Extracting prog: 48m53.123348516s Minimizing prog: 2h39m19.681242539s Simplifying prog options: 11m19.670269989s Extracting C: 37.968383882s Simplifying C: 0s extracting reproducer from 7 programs testing a last program of every proc single: executing 2 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_GET_NEXT_ID-bpf$TOKEN_CREATE-bpf$PROG_LOAD-ioctl$sock_SIOCGIFINDEX-socket-ioctl$UBLK_U_CMD_END_USER_RECOVERY-ioctl$UBLK_U_CMD_END_USER_RECOVERY-syz_pidfd_open-bpf$BPF_LINK_CREATE_XDP-socket$inet_udp-socketpair$unix-openat$tcp_mem-setresuid-prlimit64-sched_setscheduler-ioprio_set$uid-sendfile-bind$inet-connect$inet-sendmmsg-socket$inet_sctp-setsockopt$IP_VS_SO_SET_ADD-bpf$BPF_GET_PROG_INFO detailed listing: executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xd2d, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) socket(0x1d, 0x2, 0x406) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000500)) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000580)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_pidfd_open(0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r1, r2, 0x25, 0x3, @val=@netfilter={0x5, 0x1, 0x7fffffff}}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioprio_set$uid(0x3, 0xee00, 0x0) sendfile(r4, r5, 0x0, 0x20000000000002) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0xe, 0xf, 0x57}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x38, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-setsockopt$inet_tcp_TCP_CONGESTION-bpf$MAP_CREATE-syz_genetlink_get_family_id$nl80211-getpgid-syz_clone-landlock_create_ruleset-landlock_restrict_self-kcmp-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_SET_WIPHY_NETNS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000003600000002000000ffff000005"], 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = getpgid(0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) kcmp(r3, r2, 0x1, r4, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r5], 0x48}}, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 7 programs with base timeout 6m0s testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30, 29, 6, 30, 11, 23] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc131480b6130d"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0)}}], 0x1, 0x0, 0x0) executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x18, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x85}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x80000000}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f00000000c0)='GPL\x00', 0x38, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0xa, 0x9, 0xc7a2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r0, 0x0, 0x11, 0x34, &(0x7f0000000240)="8f47cee0ade5ab0bfeb341d206cbce540e", &(0x7f0000000280)=""/52, 0x10, 0x0, 0xff, 0x1000, &(0x7f00000002c0)="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", &(0x7f00000003c0)="bbac310f0cafa154907aac59d48be2d36a1169584786959bec869403908a2cef1c31ba8881db161280d29fe7f489125d724024b14b874aa3cbdcbec46cb7c4217b82d22f40e5763f6874e4e97fa4f9284a4af544b68633fc8026e7f25ae5e47c436bc85cceb376cda81bc73a80dcaf9559cca5a2c81eef0ee1ea6de294812427ca12cd1097413832b662ebc5303d259e7f21a11647d6b9fa92d0ad87131f3e1feb35955f54f73100a22496856ae7eba6b9a1194dc26af53634ae3c13ac6a68fbaa83ef3991b714ba09c7779e9cee5d85d2cbd5077f055649d4efd86d41ec3c03a09aeae5107b4596cf11f5dc2c3c0c3e05c19d130d707946a7e1b3b48794cae55db3eddcd4b2f074e10352624e4548a3a23b0410b8faed7bd08e4f5e5121dcf27f255d9867e9aad3573a5fe40319da2c52fa3796d68c56ec9ca2343889404424ecba0e055f303255a17f1d91cb3885183027f1074e419ab11bbb98f4e9a32890858f01dd964f52ae0618fdd2ca05ebfc6cb7054103bd41a4621c060bb70bdc41f62e5065d22733b463eed8d2047abe29499b4e4d8afd493918f95f531c03bc803581b08299672307c1bc11be41a12783b28e5f3c76f46ef3071b8f6aa140df44090d71d5af6acd54f4a26bc97389ee3fd0f075ee4ad096b795743e5257bacfc457dd329863cab2cb06d7cfcfaea383379cdd6612cbc7e0ca0bcd3dba87c5ba14de0a637f05a3f4c03a0a6f5568ac898f23c29b5f3b1031e2ed4935ee72dfcb9af40943de5379277db728915aae209244d490048a0d1a21cd96e45f34f97f30488d04cdfa5aa204c5139b92e39389ee09c898e6f1fbf68f6f87286efcba621640c56137fdb6f0962b2cc7156d7fcc7692a1efe849642bea3f359b1b8e5cf6f5072d2740861d19cfc1770204fa94ca694f821be09bed1ccafe9121b3458ac99c39ab1bca8f33003cb2aefde2def7152b07ca2ac66709cd64a42da8af6ba3261d6bef7beb2defecc1160ece560f4651d63910aeb03af49f79ae3e6184004b98b1b8529e000c2f83034c19803a6e907c584ee5f8f4796e1dc5459bb45fe3efecc36f6d323dbb0afdc883efa152a7a2736b73b5f75826eafbda296f761e1bbfd1a7331313fc2d1650ca3aaa64e7d2ddd0659e66c910c2e4a9c3fb6c9095d347ea2333debf76150552b0f1de8bc18b7105be350a2a17da6bd4e9aca6c74f1a775d6e4bbcb574bba3eb6a7172da8abc410205b87cc971eff7a36c67b97c26668e5bbef6b7fe8850330eff4279947f1fa73622480264bd171373066c64ac3a8e3ad9ef560990203fcc20726c7eaeb37f7d10e2cd619d2219d1cdb2576d47f1cb811fa6b196cc085cb65c7b6abc2b7b79718e228a22f5bdeeea3191233315da0e1b2393cd67611482622754dc9d1734897b09c1fa53a1ec8b0979bc1c4578d356714dfc8dd0957b8de092248601ac72a184177076fdcc6eb3af78f0cf9f7e0bf3e782b7758027cd0791b74fcecbdb3f92a4ae107823890247fdad075fafe8b73f8cad95bd7b9961748d9775c9d33c604376ca22c01045d141dde61dbcbe1c4649502b1a9c406ea91c7e5f9523b7151db8c700ed920e5814b0cbd5ce57bba8c8fd9c0d9dfac1bfa8c5681f2124904bd7d486219f9386bc89956a54dc9627d8c9789ed77fb04ccf5f18b918391a07f790ce1729e2b7eef0811c355c8ffa95ecaa6ee19350a72e989ad90968f9de1f82b57198f8b247a07f166c88a19cb006d8b9d770669650b1627bda08baf30826370f6ed8847315e847fd019f2d26e5fe505dbf5217436d161d311f8c462b6b1a2856cb6c9d54c7b897fc855a4436512fb01815c8a2825ff1e8fa5ea0718fff9ef58e5244bebbc8243162c1a60a658e304fdb8b2a55666217249531ca01fa21e0e95747bbe5fc7ab57012d09152dc117e33204f30393990f24d01db3fa5690c5e10c3e9bcbc9fcf949895931758880499d531dc8a6e3401a50b852b00960f79bca27aa6ce01ab04c3d2818d6f2b1b8eb4251e1ebfaa547e53fcd18ee81b46bb21e8643b7e5d0d8adb63aacaeca2c4dfe15711072b85759f6c63ab2508a0ce01d41fa8ec70e74ccd71a087927c76d0b35a46e943cd56ee6a4629cf497b88e3164585f7610e93ae98b56f798f4e0f2657b561c64a47c7db7da50987ca221299a493b1cfdbcf35e5a40a393602ed3e9e98b30bf4d8eb124feb94c0f3b3e2d5aff37daa2a89a4eb2da554aed7e48f3195c2147803a976d78b232a38b4c4e9fbe602a565d95694ec50ba0303b09faa871d4099b440c994b873cc1031fdf262b6d8debef0d4a466a0af375d6000b1543074088b6904ab6b743120f762a0264b662753dfd967d58a9ae7588aa85383d807f6bf6173e1075363be279d25460f24e4f5eecb146995e8e26a64c4243eae7505d704d76731b56798f94df88580282981c57bf5fe10d808181884f7811477fad6f889a99d1d44f90ee10d8d1a66f0b19e9a60ff321a6f656cea7527cfbe3a9e571e0aef0efe96398e43fb68148733a887292e4e452fdd732a7fc96d2625bc27b10c2e903e1fb16e20dc143da512406be61dbd1a687d8cd19d59ef6aaa2c7c547e85b5cb36819bf03b3bde07d089e09f823abbfa24e6dc2ee9ec736b283a53f10fe0e55303242b6ed75a66d734233ce5d5f33868f07fac67e97f2b630db757379908078fd6069c47e9ffa12057bfa122e42f12fe19bc4869273d555159244731b0f457a3bb64922bf1fdfe7d1fd91d84d228d6a9b8bb9ded50dd7497b0f5d86100f57421eb6499cf22725db1c5007e54de1235159a51ee7106688ee68e199880b2865f5126db9a473d19be907dac140e0a50b52b2443eb46a512a4df0fa7d51ccd2d4f861e50da1ab9eb3d72f95ea655e4123ff3534a7cf347181f5e13de74d56c670a85604d5a63e9c9eb2d194b2d5df5b3e04e392a9098bbed4eb4c4378fb63b9a780303ab4ae3bf08a01939f3a8043895cb3bc398902e9fd3f04d8160d7efc6daef1cc16e2ea40966917df2f25c668bb3739623def460537c659f0e37107a836ea6445cc96abeb6d414eb57c09a2ce68d85b1ba60ab88748e5450f83b4fd2b8a7448a02c23320f54b688d051e0d4218b39abd7c12f97e7cab01022dbe84a5a213c28ae9824f55601ceea694a3588e39dfb364f690cb3a7f5acfbeb27755aec8e79d9f1946bc62a22660f086b464ffa7056638b8fc66342e95a366e300851c05c9b1280d2b974f05cdb0ca261ecbb911bbf864efb338bc851daf62b0a8d3ac2de8e9a72408b115ed9411a4df3b08f59ae85c09953856737b6dc16d41914504557e5d7d6c7e249e79c87a681ab5e92d519b99aa1e7310b7cd352f6fd77491ff224284d93959d11e729a3c05d5b4085f18f428354c9ee25923d3d4b8a2af190d72ba44b2b6d44d143d67b90ab14fa2f79841890ec1e99a0818a63fbe18d31518b29c59bc335550e6c3539624d9d8dbd10c73a26871dff01d0d69b690c8590f1d22fd079de2a881d0d9e283362569a35a98da7bb30a96e939d58c80fb5decdaf297416e8a6b93d7b439207b267d539a39dddbe6b65c62afe4a0f878ba14cee615f4ffa9219d4a2857322d12c33f00855845db726ae4ab18e72c796460c0fe7fccaf85dde4c889835b2fe2cf75632efcb2be63fe84f81279b87d7b7b9fbd77bcba7cf93983e42f80938d39fd3e1956a04f540aaa81c158c4cab11ea88a10efd1b65aa021b7faf88ecaa20ba728cd7ec975126235d724b64d183791f950e4498a75c6237a8882a601cc220f00ee04d00c0ec153087ddd476d08028c1c7e414006de9110448dba0bcc5a10b9bf79b2c0d84dad7dd71c55c383efbab4a11884b1c8a1abfc9063d7a084fa849fe6a98324bf9ad096942a7cd609d44d3e82926d35e427c83e1ed87c74559f0de977d8bcf718c17f1cf228ea161b4c438e717362cc2652e02266e9799083a52f08867ed82210fec88fbd253496c9a403332f4081c4a6286b08665cec330079041b1ff903188db9ab63ead47494c303b5ffa182edb8ddc4995b0317cab5751cdfdd6c0254227764c0e232f2804a64af28319fe13f9f73a5190633b7ad58a7c99762e8cea8dba9e3725304116b33b514e8526d58d0a02af75efc0a5ae0d5cb3aad4935d88bec3f245e232c10c1d81a7d3ae37c428049d5628d1ed075fb02e6e6d07df437332b6e577a2bbb6201cbc2998f3f2896ed43c0fb903257117627e2f68af6b976cd8d10e095d431dc01baf9a7cd585789589c31325415484affc9eb473c064833e1102d7d68524de0c1177d6e454da890acd110cb5dd8d9257e3bfddfa0d9b24a4c3e9e33c6828ad7c86aad900ee6984ed8e73f33fbd02c9fceb567a287866954a9251f3f03e7bc70f2d56dd60585177de5de0b24fa1aed56674c48fd2431261ed687f1baa08011607a7a9a1515579781d03a376b646a04d03da8a296dc3bf4dfe1c4f7b9818c701763c63fd443fcc3a9cd28a858694f37cd9aef8ee5f6b8c8d087cc52e85b5c80036d5a8d49b629e9f35048a7bb1e98a71140416ca7b63822969920992a6d37a091cdbfcc97057907042705e1c9f79ce3b55b8f9565a43767f615b7b9d25dc5097bc7c33f1a8783469dc05703d7040f5cb48303861cb7ce475b5965abf3855d9226926cd1edd359848a74e7efbf8daddf07eb8d718d2704c65a50841fbe4935f52ee9022ab79341f237fc14df4a2f56e562774c64312ff58f1b72978210c990faa876d78ab4e10918d78a8e4de87d22bf39e548747ac07d5dd375fe9f8a41ec43d86d83998c8b95a489ebfddad2dc06698bf0fd1fc91d9cd66fa3e03900fa22903867064da5c90c7b76a488ed62c1e7e85d4b633f44ef63f6c6c25be154bc5424ac615df244e4983ab5886491ec445e744bb9e2776c26222b3e15c8ad689d518a275ca4f094d8561961360dc5b330a1ef4dea758964faee48afe0d1e8531cfbad4fe911a37db7128f37963fae18cf6820ea5193feed64bd5cd28aff7c61fb301f1d8c9d80c0ff3411c7a52ec8381155d38d287852a26bc891b8b5e33e69ea4910e0d2ae2701cd4f9bb39d117faff0a1466b55ccf8b4ae4db8bfc40df5741e6133e61c70f43189877ee8b8a4cad62512daf972621fc7bb293dfae7b80bb53acb02815062b6b9c7680d0aa586cafd631a12c1136a6239653edff1c78a30a05467dd31f59d8e2eb0b6eaae57e31435d027c15eeecfa9d42c3361259cc3c7f0497d58db32b83a45c906e0dca5cd80db6ea9aa8bf8aa5b16750ab6113d7a1f316d56beefc553f88cc4bea3fb794d3312d2a122c7cffe3bcdd0cc36fb262dc6463fa1b852132a49cc61bd9715d7892a51a354c8473e77f69a3580e21704e92809754f6b8d44dedcb4174eb1ad1b32ba9af9a242605ff84537f822cbabe73f583570b1e7a04df510581b72cdb9bd96ac3605cdfe6b706713cc393445b06a57e4dd75fa1c0e2f95e78038f5eb7816c7e4f9847b15b6eaa28dacffd0e3d74e63974f34b8386d65434ff22140b3b2e1d777996219d2ee0fc2f0ddbe8ec25e8fc44413325949fcc33e22f67a5775db05a6d560f639c9557e59cebe2340d15d46d9f3ddc5cad0383679848add450aebb3e9ab451309b63d23a733fac327da56da4458c1c8b282170e9136e6ab1a94a20e174cfc37d6e1afede51d16289a2e47dcb24d2e3462da89ce1da405d94b43da831390872e28fe04b6536e393057845971b9dde6a5c7002aa531bcda3270356b7b95d66c68e99b2570bb4b02d7428c", 0x4, 0x0, 0x10}, 0x50) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000001440)=0x401, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001480)={0x0, 0x5, {0x0}, {0xee00}, 0x0, 0x5}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000014c0)={0xbb8e, 0xd, {0x0}, {0xee01}, 0x8, 0x3}) setpgid(r2, r3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000016c0)={0x0, r4}, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr={0x6}, @ptr={0xc, 0x0, 0x0, 0x2, 0x4}, @volatile={0x6, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61, 0x30, 0x5f, 0x30, 0x2e, 0x2e, 0x0, 0x0]}}, &(0x7f0000001580)=""/209, 0x46, 0xd1, 0x0, 0x7, 0x10000, @value=r5}, 0x28) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000001700)={0x8, 0x4eb2}) ioctl$XFS_IOC_FSGEOMETRY(r6, 0x8100587e, &(0x7f0000001740)) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001840), 0x80281, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000001880)={{0x1, 0x1, 0x18, r6, {0xfffffffa}}, './file0\x00'}) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x200000e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001940)={{r9, 0xffffffffffffffff}, &(0x7f00000018c0), &(0x7f0000001900)='%ps \x00'}, 0x20) close_range(r6, r10, 0x2) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000001980)) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200001b, 0x110, r9, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000019c0)={0x0, 0x4}, &(0x7f0000001a00)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001a40)={r11, 0xf, 0x4}, 0x8) r12 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r12, 0x40089413, &(0x7f0000001ac0)=0x744) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000001b00)={0x0, 0x5}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001b40)={r11, 0x9, 0x2}, 0x8) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000001b80)={0x4, 0x1000}, 0x4) read$mtd(r9, &(0x7f0000001bc0)=""/158, 0x9e) ioctl$KVM_GET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea3) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x9, 0x47, 0xfffffffc, 0x40000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000520001002adabd7000140000000a0000ffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) syz_usb_disconnect(r1) syz_usb_connect$rtl8150(0x0, 0x2e, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x15, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x40085503, &(0x7f0000000300)=0x18) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e1e, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaa22d98ed8a2da0d412443541aa9faaaaaaaaaaaaaa8000000000000000e500dcca78ac1414bbac1414aa4e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2010190780000"], 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2b4b0b8ed74a", @ANYRES16=r3, @ANYBLOB="01000000000000000000530000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00000000000600110000000000"], 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) r7 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) read(r7, 0x0, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050002000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b400000000024000480200001800d00010073796e70726f7879000000000c00028008000340000000050900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20020014}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) fcntl$setstatus(r1, 0x4, 0x2400) (async) write$uinput_user_dev(r1, &(0x7f0000000580)={'syz1\x00', {0x3, 0xd, 0x4, 0x58e}, 0x17, [0x0, 0x2, 0xfffffff8, 0x7, 0x2, 0x2, 0xe737, 0x6, 0xfff, 0x5, 0x9, 0xfffffffc, 0x51f, 0x68000000, 0x10001, 0x9, 0x580e, 0x4, 0x7, 0x80, 0x0, 0xb, 0x5, 0x85, 0x1, 0x3, 0x4c3a, 0x1, 0x4, 0x1, 0x10001, 0x9, 0x6, 0x1, 0x0, 0xfff, 0x9, 0x9, 0x7b0, 0x1, 0x3, 0x3, 0x8, 0x1, 0xfffff8ba, 0x6, 0x9, 0x1, 0xfffffffb, 0x7ff, 0xfffff001, 0x400, 0x305, 0xd, 0x0, 0x6, 0x6000000, 0x10, 0x0, 0x7, 0x6, 0x2, 0xee1, 0x4], [0x2, 0x9, 0x7, 0xfffffe96, 0x9, 0x0, 0x80, 0xa, 0x80, 0x3c, 0x0, 0x1, 0x1ff, 0xa, 0x8, 0x4, 0xfffffffc, 0x365e, 0x3ff, 0x10, 0x4, 0x80, 0x8, 0x2, 0x7fff, 0x3, 0x3, 0xffff, 0xfffffa65, 0x2, 0x7fffffff, 0x9, 0x9, 0x5, 0x8, 0x6, 0xb, 0xf7, 0xcc7, 0x7fffffff, 0x10, 0x2, 0xfffffffb, 0x40, 0x0, 0x590325d0, 0x2, 0x80000001, 0x9, 0x100000, 0x8, 0x4, 0x4, 0x1, 0x7, 0x100, 0x0, 0x0, 0x1d4, 0x8, 0x1, 0xfffffff9, 0xf7, 0x8], [0x8, 0x4cd, 0x3, 0x1, 0x3, 0x0, 0x1, 0x6, 0xffff, 0x4, 0x800, 0x101, 0xdce6, 0xa, 0xf, 0x8, 0x6, 0x1, 0x0, 0x101, 0x200, 0x22, 0xb, 0x0, 0x40, 0x0, 0xc, 0x9, 0xff, 0x37509810, 0x2, 0x0, 0xf2, 0x7ff, 0x7, 0xfffffffa, 0x24, 0x1, 0x3, 0x6, 0x8, 0x0, 0xe5, 0xfffffffa, 0x9, 0x7, 0x0, 0x9, 0x1, 0x4, 0xb, 0x4, 0x40, 0x6, 0x0, 0x7, 0x2d6c57e4, 0x8000, 0x7, 0x5, 0x6, 0x10, 0x7], [0x8000, 0x9, 0x32, 0x0, 0x7, 0x3, 0x6, 0x7f, 0x5, 0x7f, 0x4d1c, 0xffff, 0xfffff968, 0xee, 0x7, 0x1ff, 0x0, 0xfffffbff, 0x7, 0x101, 0xc80, 0x9, 0x9, 0x3, 0x7e, 0x71, 0x5, 0x1ff, 0x7, 0xfffffff8, 0x5, 0x8, 0x8d, 0x34, 0x9377, 0x4, 0x1, 0x6, 0x1ff, 0x1ff, 0x7ff, 0x40, 0xd, 0x4, 0x7, 0xffffffc0, 0x8, 0x4, 0x0, 0x65, 0x7e, 0x0, 0x1ea, 0x0, 0x800, 0x4, 0xc, 0x2, 0x10001, 0x7fffffff, 0x8, 0x1000, 0x0, 0xffffff7f]}, 0x45c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x334, r0, 0x10ada85e65c25349, 0x0, 0xfffffffe, {{0x67}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x320, 0x142, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1ff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x28, 0x10, 0x5, 0x1, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0xb, 0x1, 0x16, 0x18, 0x4, 0x12, 0x2, 0x2, 0x16, 0xc, 0x36]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x8}, {}]}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1b, 0x12, 0x60, 0x5, 0x4, 0xb, 0xb, 0x16, 0x36, 0x6, 0x9, 0x3, 0x48, 0x24, 0x5, 0x6c, 0x18, 0x30, 0x18, 0x30, 0x1, 0x16, 0x45, 0x48, 0x30, 0x6c, 0x1, 0x18, 0x5, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xd30a, 0xf96, 0x1000, 0x5, 0xe, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc616, 0x5, 0x101, 0x9, 0xf, 0x7, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x6, 0x2, 0x0, 0x26, 0x12, 0x6c, 0x6, 0x12, 0xc, 0x3, 0x24, 0x5, 0x30, 0x9, 0x4, 0x12, 0x1c, 0x60, 0x4, 0xc, 0x48, 0x4, 0x2, 0x2, 0x4, 0x1b, 0x1b, 0xb, 0x5, 0x6, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x2, 0x6, 0xa802, 0x400, 0x3, 0xffff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x1, 0x81, 0x2, 0x302, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xc7ac, 0x8, 0x4, 0x9, 0x0, 0x0, 0xbc9f]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{}, {0x0, 0x4}, {0x5, 0x4}, {0x2, 0x5}, {0x5, 0xa}, {0x7, 0x3}, {0x5, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x5}, {0x4}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x9}, {0x6, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x5, 0x7}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x6}, {0x5, 0x9}, {0x2, 0x8}, {0x6, 0x7}, {0x7, 0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0xa}, {0x5, 0x9}, {0x3, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x7, 0x1}, {0x1, 0xa}, {0x5, 0x9}, {0x7, 0x9}, {0x1, 0x9}, {0x6, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x6}, {0x5, 0xa}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x2}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x7}, {0x1, 0x7}, {0x5}, {0x0, 0xa}, {0x0, 0x19}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x1}, {0x2, 0x6}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0x2}, {0x3, 0x9}, {0x3, 0x6}, {0x5, 0x8}, {0x5, 0x2}, {0x6, 0x7}, {}, {0x5, 0xa}, {0x5, 0x6}, {0x7, 0x9}, {0x6, 0x3}, {}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x1}, {0x7, 0x7}, {0x7, 0x8}, {0x1, 0x5}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x6}, {0x7, 0xa}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x8}, {0x2, 0x3}, {0x4, 0x5}, {0x4, 0x5}, {0x7, 0x8}, {0x3, 0x6}, {0x4, 0x5}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x240, 0xff, 0x0, 0x4, 0x540c, 0x8, 0x401, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8, 0xf000, 0x6, 0x6, 0x1, 0x7, 0xffff, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x100, 0x98, 0x846, 0x140, 0x4, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2e52, 0x1, 0x400, 0xf0c9, 0x2, 0x802f, 0xbd6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x9, 0x7, 0x6, 0x0, 0x7, 0xe7ae, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{}, {0x0, 0x3}, {0x6, 0x1}]}]}]}]}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x40}, 0x0) executing program 2: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff61, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000003600000002000000ffff000005"], 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = getpgid(0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) kcmp(r3, r2, 0x1, r4, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r5], 0x48}}, 0x0) executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xd2d, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) socket(0x1d, 0x2, 0x406) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000500)) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000580)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_pidfd_open(0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r1, r2, 0x25, 0x3, @val=@netfilter={0x5, 0x1, 0x7fffffff}}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioprio_set$uid(0x3, 0xee00, 0x0) sendfile(r4, r5, 0x0, 0x20000000000002) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0xe, 0xf, 0x57}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x38, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) program crashed: INFO: task hung in do_get_write_access bisect: bisecting 7 programs bisect: split chunks (needed=false): <7> bisect: split chunk #0 of len 7 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 30, 11, 23] detailed listing: executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) fcntl$setstatus(r1, 0x4, 0x2400) (async) write$uinput_user_dev(r1, &(0x7f0000000580)={'syz1\x00', {0x3, 0xd, 0x4, 0x58e}, 0x17, [0x0, 0x2, 0xfffffff8, 0x7, 0x2, 0x2, 0xe737, 0x6, 0xfff, 0x5, 0x9, 0xfffffffc, 0x51f, 0x68000000, 0x10001, 0x9, 0x580e, 0x4, 0x7, 0x80, 0x0, 0xb, 0x5, 0x85, 0x1, 0x3, 0x4c3a, 0x1, 0x4, 0x1, 0x10001, 0x9, 0x6, 0x1, 0x0, 0xfff, 0x9, 0x9, 0x7b0, 0x1, 0x3, 0x3, 0x8, 0x1, 0xfffff8ba, 0x6, 0x9, 0x1, 0xfffffffb, 0x7ff, 0xfffff001, 0x400, 0x305, 0xd, 0x0, 0x6, 0x6000000, 0x10, 0x0, 0x7, 0x6, 0x2, 0xee1, 0x4], [0x2, 0x9, 0x7, 0xfffffe96, 0x9, 0x0, 0x80, 0xa, 0x80, 0x3c, 0x0, 0x1, 0x1ff, 0xa, 0x8, 0x4, 0xfffffffc, 0x365e, 0x3ff, 0x10, 0x4, 0x80, 0x8, 0x2, 0x7fff, 0x3, 0x3, 0xffff, 0xfffffa65, 0x2, 0x7fffffff, 0x9, 0x9, 0x5, 0x8, 0x6, 0xb, 0xf7, 0xcc7, 0x7fffffff, 0x10, 0x2, 0xfffffffb, 0x40, 0x0, 0x590325d0, 0x2, 0x80000001, 0x9, 0x100000, 0x8, 0x4, 0x4, 0x1, 0x7, 0x100, 0x0, 0x0, 0x1d4, 0x8, 0x1, 0xfffffff9, 0xf7, 0x8], [0x8, 0x4cd, 0x3, 0x1, 0x3, 0x0, 0x1, 0x6, 0xffff, 0x4, 0x800, 0x101, 0xdce6, 0xa, 0xf, 0x8, 0x6, 0x1, 0x0, 0x101, 0x200, 0x22, 0xb, 0x0, 0x40, 0x0, 0xc, 0x9, 0xff, 0x37509810, 0x2, 0x0, 0xf2, 0x7ff, 0x7, 0xfffffffa, 0x24, 0x1, 0x3, 0x6, 0x8, 0x0, 0xe5, 0xfffffffa, 0x9, 0x7, 0x0, 0x9, 0x1, 0x4, 0xb, 0x4, 0x40, 0x6, 0x0, 0x7, 0x2d6c57e4, 0x8000, 0x7, 0x5, 0x6, 0x10, 0x7], [0x8000, 0x9, 0x32, 0x0, 0x7, 0x3, 0x6, 0x7f, 0x5, 0x7f, 0x4d1c, 0xffff, 0xfffff968, 0xee, 0x7, 0x1ff, 0x0, 0xfffffbff, 0x7, 0x101, 0xc80, 0x9, 0x9, 0x3, 0x7e, 0x71, 0x5, 0x1ff, 0x7, 0xfffffff8, 0x5, 0x8, 0x8d, 0x34, 0x9377, 0x4, 0x1, 0x6, 0x1ff, 0x1ff, 0x7ff, 0x40, 0xd, 0x4, 0x7, 0xffffffc0, 0x8, 0x4, 0x0, 0x65, 0x7e, 0x0, 0x1ea, 0x0, 0x800, 0x4, 0xc, 0x2, 0x10001, 0x7fffffff, 0x8, 0x1000, 0x0, 0xffffff7f]}, 0x45c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x334, r0, 0x10ada85e65c25349, 0x0, 0xfffffffe, {{0x67}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x320, 0x142, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1ff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x28, 0x10, 0x5, 0x1, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0xb, 0x1, 0x16, 0x18, 0x4, 0x12, 0x2, 0x2, 0x16, 0xc, 0x36]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x8}, {}]}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1b, 0x12, 0x60, 0x5, 0x4, 0xb, 0xb, 0x16, 0x36, 0x6, 0x9, 0x3, 0x48, 0x24, 0x5, 0x6c, 0x18, 0x30, 0x18, 0x30, 0x1, 0x16, 0x45, 0x48, 0x30, 0x6c, 0x1, 0x18, 0x5, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xd30a, 0xf96, 0x1000, 0x5, 0xe, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc616, 0x5, 0x101, 0x9, 0xf, 0x7, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x6, 0x2, 0x0, 0x26, 0x12, 0x6c, 0x6, 0x12, 0xc, 0x3, 0x24, 0x5, 0x30, 0x9, 0x4, 0x12, 0x1c, 0x60, 0x4, 0xc, 0x48, 0x4, 0x2, 0x2, 0x4, 0x1b, 0x1b, 0xb, 0x5, 0x6, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x2, 0x6, 0xa802, 0x400, 0x3, 0xffff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x1, 0x81, 0x2, 0x302, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xc7ac, 0x8, 0x4, 0x9, 0x0, 0x0, 0xbc9f]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{}, {0x0, 0x4}, {0x5, 0x4}, {0x2, 0x5}, {0x5, 0xa}, {0x7, 0x3}, {0x5, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x5}, {0x4}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x9}, {0x6, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x5, 0x7}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x6}, {0x5, 0x9}, {0x2, 0x8}, {0x6, 0x7}, {0x7, 0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0xa}, {0x5, 0x9}, {0x3, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x7, 0x1}, {0x1, 0xa}, {0x5, 0x9}, {0x7, 0x9}, {0x1, 0x9}, {0x6, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x6}, {0x5, 0xa}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x2}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x7}, {0x1, 0x7}, {0x5}, {0x0, 0xa}, {0x0, 0x19}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x1}, {0x2, 0x6}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0x2}, {0x3, 0x9}, {0x3, 0x6}, {0x5, 0x8}, {0x5, 0x2}, {0x6, 0x7}, {}, {0x5, 0xa}, {0x5, 0x6}, {0x7, 0x9}, {0x6, 0x3}, {}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x1}, {0x7, 0x7}, {0x7, 0x8}, {0x1, 0x5}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x6}, {0x7, 0xa}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x8}, {0x2, 0x3}, {0x4, 0x5}, {0x4, 0x5}, {0x7, 0x8}, {0x3, 0x6}, {0x4, 0x5}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x240, 0xff, 0x0, 0x4, 0x540c, 0x8, 0x401, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8, 0xf000, 0x6, 0x6, 0x1, 0x7, 0xffff, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x100, 0x98, 0x846, 0x140, 0x4, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2e52, 0x1, 0x400, 0xf0c9, 0x2, 0x802f, 0xbd6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x9, 0x7, 0x6, 0x0, 0x7, 0xe7ae, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{}, {0x0, 0x3}, {0x6, 0x1}]}]}]}]}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x40}, 0x0) executing program 2: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff61, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000003600000002000000ffff000005"], 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = getpgid(0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) kcmp(r3, r2, 0x1, r4, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r5], 0x48}}, 0x0) executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xd2d, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) socket(0x1d, 0x2, 0x406) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000500)) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000580)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_pidfd_open(0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r1, r2, 0x25, 0x3, @val=@netfilter={0x5, 0x1, 0x7fffffff}}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioprio_set$uid(0x3, 0xee00, 0x0) sendfile(r4, r5, 0x0, 0x20000000000002) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0xe, 0xf, 0x57}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x38, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) program crashed: INFO: task hung in jbd2_journal_commit_transaction bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_GET_NEXT_ID-bpf$TOKEN_CREATE-bpf$PROG_LOAD-ioctl$sock_SIOCGIFINDEX-socket-ioctl$UBLK_U_CMD_END_USER_RECOVERY-ioctl$UBLK_U_CMD_END_USER_RECOVERY-syz_pidfd_open-bpf$BPF_LINK_CREATE_XDP-socket$inet_udp-socketpair$unix-openat$tcp_mem-setresuid-prlimit64-sched_setscheduler-ioprio_set$uid-sendfile-bind$inet-connect$inet-sendmmsg-socket$inet_sctp-setsockopt$IP_VS_SO_SET_ADD-bpf$BPF_GET_PROG_INFO detailed listing: executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xd2d, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) socket(0x1d, 0x2, 0x406) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000500)) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000580)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_pidfd_open(0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r1, r2, 0x25, 0x3, @val=@netfilter={0x5, 0x1, 0x7fffffff}}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioprio_set$uid(0x3, 0xee00, 0x0) sendfile(r4, r5, 0x0, 0x20000000000002) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0xe, 0xf, 0x57}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x38, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 30, 11] detailed listing: executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) fcntl$setstatus(r1, 0x4, 0x2400) (async) write$uinput_user_dev(r1, &(0x7f0000000580)={'syz1\x00', {0x3, 0xd, 0x4, 0x58e}, 0x17, [0x0, 0x2, 0xfffffff8, 0x7, 0x2, 0x2, 0xe737, 0x6, 0xfff, 0x5, 0x9, 0xfffffffc, 0x51f, 0x68000000, 0x10001, 0x9, 0x580e, 0x4, 0x7, 0x80, 0x0, 0xb, 0x5, 0x85, 0x1, 0x3, 0x4c3a, 0x1, 0x4, 0x1, 0x10001, 0x9, 0x6, 0x1, 0x0, 0xfff, 0x9, 0x9, 0x7b0, 0x1, 0x3, 0x3, 0x8, 0x1, 0xfffff8ba, 0x6, 0x9, 0x1, 0xfffffffb, 0x7ff, 0xfffff001, 0x400, 0x305, 0xd, 0x0, 0x6, 0x6000000, 0x10, 0x0, 0x7, 0x6, 0x2, 0xee1, 0x4], [0x2, 0x9, 0x7, 0xfffffe96, 0x9, 0x0, 0x80, 0xa, 0x80, 0x3c, 0x0, 0x1, 0x1ff, 0xa, 0x8, 0x4, 0xfffffffc, 0x365e, 0x3ff, 0x10, 0x4, 0x80, 0x8, 0x2, 0x7fff, 0x3, 0x3, 0xffff, 0xfffffa65, 0x2, 0x7fffffff, 0x9, 0x9, 0x5, 0x8, 0x6, 0xb, 0xf7, 0xcc7, 0x7fffffff, 0x10, 0x2, 0xfffffffb, 0x40, 0x0, 0x590325d0, 0x2, 0x80000001, 0x9, 0x100000, 0x8, 0x4, 0x4, 0x1, 0x7, 0x100, 0x0, 0x0, 0x1d4, 0x8, 0x1, 0xfffffff9, 0xf7, 0x8], [0x8, 0x4cd, 0x3, 0x1, 0x3, 0x0, 0x1, 0x6, 0xffff, 0x4, 0x800, 0x101, 0xdce6, 0xa, 0xf, 0x8, 0x6, 0x1, 0x0, 0x101, 0x200, 0x22, 0xb, 0x0, 0x40, 0x0, 0xc, 0x9, 0xff, 0x37509810, 0x2, 0x0, 0xf2, 0x7ff, 0x7, 0xfffffffa, 0x24, 0x1, 0x3, 0x6, 0x8, 0x0, 0xe5, 0xfffffffa, 0x9, 0x7, 0x0, 0x9, 0x1, 0x4, 0xb, 0x4, 0x40, 0x6, 0x0, 0x7, 0x2d6c57e4, 0x8000, 0x7, 0x5, 0x6, 0x10, 0x7], [0x8000, 0x9, 0x32, 0x0, 0x7, 0x3, 0x6, 0x7f, 0x5, 0x7f, 0x4d1c, 0xffff, 0xfffff968, 0xee, 0x7, 0x1ff, 0x0, 0xfffffbff, 0x7, 0x101, 0xc80, 0x9, 0x9, 0x3, 0x7e, 0x71, 0x5, 0x1ff, 0x7, 0xfffffff8, 0x5, 0x8, 0x8d, 0x34, 0x9377, 0x4, 0x1, 0x6, 0x1ff, 0x1ff, 0x7ff, 0x40, 0xd, 0x4, 0x7, 0xffffffc0, 0x8, 0x4, 0x0, 0x65, 0x7e, 0x0, 0x1ea, 0x0, 0x800, 0x4, 0xc, 0x2, 0x10001, 0x7fffffff, 0x8, 0x1000, 0x0, 0xffffff7f]}, 0x45c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x334, r0, 0x10ada85e65c25349, 0x0, 0xfffffffe, {{0x67}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x320, 0x142, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1ff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x28, 0x10, 0x5, 0x1, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0xb, 0x1, 0x16, 0x18, 0x4, 0x12, 0x2, 0x2, 0x16, 0xc, 0x36]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x8}, {}]}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1b, 0x12, 0x60, 0x5, 0x4, 0xb, 0xb, 0x16, 0x36, 0x6, 0x9, 0x3, 0x48, 0x24, 0x5, 0x6c, 0x18, 0x30, 0x18, 0x30, 0x1, 0x16, 0x45, 0x48, 0x30, 0x6c, 0x1, 0x18, 0x5, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xd30a, 0xf96, 0x1000, 0x5, 0xe, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc616, 0x5, 0x101, 0x9, 0xf, 0x7, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x6, 0x2, 0x0, 0x26, 0x12, 0x6c, 0x6, 0x12, 0xc, 0x3, 0x24, 0x5, 0x30, 0x9, 0x4, 0x12, 0x1c, 0x60, 0x4, 0xc, 0x48, 0x4, 0x2, 0x2, 0x4, 0x1b, 0x1b, 0xb, 0x5, 0x6, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x2, 0x6, 0xa802, 0x400, 0x3, 0xffff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x1, 0x81, 0x2, 0x302, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xc7ac, 0x8, 0x4, 0x9, 0x0, 0x0, 0xbc9f]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{}, {0x0, 0x4}, {0x5, 0x4}, {0x2, 0x5}, {0x5, 0xa}, {0x7, 0x3}, {0x5, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x5}, {0x4}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x9}, {0x6, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x5, 0x7}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x6}, {0x5, 0x9}, {0x2, 0x8}, {0x6, 0x7}, {0x7, 0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0xa}, {0x5, 0x9}, {0x3, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x7, 0x1}, {0x1, 0xa}, {0x5, 0x9}, {0x7, 0x9}, {0x1, 0x9}, {0x6, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x6}, {0x5, 0xa}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x2}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x7}, {0x1, 0x7}, {0x5}, {0x0, 0xa}, {0x0, 0x19}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x1}, {0x2, 0x6}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0x2}, {0x3, 0x9}, {0x3, 0x6}, {0x5, 0x8}, {0x5, 0x2}, {0x6, 0x7}, {}, {0x5, 0xa}, {0x5, 0x6}, {0x7, 0x9}, {0x6, 0x3}, {}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x1}, {0x7, 0x7}, {0x7, 0x8}, {0x1, 0x5}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x6}, {0x7, 0xa}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x8}, {0x2, 0x3}, {0x4, 0x5}, {0x4, 0x5}, {0x7, 0x8}, {0x3, 0x6}, {0x4, 0x5}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x240, 0xff, 0x0, 0x4, 0x540c, 0x8, 0x401, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8, 0xf000, 0x6, 0x6, 0x1, 0x7, 0xffff, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x100, 0x98, 0x846, 0x140, 0x4, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2e52, 0x1, 0x400, 0xf0c9, 0x2, 0x802f, 0xbd6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x9, 0x7, 0x6, 0x0, 0x7, 0xe7ae, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{}, {0x0, 0x3}, {0x6, 0x1}]}]}]}]}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x40}, 0x0) executing program 2: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff61, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000003600000002000000ffff000005"], 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = getpgid(0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) kcmp(r3, r2, 0x1, r4, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r5], 0x48}}, 0x0) program crashed: INFO: task hung in do_get_write_access bisect: the chunk can be dropped bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-setsockopt$inet_tcp_TCP_CONGESTION-bpf$MAP_CREATE-syz_genetlink_get_family_id$nl80211-getpgid-syz_clone-landlock_create_ruleset-landlock_restrict_self-kcmp-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_SET_WIPHY_NETNS detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000003600000002000000ffff000005"], 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = getpgid(0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) kcmp(r3, r2, 0x1, r4, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r5], 0x48}}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 30] detailed listing: executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) fcntl$setstatus(r1, 0x4, 0x2400) (async) write$uinput_user_dev(r1, &(0x7f0000000580)={'syz1\x00', {0x3, 0xd, 0x4, 0x58e}, 0x17, [0x0, 0x2, 0xfffffff8, 0x7, 0x2, 0x2, 0xe737, 0x6, 0xfff, 0x5, 0x9, 0xfffffffc, 0x51f, 0x68000000, 0x10001, 0x9, 0x580e, 0x4, 0x7, 0x80, 0x0, 0xb, 0x5, 0x85, 0x1, 0x3, 0x4c3a, 0x1, 0x4, 0x1, 0x10001, 0x9, 0x6, 0x1, 0x0, 0xfff, 0x9, 0x9, 0x7b0, 0x1, 0x3, 0x3, 0x8, 0x1, 0xfffff8ba, 0x6, 0x9, 0x1, 0xfffffffb, 0x7ff, 0xfffff001, 0x400, 0x305, 0xd, 0x0, 0x6, 0x6000000, 0x10, 0x0, 0x7, 0x6, 0x2, 0xee1, 0x4], [0x2, 0x9, 0x7, 0xfffffe96, 0x9, 0x0, 0x80, 0xa, 0x80, 0x3c, 0x0, 0x1, 0x1ff, 0xa, 0x8, 0x4, 0xfffffffc, 0x365e, 0x3ff, 0x10, 0x4, 0x80, 0x8, 0x2, 0x7fff, 0x3, 0x3, 0xffff, 0xfffffa65, 0x2, 0x7fffffff, 0x9, 0x9, 0x5, 0x8, 0x6, 0xb, 0xf7, 0xcc7, 0x7fffffff, 0x10, 0x2, 0xfffffffb, 0x40, 0x0, 0x590325d0, 0x2, 0x80000001, 0x9, 0x100000, 0x8, 0x4, 0x4, 0x1, 0x7, 0x100, 0x0, 0x0, 0x1d4, 0x8, 0x1, 0xfffffff9, 0xf7, 0x8], [0x8, 0x4cd, 0x3, 0x1, 0x3, 0x0, 0x1, 0x6, 0xffff, 0x4, 0x800, 0x101, 0xdce6, 0xa, 0xf, 0x8, 0x6, 0x1, 0x0, 0x101, 0x200, 0x22, 0xb, 0x0, 0x40, 0x0, 0xc, 0x9, 0xff, 0x37509810, 0x2, 0x0, 0xf2, 0x7ff, 0x7, 0xfffffffa, 0x24, 0x1, 0x3, 0x6, 0x8, 0x0, 0xe5, 0xfffffffa, 0x9, 0x7, 0x0, 0x9, 0x1, 0x4, 0xb, 0x4, 0x40, 0x6, 0x0, 0x7, 0x2d6c57e4, 0x8000, 0x7, 0x5, 0x6, 0x10, 0x7], [0x8000, 0x9, 0x32, 0x0, 0x7, 0x3, 0x6, 0x7f, 0x5, 0x7f, 0x4d1c, 0xffff, 0xfffff968, 0xee, 0x7, 0x1ff, 0x0, 0xfffffbff, 0x7, 0x101, 0xc80, 0x9, 0x9, 0x3, 0x7e, 0x71, 0x5, 0x1ff, 0x7, 0xfffffff8, 0x5, 0x8, 0x8d, 0x34, 0x9377, 0x4, 0x1, 0x6, 0x1ff, 0x1ff, 0x7ff, 0x40, 0xd, 0x4, 0x7, 0xffffffc0, 0x8, 0x4, 0x0, 0x65, 0x7e, 0x0, 0x1ea, 0x0, 0x800, 0x4, 0xc, 0x2, 0x10001, 0x7fffffff, 0x8, 0x1000, 0x0, 0xffffff7f]}, 0x45c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x334, r0, 0x10ada85e65c25349, 0x0, 0xfffffffe, {{0x67}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x320, 0x142, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1ff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x28, 0x10, 0x5, 0x1, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0xb, 0x1, 0x16, 0x18, 0x4, 0x12, 0x2, 0x2, 0x16, 0xc, 0x36]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x8}, {}]}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1b, 0x12, 0x60, 0x5, 0x4, 0xb, 0xb, 0x16, 0x36, 0x6, 0x9, 0x3, 0x48, 0x24, 0x5, 0x6c, 0x18, 0x30, 0x18, 0x30, 0x1, 0x16, 0x45, 0x48, 0x30, 0x6c, 0x1, 0x18, 0x5, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xd30a, 0xf96, 0x1000, 0x5, 0xe, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc616, 0x5, 0x101, 0x9, 0xf, 0x7, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x6, 0x2, 0x0, 0x26, 0x12, 0x6c, 0x6, 0x12, 0xc, 0x3, 0x24, 0x5, 0x30, 0x9, 0x4, 0x12, 0x1c, 0x60, 0x4, 0xc, 0x48, 0x4, 0x2, 0x2, 0x4, 0x1b, 0x1b, 0xb, 0x5, 0x6, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x2, 0x6, 0xa802, 0x400, 0x3, 0xffff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x1, 0x81, 0x2, 0x302, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xc7ac, 0x8, 0x4, 0x9, 0x0, 0x0, 0xbc9f]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{}, {0x0, 0x4}, {0x5, 0x4}, {0x2, 0x5}, {0x5, 0xa}, {0x7, 0x3}, {0x5, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x5}, {0x4}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x9}, {0x6, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x5, 0x7}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x6}, {0x5, 0x9}, {0x2, 0x8}, {0x6, 0x7}, {0x7, 0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0xa}, {0x5, 0x9}, {0x3, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x7, 0x1}, {0x1, 0xa}, {0x5, 0x9}, {0x7, 0x9}, {0x1, 0x9}, {0x6, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x6}, {0x5, 0xa}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x2}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x7}, {0x1, 0x7}, {0x5}, {0x0, 0xa}, {0x0, 0x19}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x1}, {0x2, 0x6}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0x2}, {0x3, 0x9}, {0x3, 0x6}, {0x5, 0x8}, {0x5, 0x2}, {0x6, 0x7}, {}, {0x5, 0xa}, {0x5, 0x6}, {0x7, 0x9}, {0x6, 0x3}, {}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x1}, {0x7, 0x7}, {0x7, 0x8}, {0x1, 0x5}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x6}, {0x7, 0xa}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x8}, {0x2, 0x3}, {0x4, 0x5}, {0x4, 0x5}, {0x7, 0x8}, {0x3, 0x6}, {0x4, 0x5}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x240, 0xff, 0x0, 0x4, 0x540c, 0x8, 0x401, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8, 0xf000, 0x6, 0x6, 0x1, 0x7, 0xffff, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x100, 0x98, 0x846, 0x140, 0x4, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2e52, 0x1, 0x400, 0xf0c9, 0x2, 0x802f, 0xbd6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x9, 0x7, 0x6, 0x0, 0x7, 0xe7ae, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{}, {0x0, 0x3}, {0x6, 0x1}]}]}]}]}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x40}, 0x0) executing program 2: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff61, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in do_get_write_access bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-prlimit64-sched_setscheduler-mkdirat-mount-openat-pwrite64-socket$inet6_mptcp-listen-ioctl$sock_SIOCINQ-bpf$MAP_CREATE_RINGBUF-bpf$BPF_BTF_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_GET_PROG_INFO-socket$nl_generic detailed listing: executing program 2: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff61, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in do_get_write_access bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 2: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff61, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-prlimit64-sched_setscheduler-mkdirat-mount-openat-pwrite64-socket$inet6_mptcp-listen-ioctl$sock_SIOCINQ-bpf$MAP_CREATE_RINGBUF-bpf$BPF_BTF_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_GET_PROG_INFO-socket$nl_generic detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff61, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in do_get_write_access bisect: concatenation succeeded found reproducer with 30 syscalls minimizing guilty program testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-prlimit64-sched_setscheduler-mkdirat-mount-openat-pwrite64-socket$inet6_mptcp-listen-ioctl$sock_SIOCINQ-bpf$MAP_CREATE_RINGBUF-bpf$BPF_BTF_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_GET_PROG_INFO detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff61, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-prlimit64-sched_setscheduler-mkdirat-mount-openat-pwrite64-socket$inet6_mptcp-listen-ioctl$sock_SIOCINQ-bpf$MAP_CREATE_RINGBUF-bpf$BPF_BTF_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_WITH_BTFID_LOAD detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff61, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-prlimit64-sched_setscheduler-mkdirat-mount-openat-pwrite64-socket$inet6_mptcp-listen-ioctl$sock_SIOCINQ-bpf$MAP_CREATE_RINGBUF-bpf$BPF_BTF_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff61, 0x0, 0x0, 0x0}, 0x94) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-prlimit64-sched_setscheduler-mkdirat-mount-openat-pwrite64-socket$inet6_mptcp-listen-ioctl$sock_SIOCINQ-bpf$MAP_CREATE_RINGBUF-bpf$BPF_BTF_LOAD detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-prlimit64-sched_setscheduler-mkdirat-mount-openat-pwrite64-socket$inet6_mptcp-listen-ioctl$sock_SIOCINQ-bpf$MAP_CREATE_RINGBUF detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-prlimit64-sched_setscheduler-mkdirat-mount-openat-pwrite64-socket$inet6_mptcp-listen-ioctl$sock_SIOCINQ detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-prlimit64-sched_setscheduler-mkdirat-mount-openat-pwrite64-socket$inet6_mptcp-listen detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-prlimit64-sched_setscheduler-mkdirat-mount-openat-pwrite64-socket$inet6_mptcp detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-prlimit64-sched_setscheduler-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-prlimit64-sched_setscheduler-mkdirat-mount-openat detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) program did not crash testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-prlimit64-sched_setscheduler-mkdirat-mount-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="02", 0x1, 0x4) program did not crash testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-prlimit64-sched_setscheduler-mkdirat-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) program did not crash testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-prlimit64-sched_setscheduler-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) program did not crash testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-prlimit64-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-io_uring_enter-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-write$P9_RSTATu-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-io_uring_enter-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-io_uring_setup-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-bpf$BPF_GET_MAP_INFO-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-bpf$PROG_LOAD_XDP-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-prctl$PR_SET_MM_MAP-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-socket-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-sendto$inet6-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-sendto$inet6-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-bind$inet6-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-socket$inet6_tcp-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pipe-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) pipe(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\xef\x0e\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) program did not crash testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) program did not crash testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) program did not crash testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) program did not crash testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x4) program did not crash testing program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x4) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine extracting C reproducer testing compiled C program (duration=6m51.80327792s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64 program did not crash simplifying guilty program options testing program (duration=6m51.80327792s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access extracting C reproducer testing compiled C program (duration=6m51.80327792s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64 program did not crash testing program (duration=6m51.80327792s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access extracting C reproducer testing compiled C program (duration=6m51.80327792s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64 program did not crash testing program (duration=6m51.80327792s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in jbd2_journal_commit_transaction validation run: crashed=true testing program (duration=6m51.80327792s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access validation run: crashed=true testing program (duration=6m51.80327792s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-pwrite64 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) program crashed: INFO: task hung in do_get_write_access validation run: crashed=true reproducing took 3h52m44.095715385s repro crashed as (corrupted=false): INFO: task kworker/u8:23:3325 blocked in I/O wait for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:23 state:D stack:22112 pid:3325 tgid:3325 ppid:2 task_flags:0x4248060 flags:0x00080000 Workqueue: writeback wb_workfn (flush-8:0) Call Trace: context_switch kernel/sched/core.c:5520 [inline] __schedule+0x16d9/0x5700 kernel/sched/core.c:7270 __schedule_loop kernel/sched/core.c:7347 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7362 io_schedule+0x80/0xe0 kernel/sched/core.c:8190 bit_wait_io+0x11/0xd0 kernel/sched/wait_bit.c:258 __wait_on_bit+0xac/0x2f0 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:106 [inline] do_get_write_access+0x671/0x1090 fs/jbd2/transaction.c:1113 jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263 __ext4_journal_get_write_access+0xf1/0x620 fs/ext4/ext4_jbd2.c:249 ext4_mb_mark_context+0x325/0xec0 fs/ext4/mballoc.c:4125 ext4_mb_mark_diskspace_used+0x338/0x760 fs/ext4/mballoc.c:4241 ext4_mb_new_blocks+0x106f/0x4540 fs/ext4/mballoc.c:6329 ext4_ext_map_blocks+0x13f1/0x5680 fs/ext4/extents.c:4469 ext4_map_create_blocks+0x116/0x530 fs/ext4/inode.c:630 ext4_map_blocks+0x791/0x12c0 fs/ext4/inode.c:823 mpage_map_one_extent fs/ext4/inode.c:2379 [inline] mpage_map_and_submit_extent fs/ext4/inode.c:2469 [inline] ext4_do_writepages+0x239b/0x4770 fs/ext4/inode.c:2938 ext4_writepages+0x241/0x3b0 fs/ext4/inode.c:3032 do_writepages+0x338/0x560 mm/page-writeback.c:2560 __writeback_single_inode+0x136/0x1230 fs/fs-writeback.c:1788 writeback_sb_inodes+0x9db/0x1ab0 fs/fs-writeback.c:2099 __writeback_inodes_wb+0x114/0x240 fs/fs-writeback.c:2175 wb_writeback+0x42f/0xad0 fs/fs-writeback.c:2286 wb_check_old_data_flush fs/fs-writeback.c:2390 [inline] wb_do_writeback fs/fs-writeback.c:2469 [inline] wb_workfn+0xc98/0x10f0 fs/fs-writeback.c:2497 process_one_work kernel/workqueue.c:3387 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3470 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3551 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task jbd2/sda1-8:4925 blocked in I/O wait for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jbd2/sda1-8 state:D stack:24944 pid:4925 tgid:4925 ppid:2 task_flags:0x240040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5520 [inline] __schedule+0x16d9/0x5700 kernel/sched/core.c:7270 __schedule_loop kernel/sched/core.c:7347 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7362 io_schedule+0x80/0xe0 kernel/sched/core.c:8190 bit_wait_io+0x11/0xd0 kernel/sched/wait_bit.c:258 __wait_on_bit+0xac/0x2f0 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67 wait_on_buffer include/linux/buffer_head.h:418 [inline] jbd2_journal_commit_transaction+0x2f26/0x5ba0 fs/jbd2/commit.c:834 kjournald2+0x3bc/0x750 fs/jbd2/journal.c:200 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task syz.0.92:6050 blocked in I/O wait for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.92 state:D stack:27584 pid:6050 tgid:6050 ppid:5816 task_flags:0x440040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5520 [inline] __schedule+0x16d9/0x5700 kernel/sched/core.c:7270 __schedule_loop kernel/sched/core.c:7347 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7362 io_schedule+0x80/0xe0 kernel/sched/core.c:8190 bit_wait_io+0x11/0xd0 kernel/sched/wait_bit.c:258 __wait_on_bit+0xac/0x2f0 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:106 [inline] do_get_write_access+0x671/0x1090 fs/jbd2/transaction.c:1113 jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263 __ext4_journal_get_write_access+0xf1/0x620 fs/ext4/ext4_jbd2.c:249 ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:6509 __ext4_mark_inode_dirty+0x146/0x7b0 fs/ext4/inode.c:6694 ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:6731 __mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2729 generic_update_time fs/inode.c:2253 [inline] file_update_time_flags+0x39f/0x450 fs/inode.c:2483 ext4_page_mkwrite+0x225/0x1150 fs/ext4/inode.c:6897 do_page_mkwrite+0x14a/0x310 mm/memory.c:3754 do_shared_fault mm/memory.c:6014 [inline] do_fault mm/memory.c:6076 [inline] do_pte_missing+0x734/0x28f0 mm/memory.c:4638 handle_pte_fault mm/memory.c:6496 [inline] __handle_mm_fault mm/memory.c:6645 [inline] handle_mm_fault+0xe81/0x2690 mm/memory.c:6814 do_user_addr_fault+0xa4f/0x1340 arch/x86/mm/fault.c:1343 handle_page_fault arch/x86/mm/fault.c:1483 [inline] exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0033:0x7f187d97ba23 RSP: 002b:00007ffe6bab6710 EFLAGS: 00010246 RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000001b30324000 RSI: 0000000000040000 RDI: 00007f187dcf0708 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe6bab69a0 Showing all locks held in the system: locks held by kworker/0:0H/11: 2, on CPU#0: #0: ffff88801d6f6138 ((wq_completion)kblockd){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff88801d6f6138 ((wq_completion)kblockd){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff88801d6f6138 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3352 [inline] #0: ffff88801d6f6138 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3470 #1: ffffc90000107c40 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #1: ffffc90000107c40 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #1: ffffc90000107c40 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3352 [inline] #1: ffffc90000107c40 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3470 locks held by khungtaskd/39: 1, last CPU#1: #0: ffffffff8e1c3740 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8e1c3740 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffffffff8e1c3740 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6793 locks held by kworker/u8:23/3325: 6, on CPU#1: #0: ffff88801f6ac938 ((wq_completion)writeback){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff88801f6ac938 ((wq_completion)writeback){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff88801f6ac938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3352 [inline] #0: ffff88801f6ac938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3470 #1: ffffc9000f12fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #1: ffffc9000f12fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #1: ffffc9000f12fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3352 [inline] #1: ffffc9000f12fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3470 #2: ffff8880368340e0 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 fs/super.c:688 #3: ffff8880365dcd98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: percpu_down_read include/linux/percpu-rwsem.h:77 [inline] #3: ffff8880365dcd98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages_down_read fs/ext4/ext4.h:1887 [inline] #3: ffff8880365dcd98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 fs/ext4/inode.c:3031 #4: ffff888036830bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 fs/jbd2/transaction.c:444 #5: ffff888044151918 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x77d/0x12c0 fs/ext4/inode.c:822 locks held by getty/5352: 2, on CPU#1: #0: ffff8880360b10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 drivers/tty/n_tty.c:2211 locks held by syz.0.92/6050: 3, on CPU#1: #0: ffff888040db61c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:310 #1: ffff888036834688 (sb_pagefaults){.+.+}-{0:0}, at: percpu_down_read_freezable include/linux/percpu-rwsem.h:83 [inline] #1: ffff888036834688 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs/super.h:19 [inline] #1: ffff888036834688 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline] #1: ffff888036834688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x203/0x1150 fs/ext4/inode.c:6896 #2: ffff888036830bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 fs/jbd2/transaction.c:444 locks held by syz-executor/6051: 3, on CPU#1: #0: ffff888036834510 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:494 #1: ffff88803fd647d8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1070 [inline] #1: ffff88803fd647d8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: __start_dirop fs/namei.c:2918 [inline] #1: ffff88803fd647d8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: start_dirop fs/namei.c:2942 [inline] #1: ffff88803fd647d8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 fs/namei.c:5092 #2: ffff888036830bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 fs/jbd2/transaction.c:444 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd7/0x1030 kernel/hung_task.c:561 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: fc 66 02 e9 53 d5 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ea 18 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffffff8de07ca0 EFLAGS: 00000242 RAX: 00000000000e4c01 RBX: ffffffff8199f170 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8d8bef33 RDI: ffffffff8bcbc080 RBP: ffffffff8de07d78 R08: ffff8880b8633d5b R09: 1ffff110170c67ab R10: dffffc0000000000 R11: ffffed10170c67ac R12: 0000000000000000 R13: 1ffffffff1bdedf0 R14: 1ffffffff1bc0f9c R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888125bf4000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005631851cb660 CR3: 000000000dfb0000 CR4: 00000000003526f0 Call Trace: arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 rest_init+0x378/0x3a0 init/main.c:723 start_kernel+0x392/0x3e0 init/main.c:1181 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x157 final repro crashed as (corrupted=false): INFO: task kworker/u8:23:3325 blocked in I/O wait for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:23 state:D stack:22112 pid:3325 tgid:3325 ppid:2 task_flags:0x4248060 flags:0x00080000 Workqueue: writeback wb_workfn (flush-8:0) Call Trace: context_switch kernel/sched/core.c:5520 [inline] __schedule+0x16d9/0x5700 kernel/sched/core.c:7270 __schedule_loop kernel/sched/core.c:7347 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7362 io_schedule+0x80/0xe0 kernel/sched/core.c:8190 bit_wait_io+0x11/0xd0 kernel/sched/wait_bit.c:258 __wait_on_bit+0xac/0x2f0 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:106 [inline] do_get_write_access+0x671/0x1090 fs/jbd2/transaction.c:1113 jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263 __ext4_journal_get_write_access+0xf1/0x620 fs/ext4/ext4_jbd2.c:249 ext4_mb_mark_context+0x325/0xec0 fs/ext4/mballoc.c:4125 ext4_mb_mark_diskspace_used+0x338/0x760 fs/ext4/mballoc.c:4241 ext4_mb_new_blocks+0x106f/0x4540 fs/ext4/mballoc.c:6329 ext4_ext_map_blocks+0x13f1/0x5680 fs/ext4/extents.c:4469 ext4_map_create_blocks+0x116/0x530 fs/ext4/inode.c:630 ext4_map_blocks+0x791/0x12c0 fs/ext4/inode.c:823 mpage_map_one_extent fs/ext4/inode.c:2379 [inline] mpage_map_and_submit_extent fs/ext4/inode.c:2469 [inline] ext4_do_writepages+0x239b/0x4770 fs/ext4/inode.c:2938 ext4_writepages+0x241/0x3b0 fs/ext4/inode.c:3032 do_writepages+0x338/0x560 mm/page-writeback.c:2560 __writeback_single_inode+0x136/0x1230 fs/fs-writeback.c:1788 writeback_sb_inodes+0x9db/0x1ab0 fs/fs-writeback.c:2099 __writeback_inodes_wb+0x114/0x240 fs/fs-writeback.c:2175 wb_writeback+0x42f/0xad0 fs/fs-writeback.c:2286 wb_check_old_data_flush fs/fs-writeback.c:2390 [inline] wb_do_writeback fs/fs-writeback.c:2469 [inline] wb_workfn+0xc98/0x10f0 fs/fs-writeback.c:2497 process_one_work kernel/workqueue.c:3387 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3470 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3551 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task jbd2/sda1-8:4925 blocked in I/O wait for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jbd2/sda1-8 state:D stack:24944 pid:4925 tgid:4925 ppid:2 task_flags:0x240040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5520 [inline] __schedule+0x16d9/0x5700 kernel/sched/core.c:7270 __schedule_loop kernel/sched/core.c:7347 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7362 io_schedule+0x80/0xe0 kernel/sched/core.c:8190 bit_wait_io+0x11/0xd0 kernel/sched/wait_bit.c:258 __wait_on_bit+0xac/0x2f0 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67 wait_on_buffer include/linux/buffer_head.h:418 [inline] jbd2_journal_commit_transaction+0x2f26/0x5ba0 fs/jbd2/commit.c:834 kjournald2+0x3bc/0x750 fs/jbd2/journal.c:200 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task syz.0.92:6050 blocked in I/O wait for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.92 state:D stack:27584 pid:6050 tgid:6050 ppid:5816 task_flags:0x440040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5520 [inline] __schedule+0x16d9/0x5700 kernel/sched/core.c:7270 __schedule_loop kernel/sched/core.c:7347 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7362 io_schedule+0x80/0xe0 kernel/sched/core.c:8190 bit_wait_io+0x11/0xd0 kernel/sched/wait_bit.c:258 __wait_on_bit+0xac/0x2f0 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0x13b/0x190 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:106 [inline] do_get_write_access+0x671/0x1090 fs/jbd2/transaction.c:1113 jbd2_journal_get_write_access+0x1d7/0x230 fs/jbd2/transaction.c:1263 __ext4_journal_get_write_access+0xf1/0x620 fs/ext4/ext4_jbd2.c:249 ext4_reserve_inode_write+0x294/0x360 fs/ext4/inode.c:6509 __ext4_mark_inode_dirty+0x146/0x7b0 fs/ext4/inode.c:6694 ext4_dirty_inode+0xd0/0x110 fs/ext4/inode.c:6731 __mark_inode_dirty+0x3a8/0x13b0 fs/fs-writeback.c:2729 generic_update_time fs/inode.c:2253 [inline] file_update_time_flags+0x39f/0x450 fs/inode.c:2483 ext4_page_mkwrite+0x225/0x1150 fs/ext4/inode.c:6897 do_page_mkwrite+0x14a/0x310 mm/memory.c:3754 do_shared_fault mm/memory.c:6014 [inline] do_fault mm/memory.c:6076 [inline] do_pte_missing+0x734/0x28f0 mm/memory.c:4638 handle_pte_fault mm/memory.c:6496 [inline] __handle_mm_fault mm/memory.c:6645 [inline] handle_mm_fault+0xe81/0x2690 mm/memory.c:6814 do_user_addr_fault+0xa4f/0x1340 arch/x86/mm/fault.c:1343 handle_page_fault arch/x86/mm/fault.c:1483 [inline] exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0033:0x7f187d97ba23 RSP: 002b:00007ffe6bab6710 EFLAGS: 00010246 RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000001b30324000 RSI: 0000000000040000 RDI: 00007f187dcf0708 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe6bab69a0 Showing all locks held in the system: locks held by kworker/0:0H/11: 2, on CPU#0: #0: ffff88801d6f6138 ((wq_completion)kblockd){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff88801d6f6138 ((wq_completion)kblockd){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff88801d6f6138 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3352 [inline] #0: ffff88801d6f6138 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3470 #1: ffffc90000107c40 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #1: ffffc90000107c40 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #1: ffffc90000107c40 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3352 [inline] #1: ffffc90000107c40 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3470 locks held by khungtaskd/39: 1, last CPU#1: #0: ffffffff8e1c3740 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8e1c3740 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffffffff8e1c3740 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6793 locks held by kworker/u8:23/3325: 6, on CPU#1: #0: ffff88801f6ac938 ((wq_completion)writeback){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff88801f6ac938 ((wq_completion)writeback){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff88801f6ac938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3352 [inline] #0: ffff88801f6ac938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3470 #1: ffffc9000f12fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #1: ffffc9000f12fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #1: ffffc9000f12fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3352 [inline] #1: ffffc9000f12fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3470 #2: ffff8880368340e0 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 fs/super.c:688 #3: ffff8880365dcd98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: percpu_down_read include/linux/percpu-rwsem.h:77 [inline] #3: ffff8880365dcd98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages_down_read fs/ext4/ext4.h:1887 [inline] #3: ffff8880365dcd98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 fs/ext4/inode.c:3031 #4: ffff888036830bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 fs/jbd2/transaction.c:444 #5: ffff888044151918 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x77d/0x12c0 fs/ext4/inode.c:822 locks held by getty/5352: 2, on CPU#1: #0: ffff8880360b10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 drivers/tty/n_tty.c:2211 locks held by syz.0.92/6050: 3, on CPU#1: #0: ffff888040db61c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:310 #1: ffff888036834688 (sb_pagefaults){.+.+}-{0:0}, at: percpu_down_read_freezable include/linux/percpu-rwsem.h:83 [inline] #1: ffff888036834688 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs/super.h:19 [inline] #1: ffff888036834688 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline] #1: ffff888036834688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x203/0x1150 fs/ext4/inode.c:6896 #2: ffff888036830bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 fs/jbd2/transaction.c:444 locks held by syz-executor/6051: 3, on CPU#1: #0: ffff888036834510 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:494 #1: ffff88803fd647d8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1070 [inline] #1: ffff88803fd647d8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: __start_dirop fs/namei.c:2918 [inline] #1: ffff88803fd647d8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: start_dirop fs/namei.c:2942 [inline] #1: ffff88803fd647d8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 fs/namei.c:5092 #2: ffff888036830bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 fs/jbd2/transaction.c:444 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd7/0x1030 kernel/hung_task.c:561 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: fc 66 02 e9 53 d5 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ea 18 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffffff8de07ca0 EFLAGS: 00000242 RAX: 00000000000e4c01 RBX: ffffffff8199f170 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8d8bef33 RDI: ffffffff8bcbc080 RBP: ffffffff8de07d78 R08: ffff8880b8633d5b R09: 1ffff110170c67ab R10: dffffc0000000000 R11: ffffed10170c67ac R12: 0000000000000000 R13: 1ffffffff1bdedf0 R14: 1ffffffff1bc0f9c R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888125bf4000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005631851cb660 CR3: 000000000dfb0000 CR4: 00000000003526f0 Call Trace: arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 rest_init+0x378/0x3a0 init/main.c:723 start_kernel+0x392/0x3e0 init/main.c:1181 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x157