.879090][ T8732] netlink: zone id is out of range [ 140.997739][ T834] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 141.002338][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.005912][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.009907][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 141.013380][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 141.017586][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.019921][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.022729][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 141.025297][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 141.028179][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.030512][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.033362][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 141.036053][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 141.038878][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.041532][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.045338][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 141.048281][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 141.050752][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.053556][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.056824][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 141.059537][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 141.062675][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.065219][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.068322][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 141.070894][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 141.073326][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.075826][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.079457][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 141.082045][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 141.084988][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.088330][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.091255][ T834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 141.093758][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 141.096942][ T834] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 141.099460][ T834] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 141.101654][ T834] usb 7-1: Product: syz [ 141.102784][ T834] usb 7-1: Manufacturer: syz [ 141.104132][ T834] usb 7-1: SerialNumber: syz [ 141.106563][ T834] usb 7-1: config 0 descriptor?? [ 141.109182][ T834] yurex 7-1:0.0: Could not submitting URB [ 141.110714][ T834] yurex 7-1:0.0: probe with driver yurex failed with error -5 [ 141.323244][ T833] usb 7-1: USB disconnect, device number 9 [ 141.536325][ T8739] program syz.3.726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.681256][ T8745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.728'. [ 141.927339][ T833] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 142.077319][ T833] usb 8-1: Using ep0 maxpacket: 32 [ 142.079958][ T833] usb 8-1: config 0 has an invalid interface number: 185 but max is 0 [ 142.082306][ T833] usb 8-1: config 0 has no interface number 0 [ 142.083938][ T833] usb 8-1: config 0 interface 185 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 142.086740][ T833] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=c6.c2 [ 142.089196][ T833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.092958][ T833] usb 8-1: config 0 descriptor?? [ 142.305667][ T6005] usb 8-1: USB disconnect, device number 4 [ 142.672519][ T8756] usb 2-1: USB disconnect, device number 3 [ 142.729347][ T8756] hub 2-0:1.0: USB hub found [ 142.730760][ T8756] hub 2-0:1.0: 6 ports detected [ 142.887365][ T834] usb 2-1: new high-speed USB device number 4 using ehci-pci [ 143.069533][ T834] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 143.072823][ T834] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 143.076043][ T834] usb 2-1: Product: QEMU USB Tablet [ 143.082498][ T834] usb 2-1: Manufacturer: QEMU [ 143.083827][ T834] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 143.098894][ T834] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0003/input/input9 [ 143.159532][ T834] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 143.174080][ T8775] bridge0: port 3(syz_tun) entered disabled state [ 143.176103][ T8775] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.178218][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.182291][ T8775] bridge0: left promiscuous mode [ 143.267304][ T8775] bridge0: port 3(syz_tun) entered blocking state [ 143.269088][ T8775] bridge0: port 3(syz_tun) entered forwarding state [ 143.270946][ T8775] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.272941][ T8775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.274913][ T8775] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.276950][ T8775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.280490][ T8775] bridge0: entered promiscuous mode [ 143.693685][ T8757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.091606][ T8783] netlink: 32 bytes leftover after parsing attributes in process `syz.1.738'. [ 144.217123][ T8788] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 144.220226][ T8788] syzkaller0: owner set to 823 [ 145.053854][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'. [ 145.058207][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.743'. [ 145.095583][ T8799] FAULT_INJECTION: forcing a failure. [ 145.095583][ T8799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.099596][ T8799] CPU: 2 UID: 0 PID: 8799 Comm: syz.1.744 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 145.102445][ T8799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.105438][ T8799] Call Trace: [ 145.106402][ T8799] [ 145.107201][ T8799] dump_stack_lvl+0x16c/0x1f0 [ 145.108618][ T8799] should_fail_ex+0x497/0x5b0 [ 145.110273][ T8799] _copy_to_user+0x32/0xd0 [ 145.111780][ T8799] simple_read_from_buffer+0xd0/0x160 [ 145.113410][ T8799] proc_fail_nth_read+0x198/0x270 [ 145.114901][ T8799] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.116760][ T8799] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.118364][ T8799] vfs_read+0x1df/0xbe0 [ 145.119491][ T8799] ? __fget_files+0x1fc/0x3a0 [ 145.120759][ T8799] ? __pfx___mutex_lock+0x10/0x10 [ 145.122153][ T8799] ? __pfx_vfs_read+0x10/0x10 [ 145.123413][ T8799] ? __fget_files+0x206/0x3a0 [ 145.124812][ T8799] ksys_read+0x12b/0x250 [ 145.126056][ T8799] ? __pfx_ksys_read+0x10/0x10 [ 145.127338][ T8799] __do_fast_syscall_32+0x73/0x120 [ 145.128725][ T8799] do_fast_syscall_32+0x32/0x80 [ 145.130034][ T8799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.131723][ T8799] RIP: 0023:0xf7f84579 [ 145.132862][ T8799] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 145.137996][ T8799] RSP: 002b:00000000f50d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 145.140644][ T8799] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50d6620 [ 145.142803][ T8799] RDX: 000000000000000f RSI: 00000000f7413ff4 RDI: 0000000000000000 [ 145.145120][ T8799] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 145.147287][ T8799] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 145.149382][ T8799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.151477][ T8799] [ 145.206087][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 145.232924][ T8808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.748'. [ 145.263766][ T8810] netlink: 10 bytes leftover after parsing attributes in process `syz.1.749'. [ 145.511513][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.515043][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.519120][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.522703][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.525866][ T5948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.529037][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.539734][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.543325][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.546804][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.553456][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.556487][ T5949] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.558755][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.580618][ T8822] lo speed is unknown, defaulting to 1000 [ 145.649692][ T8822] chnl_net:caif_netlink_parms(): no params data found [ 145.705481][ T1140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.750591][ T8822] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.752677][ T8822] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.754625][ T8822] bridge_slave_0: entered allmulticast mode [ 145.756695][ T8822] bridge_slave_0: entered promiscuous mode [ 145.759735][ T8822] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.761658][ T8822] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.763661][ T8822] bridge_slave_1: entered allmulticast mode [ 145.765681][ T8822] bridge_slave_1: entered promiscuous mode [ 145.779550][ T1140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.804461][ T8822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.808281][ T8822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.831791][ T8822] team0: Port device team_slave_0 added [ 145.835399][ T8822] team0: Port device team_slave_1 added [ 145.861230][ T1140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.868276][ T8822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.870267][ T8822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.877146][ T8822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.881281][ T8822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.883205][ T8822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.890003][ T8822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.924059][ T1140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.941043][ T8822] hsr_slave_0: entered promiscuous mode [ 145.943186][ T8822] hsr_slave_1: entered promiscuous mode [ 145.945566][ T8822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.949113][ T8822] Cannot create hsr debugfs directory [ 146.030372][ T8836] random: crng reseeded on system resumption [ 146.035179][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 146.035189][ T39] audit: type=1326 audit(1734490328.354:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz.3.754" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x0 [ 146.086634][ T1140] bridge_slave_1: left allmulticast mode [ 146.090471][ T1140] bridge_slave_1: left promiscuous mode [ 146.093621][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.098898][ T1140] bridge_slave_0: left allmulticast mode [ 146.100808][ T1140] bridge_slave_0: left promiscuous mode [ 146.102887][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.334839][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.342756][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.346026][ T1140] bond0 (unregistering): Released all slaves [ 146.375820][ T8822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 146.379129][ T8822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 146.382180][ T8822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.385149][ T8822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 146.433924][ T8822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.451619][ T8822] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.483264][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.485361][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.509217][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.511620][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.592772][ T8822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.643146][ T1140] hsr_slave_0: left promiscuous mode [ 146.645513][ T1140] hsr_slave_1: left promiscuous mode [ 146.648692][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.650619][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.653215][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.655189][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.678734][ T1140] veth1_macvtap: left promiscuous mode [ 146.680537][ T1140] veth0_macvtap: left promiscuous mode [ 146.682394][ T1140] veth1_vlan: left promiscuous mode [ 146.684133][ T1140] veth0_vlan: left promiscuous mode [ 146.730708][ T1140] pimreg (unregistering): left allmulticast mode [ 147.384378][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 147.462361][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 147.628268][ T5948] Bluetooth: hci2: command tx timeout [ 148.052625][ T8874] netlink: 32 bytes leftover after parsing attributes in process `syz.2.757'. [ 148.134635][ T8822] veth0_vlan: entered promiscuous mode [ 148.141913][ T8822] veth1_vlan: entered promiscuous mode [ 148.154449][ T8822] veth0_macvtap: entered promiscuous mode [ 148.163815][ T8822] veth1_macvtap: entered promiscuous mode [ 148.179067][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.182816][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.191714][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.194790][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.219431][ T8822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.228422][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.234488][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.247620][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.250549][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.253650][ T8822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.269525][ T8822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.271910][ T8822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.274252][ T8822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.276588][ T8822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.498674][ T8895] loop6: detected capacity change from 0 to 524287999 [ 148.503593][ C1] blk_print_req_error: 82 callbacks suppressed [ 148.503619][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.508701][ C1] buffer_io_error: 176 callbacks suppressed [ 148.508709][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.514834][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.515974][ T1140] IPVS: stop unused estimator thread 0... [ 148.517304][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.517678][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.523646][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.527469][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.529750][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.532949][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.535231][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.539633][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.542022][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.544377][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.546756][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.550591][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.552995][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.555058][ T8895] ldm_validate_partition_table(): Disk read failed. [ 148.557186][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.559488][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.562278][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.564538][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 148.570860][ T8895] Dev loop6: unable to read RDB block 0 [ 148.577523][ T8895] loop6: unable to read partition table [ 148.579659][ T8895] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 148.821737][ T8873] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 148.823847][ T8873] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 148.860695][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.862790][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.885320][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.889387][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.698883][ T8954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.766'. [ 150.466286][ T8968] netlink: 10 bytes leftover after parsing attributes in process `syz.4.769'. [ 150.788944][ T8984] netlink: 32 bytes leftover after parsing attributes in process `syz.3.775'. [ 150.966808][ T8989] netlink: 14 bytes leftover after parsing attributes in process `syz.4.773'. [ 151.126693][ T8989] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.129471][ T8989] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.516667][ T9000] syzkaller0: entered promiscuous mode [ 151.525829][ T9000] syzkaller0: entered allmulticast mode [ 151.613675][ T9007] netlink: 10 bytes leftover after parsing attributes in process `syz.3.779'. [ 151.637541][ T9008] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 151.934191][ T9026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.784'. [ 152.827689][ T9035] bridge0: entered allmulticast mode [ 152.830951][ T9036] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.833632][ T9036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.836576][ T9036] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.839125][ T9036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.842684][ T9036] bridge0: entered promiscuous mode [ 152.862273][ T9042] netlink: 10 bytes leftover after parsing attributes in process `syz.1.788'. [ 153.103559][ T39] audit: type=1326 audit(1734490335.424:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 153.116964][ T39] audit: type=1326 audit(1734490335.434:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 153.124803][ T39] audit: type=1326 audit(1734490335.434:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.793" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 153.131332][ T39] audit: type=1326 audit(1734490335.434:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 153.138805][ T39] audit: type=1326 audit(1734490335.434:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 153.146182][ T39] audit: type=1326 audit(1734490335.434:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.793" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 153.154303][ T39] audit: type=1326 audit(1734490335.434:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 153.161740][ T39] audit: type=1326 audit(1734490335.434:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 153.169341][ T39] audit: type=1326 audit(1734490335.434:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.793" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 153.177708][ T39] audit: type=1326 audit(1734490335.434:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 153.365912][ T9064] net_ratelimit: 4 callbacks suppressed [ 153.365925][ T9064] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 153.737371][ T5948] Bluetooth: hci0: command tx timeout [ 153.789739][ T9071] netlink: 32 bytes leftover after parsing attributes in process `syz.3.797'. [ 153.865337][ T9077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.800'. [ 154.878199][ T1488] libceph: connect (1)[c::]:6789 error -101 [ 154.882083][ T9103] veth1_macvtap: left promiscuous mode [ 154.884067][ T9103] macsec0: entered promiscuous mode [ 154.885569][ T9103] macsec0: entered allmulticast mode [ 154.904903][ T9105] netlink: 32 bytes leftover after parsing attributes in process `syz.3.807'. [ 154.924129][ T1488] libceph: mon0 (1)[c::]:6789 connect error [ 154.927978][ T9102] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 154.931087][ T9097] ceph: No mds server is up or the cluster is laggy [ 156.319946][ T9136] netlink: 10 bytes leftover after parsing attributes in process `syz.3.814'. [ 157.304830][ T9168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.821'. [ 157.640506][ T9186] netlink: 10 bytes leftover after parsing attributes in process `syz.1.826'. [ 157.713568][ T9188] binder_alloc: binder_alloc_mmap_handler: 9179 20ffd000-21000000 already mapped failed -16 [ 157.716676][ T9180] binder: BINDER_SET_CONTEXT_MGR already set [ 157.726070][ T9180] binder: 9179:9180 ioctl 4018620d 200002c0 returned -16 [ 158.012856][ T9193] netlink: zone id is out of range [ 158.014271][ T9193] netlink: zone id is out of range [ 158.015700][ T9193] netlink: zone id is out of range [ 158.017084][ T9193] netlink: zone id is out of range [ 158.023100][ T9193] netlink: zone id is out of range [ 158.024580][ T9193] netlink: zone id is out of range [ 158.028007][ T9193] netlink: set zone limit has 8 unknown bytes [ 159.575242][ T9222] loop9: detected capacity change from 0 to 7 [ 159.577915][ T9222] Dev loop9: unable to read RDB block 7 [ 159.579401][ T9222] loop9: unable to read partition table [ 159.580926][ T9222] loop9: partition table beyond EOD, truncated [ 159.582559][ T9222] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 159.671562][ T9226] FAULT_INJECTION: forcing a failure. [ 159.671562][ T9226] name failslab, interval 1, probability 0, space 0, times 0 [ 159.675073][ T9226] CPU: 3 UID: 0 PID: 9226 Comm: syz.2.834 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 159.677889][ T9226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.680696][ T9226] Call Trace: [ 159.681592][ T9226] [ 159.682381][ T9226] dump_stack_lvl+0x16c/0x1f0 [ 159.683632][ T9226] should_fail_ex+0x497/0x5b0 [ 159.684884][ T9226] ? fs_reclaim_acquire+0xae/0x150 [ 159.686228][ T9226] should_failslab+0xc2/0x120 [ 159.687478][ T9226] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 159.688896][ T9226] ? kernel_text_address+0x8d/0x100 [ 159.690261][ T9226] ? kvm_vm_ioctl+0xc0c/0x3df0 [ 159.691529][ T9226] kvm_vm_ioctl+0xc0c/0x3df0 [ 159.692761][ T9226] ? stack_trace_save+0x95/0xd0 [ 159.694049][ T9226] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 159.695381][ T9226] ? __pfx_mark_lock+0x10/0x10 [ 159.696652][ T9226] ? stack_depot_save_flags+0x28/0x9e0 [ 159.698084][ T9226] ? kasan_save_stack+0x42/0x60 [ 159.699384][ T9226] ? kasan_save_stack+0x33/0x60 [ 159.700710][ T9226] ? kasan_save_track+0x14/0x30 [ 159.702010][ T9226] ? kasan_save_free_info+0x3b/0x60 [ 159.703371][ T9226] ? __kasan_slab_free+0x51/0x70 [ 159.704689][ T9226] ? kfree+0x14f/0x4b0 [ 159.705764][ T9226] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 159.707232][ T9226] ? security_file_ioctl_compat+0x9b/0x240 [ 159.708767][ T9226] ? __do_compat_sys_ioctl+0x4e/0x2c0 [ 159.710177][ T9226] ? __do_fast_syscall_32+0x73/0x120 [ 159.711558][ T9226] ? do_fast_syscall_32+0x32/0x80 [ 159.712889][ T9226] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.714581][ T9226] ? kvm_arch_vm_compat_ioctl+0x2d1/0x480 [ 159.716070][ T9226] ? hlock_class+0x4e/0x130 [ 159.717280][ T9226] ? mark_lock+0xb5/0xc60 [ 159.718432][ T9226] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 159.720033][ T9226] ? __pfx_mark_lock+0x10/0x10 [ 159.721321][ T9226] ? find_held_lock+0x2d/0x110 [ 159.722602][ T9226] ? tomoyo_path_number_perm+0x298/0x5b0 [ 159.724083][ T9226] ? __pfx_lock_release+0x10/0x10 [ 159.725420][ T9226] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 159.726894][ T9226] ? tomoyo_path_number_perm+0x190/0x5b0 [ 159.728368][ T9226] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 159.729955][ T9226] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 159.731505][ T9226] ? do_vfs_ioctl+0x513/0x1950 [ 159.732786][ T9226] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 159.734114][ T9226] kvm_vm_compat_ioctl+0x399/0x440 [ 159.735464][ T9226] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 159.736932][ T9226] ? __pfx_lock_release+0x10/0x10 [ 159.738255][ T9226] ? trace_lock_acquire+0x14e/0x1f0 [ 159.739634][ T9226] ? __fget_files+0x206/0x3a0 [ 159.740881][ T9226] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 159.742351][ T9226] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 159.743745][ T9226] __do_fast_syscall_32+0x73/0x120 [ 159.745105][ T9226] do_fast_syscall_32+0x32/0x80 [ 159.746394][ T9226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.748057][ T9226] RIP: 0023:0xf7f58579 [ 159.749146][ T9226] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 159.754148][ T9226] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 159.756317][ T9226] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000000000ae41 [ 159.758383][ T9226] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.760464][ T9226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.762540][ T9226] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 159.764605][ T9226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.766673][ T9226] [ 160.752887][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 160.968717][ T9270] bridge0: entered promiscuous mode [ 160.970312][ T9270] bridge0: entered allmulticast mode [ 160.998933][ T9273] netlink: zone id is out of range [ 161.000671][ T9273] netlink: zone id is out of range [ 161.002298][ T9273] netlink: zone id is out of range [ 161.003906][ T9273] netlink: zone id is out of range [ 161.005538][ T9273] netlink: zone id is out of range [ 161.007658][ T9273] netlink: zone id is out of range [ 161.009589][ T9273] netlink: zone id is out of range [ 161.011498][ T9273] netlink: zone id is out of range [ 161.014559][ T9273] netlink: set zone limit has 8 unknown bytes [ 161.998216][ T9307] loop9: detected capacity change from 0 to 7 [ 162.001658][ T9307] Dev loop9: unable to read RDB block 7 [ 162.003339][ T9307] loop9: unable to read partition table [ 162.004942][ T9307] loop9: partition table beyond EOD, truncated [ 162.006620][ T9307] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 163.551553][ T9336] loop9: detected capacity change from 0 to 7 [ 163.553619][ T9336] Dev loop9: unable to read RDB block 7 [ 163.555563][ T9336] loop9: unable to read partition table [ 163.561188][ T9336] loop9: partition table beyond EOD, truncated [ 163.562865][ T9336] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 165.798075][ T9366] orangefs_mount: mount request failed with -4 [ 166.013083][ T9387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.864'. [ 166.081129][ T9391] qrtr: Invalid version 20 [ 166.087654][ T9391] netlink: 224 bytes leftover after parsing attributes in process `syz.4.866'. [ 167.317864][ T9400] netlink: zone id is out of range [ 167.319259][ T9400] netlink: zone id is out of range [ 167.320649][ T9400] netlink: zone id is out of range [ 167.322063][ T9400] netlink: zone id is out of range [ 167.324278][ T9400] netlink: set zone limit has 8 unknown bytes [ 168.005296][ T9401] delete_channel: no stack [ 168.294103][ T9412] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 168.341976][ T9416] lo speed is unknown, defaulting to 1000 [ 169.233519][ T9431] netlink: 40 bytes leftover after parsing attributes in process `syz.3.875'. [ 169.237105][ T9431] netlink: 43 bytes leftover after parsing attributes in process `syz.3.875'. [ 169.241329][ T9431] netlink: 'syz.3.875': attribute type 6 has an invalid length. [ 169.244398][ T9431] netlink: 'syz.3.875': attribute type 5 has an invalid length. [ 169.247147][ T9431] netlink: 43 bytes leftover after parsing attributes in process `syz.3.875'. [ 169.334693][ T9433] netfs: Couldn't get user pages (rc=-14) [ 169.425100][ T9438] lo speed is unknown, defaulting to 1000 [ 169.609863][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.877'. [ 170.374987][ T9455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.881'. [ 170.561814][ T9461] fuse: Unknown parameter 'ÿÿÿÿ0x0000000000000003' [ 170.564922][ T9459] FAULT_INJECTION: forcing a failure. [ 170.564922][ T9459] name failslab, interval 1, probability 0, space 0, times 0 [ 170.577473][ T9459] CPU: 3 UID: 0 PID: 9459 Comm: syz.2.880 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 170.580303][ T9459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 170.583177][ T9459] Call Trace: [ 170.584050][ T9459] [ 170.584909][ T9459] dump_stack_lvl+0x16c/0x1f0 [ 170.586197][ T9459] should_fail_ex+0x497/0x5b0 [ 170.587481][ T9459] ? fs_reclaim_acquire+0xae/0x150 [ 170.588919][ T9459] should_failslab+0xc2/0x120 [ 170.590309][ T9459] __kmalloc_cache_noprof+0x68/0x420 [ 170.592219][ T9459] ? kasan_save_track+0x14/0x30 [ 170.593614][ T9459] kvm_arch_vcpu_create+0x36a/0xae0 [ 170.595014][ T9459] kvm_vm_ioctl+0xf93/0x3df0 [ 170.596260][ T9459] ? stack_trace_save+0x95/0xd0 [ 170.597888][ T9459] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 170.599288][ T9459] ? __pfx_mark_lock+0x10/0x10 [ 170.600587][ T9459] ? stack_depot_save_flags+0x28/0x9e0 [ 170.602035][ T9459] ? kasan_save_stack+0x42/0x60 [ 170.603339][ T9459] ? kasan_save_stack+0x33/0x60 [ 170.604653][ T9459] ? kasan_save_track+0x14/0x30 [ 170.606032][ T9459] ? kasan_save_free_info+0x3b/0x60 [ 170.607490][ T9459] ? __kasan_slab_free+0x51/0x70 [ 170.609201][ T9459] ? kfree+0x14f/0x4b0 [ 170.610439][ T9459] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 170.611904][ T9459] ? security_file_ioctl_compat+0x9b/0x240 [ 170.613435][ T9459] ? __do_compat_sys_ioctl+0x4e/0x2c0 [ 170.614838][ T9459] ? __do_fast_syscall_32+0x73/0x120 [ 170.616213][ T9459] ? do_fast_syscall_32+0x32/0x80 [ 170.617533][ T9459] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.619236][ T9459] ? kvm_arch_vm_compat_ioctl+0x2d1/0x480 [ 170.620740][ T9459] ? hlock_class+0x4e/0x130 [ 170.621950][ T9459] ? mark_lock+0xb5/0xc60 [ 170.623089][ T9459] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 170.624677][ T9459] ? __pfx_mark_lock+0x10/0x10 [ 170.625954][ T9459] ? find_held_lock+0x2d/0x110 [ 170.627205][ T9459] ? tomoyo_path_number_perm+0x298/0x5b0 [ 170.628670][ T9459] ? __pfx_lock_release+0x10/0x10 [ 170.629977][ T9459] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 170.631451][ T9459] ? tomoyo_path_number_perm+0x190/0x5b0 [ 170.632966][ T9459] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 170.634526][ T9459] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 170.636058][ T9459] ? do_vfs_ioctl+0x513/0x1950 [ 170.637317][ T9459] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 170.638643][ T9459] kvm_vm_compat_ioctl+0x399/0x440 [ 170.639987][ T9459] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 170.641448][ T9459] ? __pfx_lock_release+0x10/0x10 [ 170.642771][ T9459] ? trace_lock_acquire+0x14e/0x1f0 [ 170.644133][ T9459] ? __fget_files+0x206/0x3a0 [ 170.645373][ T9459] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 170.646836][ T9459] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 170.648223][ T9459] __do_fast_syscall_32+0x73/0x120 [ 170.649562][ T9459] do_fast_syscall_32+0x32/0x80 [ 170.650852][ T9459] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.652526][ T9459] RIP: 0023:0xf7f58579 [ 170.653596][ T9459] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 170.658645][ T9459] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 170.660875][ T9459] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000000000ae41 [ 170.662956][ T9459] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.665026][ T9459] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.667086][ T9459] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 170.669158][ T9459] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.671226][ T9459] [ 171.779480][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 171.779522][ T39] audit: type=1326 audit(1734490354.104:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 171.787014][ T39] audit: type=1326 audit(1734490354.104:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 171.795911][ T39] audit: type=1326 audit(1734490354.104:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.890" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 171.801456][ T39] audit: type=1326 audit(1734490354.104:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 171.806941][ T39] audit: type=1326 audit(1734490354.104:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 171.812495][ T39] audit: type=1326 audit(1734490354.104:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.890" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 171.818167][ T39] audit: type=1326 audit(1734490354.104:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 171.823741][ T39] audit: type=1326 audit(1734490354.104:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.890" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 171.829241][ T39] audit: type=1326 audit(1734490354.104:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 171.834697][ T39] audit: type=1326 audit(1734490354.104:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.1.890" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 172.195429][ T9497] input: syz0 as /devices/virtual/input/input11 [ 172.290534][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'. [ 172.297093][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 172.762954][ T9514] FAULT_INJECTION: forcing a failure. [ 172.762954][ T9514] name failslab, interval 1, probability 0, space 0, times 0 [ 172.791525][ T9514] CPU: 0 UID: 0 PID: 9514 Comm: syz.3.897 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 172.794375][ T9514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.797217][ T9514] Call Trace: [ 172.798173][ T9514] [ 172.798984][ T9514] dump_stack_lvl+0x16c/0x1f0 [ 172.800246][ T9514] should_fail_ex+0x497/0x5b0 [ 172.801516][ T9514] ? fs_reclaim_acquire+0xae/0x150 [ 172.802892][ T9514] should_failslab+0xc2/0x120 [ 172.804148][ T9514] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 172.805534][ T9514] ? kvm_arch_vcpu_create+0x438/0xae0 [ 172.806914][ T9514] ? kasan_save_track+0x14/0x30 [ 172.808203][ T9514] kvm_arch_vcpu_create+0x438/0xae0 [ 172.809595][ T9514] kvm_vm_ioctl+0xf93/0x3df0 [ 172.810826][ T9514] ? stack_trace_save+0x95/0xd0 [ 172.812162][ T9514] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 172.813500][ T9514] ? __pfx_mark_lock+0x10/0x10 [ 172.814798][ T9514] ? stack_depot_save_flags+0x28/0x9e0 [ 172.816249][ T9514] ? kasan_save_stack+0x42/0x60 [ 172.817565][ T9514] ? kasan_save_stack+0x33/0x60 [ 172.818878][ T9514] ? kasan_save_track+0x14/0x30 [ 172.820177][ T9514] ? kasan_save_free_info+0x3b/0x60 [ 172.821563][ T9514] ? __kasan_slab_free+0x51/0x70 [ 172.822914][ T9514] ? kfree+0x14f/0x4b0 [ 172.824008][ T9514] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 172.825531][ T9514] ? security_file_ioctl_compat+0x9b/0x240 [ 172.827078][ T9514] ? __do_compat_sys_ioctl+0x4e/0x2c0 [ 172.828497][ T9514] ? __do_fast_syscall_32+0x73/0x120 [ 172.829898][ T9514] ? do_fast_syscall_32+0x32/0x80 [ 172.831233][ T9514] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.833000][ T9514] ? kvm_arch_vm_compat_ioctl+0x2d1/0x480 [ 172.834531][ T9514] ? hlock_class+0x4e/0x130 [ 172.835740][ T9514] ? mark_lock+0xb5/0xc60 [ 172.836908][ T9514] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 172.838521][ T9514] ? __pfx_mark_lock+0x10/0x10 [ 172.839816][ T9514] ? find_held_lock+0x2d/0x110 [ 172.841109][ T9514] ? tomoyo_path_number_perm+0x298/0x5b0 [ 172.842658][ T9514] ? __pfx_lock_release+0x10/0x10 [ 172.844014][ T9514] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 172.845530][ T9514] ? tomoyo_path_number_perm+0x190/0x5b0 [ 172.847024][ T9514] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 172.848496][ T9514] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 172.850044][ T9514] ? do_vfs_ioctl+0x513/0x1950 [ 172.851324][ T9514] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 172.852713][ T9514] kvm_vm_compat_ioctl+0x399/0x440 [ 172.854076][ T9514] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 172.855560][ T9514] ? __pfx_lock_release+0x10/0x10 [ 172.857024][ T9514] ? trace_lock_acquire+0x14e/0x1f0 [ 172.858429][ T9514] ? __fget_files+0x206/0x3a0 [ 172.859697][ T9514] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 172.861200][ T9514] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 172.862621][ T9514] __do_fast_syscall_32+0x73/0x120 [ 172.863982][ T9514] do_fast_syscall_32+0x32/0x80 [ 172.865297][ T9514] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.866961][ T9514] RIP: 0023:0xf7fb1579 [ 172.868048][ T9514] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 172.873132][ T9514] RSP: 002b:00000000f50e555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 172.875315][ T9514] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000000000ae41 [ 172.877397][ T9514] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.879499][ T9514] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.881515][ T9514] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 172.883633][ T9514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.885701][ T9514] [ 172.886988][ T9514] kvm: failed to allocate vcpu's emulator [ 173.161446][ T9520] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.164176][ T9520] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.167080][ T9520] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.169944][ T9520] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.981760][ T9551] overlayfs: failed to resolve './file1': -2 [ 174.681406][ T9557] syz.2.904 (9557): drop_caches: 2 [ 174.707332][ T9565] RDS: rds_bind could not find a transport for 80::1, load rds_tcp or rds_rdma? [ 174.939269][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 175.140309][ T9581] FAULT_INJECTION: forcing a failure. [ 175.140309][ T9581] name failslab, interval 1, probability 0, space 0, times 0 [ 175.143672][ T9581] CPU: 0 UID: 0 PID: 9581 Comm: syz.3.911 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 175.146483][ T9581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.149398][ T9581] Call Trace: [ 175.150281][ T9581] [ 175.151087][ T9581] dump_stack_lvl+0x16c/0x1f0 [ 175.152385][ T9581] should_fail_ex+0x497/0x5b0 [ 175.153701][ T9581] ? fs_reclaim_acquire+0xae/0x150 [ 175.155558][ T9581] should_failslab+0xc2/0x120 [ 175.157296][ T9581] __kmalloc_cache_node_noprof+0x6f/0x3f0 [ 175.158925][ T9581] ? __get_vm_area_node+0x101/0x2f0 [ 175.160357][ T9581] __get_vm_area_node+0x101/0x2f0 [ 175.161700][ T9581] ? find_held_lock+0x2d/0x110 [ 175.163011][ T9581] __vmalloc_node_range_noprof+0x26a/0x1530 [ 175.164657][ T9581] ? fpu_alloc_guest_fpstate+0x20/0x4b0 [ 175.166132][ T9581] ? __pfx_lock_release+0x10/0x10 [ 175.167569][ T9581] ? local_lock_acquire+0x10/0x150 [ 175.169401][ T9581] ? local_lock_acquire+0x10/0x150 [ 175.171217][ T9581] ? fpu_alloc_guest_fpstate+0x20/0x4b0 [ 175.173194][ T9581] ? lockdep_hardirqs_on+0x7c/0x110 [ 175.174997][ T9581] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 175.177189][ T9581] ? __memcg_slab_post_alloc_hook+0x4fc/0x9b0 [ 175.179312][ T9581] ? rcu_is_watching+0x12/0xc0 [ 175.180966][ T9581] ? fpu_alloc_guest_fpstate+0x20/0x4b0 [ 175.182899][ T9581] vzalloc_noprof+0x6b/0x90 [ 175.184446][ T9581] ? fpu_alloc_guest_fpstate+0x20/0x4b0 [ 175.186381][ T9581] fpu_alloc_guest_fpstate+0x20/0x4b0 [ 175.188294][ T9581] kvm_arch_vcpu_create+0x4d0/0xae0 [ 175.190133][ T9581] kvm_vm_ioctl+0xf93/0x3df0 [ 175.191793][ T9581] ? stack_trace_save+0x95/0xd0 [ 175.193550][ T9581] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 175.195299][ T9581] ? __pfx_mark_lock+0x10/0x10 [ 175.196962][ T9581] ? stack_depot_save_flags+0x28/0x9e0 [ 175.198535][ T9581] ? kasan_save_stack+0x42/0x60 [ 175.200231][ T9581] ? kasan_save_stack+0x33/0x60 [ 175.201906][ T9581] ? kasan_save_track+0x14/0x30 [ 175.203608][ T9581] ? kasan_save_free_info+0x3b/0x60 [ 175.205435][ T9581] ? __kasan_slab_free+0x51/0x70 [ 175.207175][ T9581] ? kfree+0x14f/0x4b0 [ 175.208648][ T9581] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 175.210689][ T9581] ? security_file_ioctl_compat+0x9b/0x240 [ 175.212850][ T9581] ? __do_compat_sys_ioctl+0x4e/0x2c0 [ 175.214751][ T9581] ? __do_fast_syscall_32+0x73/0x120 [ 175.216610][ T9581] ? do_fast_syscall_32+0x32/0x80 [ 175.218377][ T9581] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.220680][ T9581] ? kvm_arch_vm_compat_ioctl+0x2d1/0x480 [ 175.222687][ T9581] ? hlock_class+0x4e/0x130 [ 175.224207][ T9581] ? mark_lock+0xb5/0xc60 [ 175.225730][ T9581] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 175.227398][ T9581] ? __pfx_mark_lock+0x10/0x10 [ 175.228680][ T9581] ? find_held_lock+0x2d/0x110 [ 175.229949][ T9581] ? tomoyo_path_number_perm+0x298/0x5b0 [ 175.231832][ T9581] ? __pfx_lock_release+0x10/0x10 [ 175.233367][ T9581] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 175.235247][ T9581] ? tomoyo_path_number_perm+0x190/0x5b0 [ 175.237256][ T9581] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 175.239357][ T9581] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.241375][ T9581] ? do_vfs_ioctl+0x513/0x1950 [ 175.242795][ T9581] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 175.244309][ T9581] kvm_vm_compat_ioctl+0x399/0x440 [ 175.246103][ T9581] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 175.247900][ T9581] ? __pfx_lock_release+0x10/0x10 [ 175.249281][ T9581] ? trace_lock_acquire+0x14e/0x1f0 [ 175.250739][ T9581] ? __fget_files+0x206/0x3a0 [ 175.252033][ T9581] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 175.253517][ T9581] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 175.255338][ T9581] __do_fast_syscall_32+0x73/0x120 [ 175.256926][ T9581] do_fast_syscall_32+0x32/0x80 [ 175.258348][ T9581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.259992][ T9581] RIP: 0023:0xf7fb1579 [ 175.261128][ T9581] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 175.266183][ T9581] RSP: 002b:00000000f50e555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 175.268450][ T9581] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000000000ae41 [ 175.270760][ T9581] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.273302][ T9581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.276020][ T9581] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 175.278755][ T9581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.281494][ T9581] [ 175.285802][ T9581] syz.3.911: vmalloc error: size 2752, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 175.296640][ T9581] CPU: 0 UID: 0 PID: 9581 Comm: syz.3.911 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 175.300375][ T9581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.304069][ T9581] Call Trace: [ 175.305179][ T9581] [ 175.306196][ T9581] dump_stack_lvl+0x16c/0x1f0 [ 175.307896][ T9581] warn_alloc+0x24d/0x3a0 [ 175.309503][ T9581] ? __pfx_warn_alloc+0x10/0x10 [ 175.311309][ T9581] ? __kasan_kmalloc+0x8a/0xb0 [ 175.313118][ T9581] ? __get_vm_area_node+0x1dc/0x2f0 [ 175.315036][ T9581] __vmalloc_node_range_noprof+0xd27/0x1530 [ 175.317200][ T9581] ? __pfx_lock_release+0x10/0x10 [ 175.319066][ T9581] ? local_lock_acquire+0x10/0x150 [ 175.320949][ T9581] ? local_lock_acquire+0x10/0x150 [ 175.322872][ T9581] ? fpu_alloc_guest_fpstate+0x20/0x4b0 [ 175.324895][ T9581] ? lockdep_hardirqs_on+0x7c/0x110 [ 175.326801][ T9581] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 175.329095][ T9581] ? __memcg_slab_post_alloc_hook+0x4fc/0x9b0 [ 175.331314][ T9581] ? rcu_is_watching+0x12/0xc0 [ 175.333081][ T9581] ? fpu_alloc_guest_fpstate+0x20/0x4b0 [ 175.335092][ T9581] vzalloc_noprof+0x6b/0x90 [ 175.336780][ T9581] ? fpu_alloc_guest_fpstate+0x20/0x4b0 [ 175.338807][ T9581] fpu_alloc_guest_fpstate+0x20/0x4b0 [ 175.340770][ T9581] kvm_arch_vcpu_create+0x4d0/0xae0 [ 175.342665][ T9581] kvm_vm_ioctl+0xf93/0x3df0 [ 175.344370][ T9581] ? stack_trace_save+0x95/0xd0 [ 175.346133][ T9581] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 175.347980][ T9581] ? __pfx_mark_lock+0x10/0x10 [ 175.349767][ T9581] ? stack_depot_save_flags+0x28/0x9e0 [ 175.351804][ T9581] ? kasan_save_stack+0x42/0x60 [ 175.353607][ T9581] ? kasan_save_stack+0x33/0x60 [ 175.355395][ T9581] ? kasan_save_track+0x14/0x30 [ 175.357191][ T9581] ? kasan_save_free_info+0x3b/0x60 [ 175.359108][ T9581] ? __kasan_slab_free+0x51/0x70 [ 175.360908][ T9581] ? kfree+0x14f/0x4b0 [ 175.362313][ T9581] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 175.364063][ T9581] ? security_file_ioctl_compat+0x9b/0x240 [ 175.366037][ T9581] ? __do_compat_sys_ioctl+0x4e/0x2c0 [ 175.367927][ T9581] ? __do_fast_syscall_32+0x73/0x120 [ 175.369795][ T9581] ? do_fast_syscall_32+0x32/0x80 [ 175.371564][ T9581] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.373843][ T9581] ? kvm_arch_vm_compat_ioctl+0x2d1/0x480 [ 175.375634][ T9581] ? hlock_class+0x4e/0x130 [ 175.376854][ T9581] ? mark_lock+0xb5/0xc60 [ 175.378044][ T9581] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 175.379987][ T9581] ? __pfx_mark_lock+0x10/0x10 [ 175.381266][ T9581] ? find_held_lock+0x2d/0x110 [ 175.382538][ T9581] ? tomoyo_path_number_perm+0x298/0x5b0 [ 175.384068][ T9581] ? __pfx_lock_release+0x10/0x10 [ 175.385452][ T9581] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 175.386900][ T9581] ? tomoyo_path_number_perm+0x190/0x5b0 [ 175.388541][ T9581] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 175.390200][ T9581] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.391974][ T9581] ? do_vfs_ioctl+0x513/0x1950 [ 175.393666][ T9581] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 175.395420][ T9581] kvm_vm_compat_ioctl+0x399/0x440 [ 175.397120][ T9581] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 175.398573][ T9581] ? __pfx_lock_release+0x10/0x10 [ 175.399869][ T9581] ? trace_lock_acquire+0x14e/0x1f0 [ 175.401726][ T9581] ? __fget_files+0x206/0x3a0 [ 175.403314][ T9581] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 175.404772][ T9581] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 175.406147][ T9581] __do_fast_syscall_32+0x73/0x120 [ 175.407466][ T9581] do_fast_syscall_32+0x32/0x80 [ 175.408735][ T9581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.410298][ T9581] RIP: 0023:0xf7fb1579 [ 175.411403][ T9581] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 175.416403][ T9581] RSP: 002b:00000000f50e555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 175.418497][ T9581] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000000000ae41 [ 175.420771][ T9581] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.423026][ T9581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.425067][ T9581] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 175.427096][ T9581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.429171][ T9581] [ 175.477426][ T9581] Mem-Info: [ 175.478427][ T9581] active_anon:10330 inactive_anon:16625 isolated_anon:0 [ 175.478427][ T9581] active_file:11463 inactive_file:26074 isolated_file:0 [ 175.478427][ T9581] unevictable:1768 dirty:661 writeback:0 [ 175.478427][ T9581] slab_reclaimable:7351 slab_unreclaimable:57922 [ 175.478427][ T9581] mapped:29589 shmem:23299 pagetables:810 [ 175.478427][ T9581] sec_pagetables:299 bounce:0 [ 175.478427][ T9581] kernel_misc_reclaimable:0 [ 175.478427][ T9581] free:42164 free_pcp:6227 free_cma:0 [ 175.505044][ T9581] Node 0 active_anon:4180kB inactive_anon:1628kB active_file:9828kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:6540kB dirty:4kB writeback:0kB shmem:5884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9808kB pagetables:820kB sec_pagetables:1124kB all_unreclaimable? yes [ 175.514174][ T9581] Node 1 active_anon:38252kB inactive_anon:64872kB active_file:36024kB inactive_file:104220kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:113028kB dirty:2640kB writeback:0kB shmem:88524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2652kB pagetables:2420kB sec_pagetables:72kB all_unreclaimable? no [ 175.528898][ T9581] Node 0 DMA free:2984kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:44kB inactive_anon:20kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:340kB local_pcp:28kB free_cma:0kB [ 175.545514][ T9581] lowmem_reserve[]: 0 273 0 0 0 [ 175.547993][ T9581] Node 0 DMA32 free:22752kB boost:4096kB min:18000kB low:21476kB high:24952kB reserved_highatomic:4096KB active_anon:4088kB inactive_anon:1608kB active_file:9824kB inactive_file:76kB unevictable:3536kB writepending:4kB present:1032196kB managed:306308kB mlocked:0kB bounce:0kB free_pcp:1288kB local_pcp:1012kB free_cma:0kB [ 175.557145][ T9581] lowmem_reserve[]: 0 0 0 0 0 [ 175.558811][ T9581] Node 1 DMA32 free:153352kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:4096KB active_anon:39952kB inactive_anon:64872kB active_file:36024kB inactive_file:104220kB unevictable:3536kB writepending:2640kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:13688kB local_pcp:824kB free_cma:0kB [ 175.577956][ T9581] lowmem_reserve[]: 0 0 0 0 0 [ 175.579339][ T9581] Node 0 DMA: 49*4kB (UM) 36*8kB (U) 38*16kB (UM) 51*32kB (UM) 4*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2980kB [ 175.583340][ T9581] Node 0 DMA32: 649*4kB (UMEH) 72*8kB (UMEH) 21*16kB (MEH) 128*32kB (UMEH) 53*64kB (UMEH) 22*128kB (UME) 13*256kB (UME) 5*512kB (U) 3*1024kB (ME) 0*2048kB 0*4096kB = 22772kB [ 175.588995][ T9581] Node 1 DMA32: 1*4kB (M) 60*8kB (ME) 31*16kB (ME) 265*32kB (UME) 60*64kB (ME) 71*128kB (UME) 63*256kB (UME) 46*512kB (UME) 25*1024kB (UM) 17*2048kB (UME) 7*4096kB (UMH) = 151156kB [ 175.594630][ T9581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.597547][ T9581] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.600416][ T9581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.604280][ T9581] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.607932][ T9581] 61859 total pagecache pages [ 175.609958][ T9581] 0 pages in swap cache [ 175.612416][ T9581] Free swap = 124056kB [ 175.614125][ T9581] Total swap = 124996kB [ 175.615886][ T9581] 524155 pages RAM [ 175.616881][ T9581] 0 pages HighMem/MovableOnly [ 175.619584][ T9581] 206675 pages reserved [ 175.620763][ T9581] 0 pages cma reserved [ 175.621918][ T9581] kvm: failed to allocate vcpu's fpu [ 176.252181][ T9615] [ 176.252897][ T9615] ============================= [ 176.254169][ T9615] [ BUG: Invalid wait context ] [ 176.255445][ T9615] 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 Not tainted [ 176.257486][ T9615] ----------------------------- [ 176.259777][ T9615] iou-wrk-9608/9615 is trying to lock: [ 176.261472][ T9615] ffff88801e7ad358 (&sighand->siglock){-.-.}-{3:3}, at: __lock_task_sighand+0xc2/0x340 [ 176.263729][ T9615] other info that might help us debug this: [ 176.265283][ T9615] context-{5:5} [ 176.266205][ T9615] 3 locks held by iou-wrk-9608/9615: [ 176.267576][ T9615] #0: ffff888012c96980 (&wq->lock){+.+.}-{2:2}, at: io_wq_worker+0x3b1/0xdf0 [ 176.269919][ T9615] #1: ffffffff8ddbad40 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 [ 176.272389][ T9615] #2: ffffffff8ddbad40 (rcu_read_lock){....}-{1:3}, at: __lock_task_sighand+0x3f/0x340 [ 176.274910][ T9615] stack backtrace: [ 176.275894][ T9615] CPU: 0 UID: 0 PID: 9615 Comm: iou-wrk-9608 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 176.278704][ T9615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.281399][ T9615] Call Trace: [ 176.282275][ T9615] [ 176.283027][ T9615] dump_stack_lvl+0x116/0x1f0 [ 176.284217][ T9615] __lock_acquire+0x878/0x3c40 [ 176.285438][ T9615] ? __pfx___lock_acquire+0x10/0x10 [ 176.286774][ T9615] ? __pfx___lock_acquire+0x10/0x10 [ 176.288120][ T9615] ? stack_depot_save_flags+0x28/0x9e0 [ 176.289494][ T9615] lock_acquire.part.0+0x11b/0x380 [ 176.290791][ T9615] ? __lock_task_sighand+0xc2/0x340 [ 176.292163][ T9615] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 176.293642][ T9615] ? rcu_is_watching+0x12/0xc0 [ 176.294894][ T9615] ? trace_lock_acquire+0x14e/0x1f0 [ 176.296290][ T9615] ? trace_lock_acquire+0x14e/0x1f0 [ 176.297648][ T9615] ? __lock_task_sighand+0xc2/0x340 [ 176.299017][ T9615] ? lock_acquire+0x2f/0xb0 [ 176.300213][ T9615] ? __lock_task_sighand+0xc2/0x340 [ 176.301587][ T9615] _raw_spin_lock_irqsave+0x3a/0x60 [ 176.302973][ T9615] ? __lock_task_sighand+0xc2/0x340 [ 176.304341][ T9615] __lock_task_sighand+0xc2/0x340 [ 176.305678][ T9615] group_send_sig_info+0x290/0x300 [ 176.307013][ T9615] ? __pfx_group_send_sig_info+0x10/0x10 [ 176.308520][ T9615] ? __pfx___lock_acquire+0x10/0x10 [ 176.309881][ T9615] bpf_send_signal_common+0x415/0x520 [ 176.311284][ T9615] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 176.312836][ T9615] ? trace_lock_acquire+0x14e/0x1f0 [ 176.314196][ T9615] ? find_held_lock+0x2d/0x110 [ 176.315446][ T9615] ? bpf_trace_run2+0x1c2/0x590 [ 176.316731][ T9615] bpf_send_signal+0x1d/0x30 [ 176.317943][ T9615] bpf_prog_631417f49dd64198+0x25/0x48 [ 176.319381][ T9615] bpf_trace_run2+0x34c/0x590 [ 176.320626][ T9615] ? __pfx_bpf_trace_run2+0x10/0x10 [ 176.322009][ T9615] ? hlock_class+0x4e/0x130 [ 176.323136][ T9615] trace_contention_end.constprop.0+0xf0/0x170 [ 176.324678][ T9615] __pv_queued_spin_lock_slowpath+0x27e/0xc90 [ 176.326268][ T9615] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 176.327965][ T9615] ? lock_acquire.part.0+0x11b/0x380 [ 176.329422][ T9615] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 176.330876][ T9615] do_raw_spin_lock+0x210/0x2c0 [ 176.332175][ T9615] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 176.333582][ T9615] ? lock_acquire+0x2f/0xb0 [ 176.334765][ T9615] ? io_wq_worker+0x3b1/0xdf0 [ 176.335995][ T9615] io_wq_worker+0x3b1/0xdf0 [ 176.337198][ T9615] ? __pfx_io_wq_worker+0x10/0x10 [ 176.338510][ T9615] ? ret_from_fork+0x23/0x80 [ 176.339728][ T9615] ? __pfx_lock_release+0x10/0x10 [ 176.341048][ T9615] ? do_raw_spin_lock+0x12d/0x2c0 [ 176.342385][ T9615] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 176.343784][ T9615] ? __pfx_io_wq_worker+0x10/0x10 [ 176.345112][ T9615] ret_from_fork+0x45/0x80 [ 176.346231][ T9615] ? __pfx_io_wq_worker+0x10/0x10 [ 176.347547][ T9615] ret_from_fork_asm+0x1a/0x30 [ 176.348815][ T9615] VM DIAGNOSIS: 02:52:37 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142075 RDI=ffffffff9a667300 RBP=ffffffff9a6672c0 RSP=ffffc90003537230 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000036 R14=ffffffff85142010 R15=0000000000000000 RIP=ffffffff8514209f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c32f086 CR3=0000000021a44000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000020000 RCX=ffffffff815e0e39 RDX=ffff888021468000 RSI=0000000000000000 RDI=0000000000000007 RBP=ffff888025008000 RSP=ffffc9000346f280 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffff88802079876c R15=ffff888025008000 RIP=ffffffff81994ef0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c279b45 CR3=0000000021a44000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=1ffffffff203a21a RDX=ffff888025008000 RSI=ffffffff81484a34 RDI=ffffffff81484a21 RBP=ffff888012c96968 RSP=ffffc90003527be8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901cddd7 R11=0000000000000001 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b63fc40 R15=ffffed1002592d2d RIP=ffffffff81484a36 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50a5880 CR3=0000000021a44000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000008484 RBX=0000000000000001 RCX=ffffc90025881000 RDX=0000000000080000 RSI=ffffffff81484a34 RDI=ffffffff81484a21 RBP=ffff88802b73fc54 RSP=ffffc90007157910 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901cddd7 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=ffff88802b73fc40 R15=0000000000100000 RIP=ffffffff81484a36 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000021a44000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000